1874 matches found
May 12, 2020—KB4556799 (OS Builds 18362.836 and 18363.836) - EXPIRED
None None...
SUSE-SU-2020:1546-1 Security update for php72
This update for php72 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exifreaddata bsc1168326. - CVE-2020-7066: Fixed URL truncation getheaders if the URL contains zero \0 character bsc1168352. - CVE-2019-11048: Improved the handling of overly long...
CVE-2020-9859
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges. Recent assessments:...
Nutanix: AWS S3 bucket writeable for authenticated AWS users
S3 bucket permissions were not configured correctly, allowing any authenticated AWS user to delete and write files. Nutanix didn't properly configure one of their S3 buckets permissions and inadvertently allowed any authenticated AWS user to delete and write files. An attacker could post a...
Fedora 31 : oddjob (2020-b1fa09aa64)
This update includes a security fix for CVE-2020-10737. Additionally, From 0.34.6 : - update license on src/buffer.h - changes '/var/run' to '/run' in systemd service file Orion Poplawski, 1834511 From 0.34.5 : - apply patch from Matthias Gerstner of the SUSE security team to fix a possible race...
May 12, 2020—KB4556826 (OS Build 10240.18575)
None None...
OPENSUSE-SU-2020:0628-1 Security update for sqliteodbc
This update for sqliteodbc fixes the following issues: Security issue fixed: - CVE-2020-12050: Fixed a privilege escalation vulnerability boo1171041. Non-security issues fixed: - Update to version 0.9996 update to SQLite 3.22.0 fixes in handling DDL in SQLExecDirect et.al., thanks Andre Mikulec f...
openSUSE Security Update : git (openSUSE-2020-598)
This update for git fixes the following issues : Security issues fixed : - CVE-2020-11008: Specially crafted URLs may have tricked the credentials helper to providing credential information that is not appropriate for the protocol in use and host being contacted bsc1169936 git was updated to 2.26...
openSUSE Security Update : vlc (openSUSE-2020-545)
This update for vlc fixes the following issues : vlc was updated to version 3.0.9.2 : + Misc: Properly bump the version in configure.ac. Changes from version 3.0.9.1 : + Misc: Fix VLSub returning 401 for earch request. Changes from version 3.0.9 : + Core: Work around busy looping when playing an...
Security update for vlc (moderate)
openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2020:0545-1 Rating: moderate References: 1142161 1146428 Cross-References: CVE-2019-13602 CVE-2019-13962 CVE-2019-14437 CVE-2019-14438 CVE-2019-14498 CVE-2019-14533 CVE-2019-14534 CVE-2019-14535 CVE-2019-14776...
Make use of Secure Introspector in Velocity Templates - CVE-2019-20409
This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented. The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote...
Make use of Secure Introspector in Velocity Templates - CVE-2019-20409
This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented. The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote...
Template injection in Web Resources Manager - CVE-2020-14172
This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented. The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.1 allowed remote attackers to achieve remo...
Template injection in Web Resources Manager - CVE-2020-14172
This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented. The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.1 allowed remote attackers to achieve remo...
Description of the Visio 2010 Viewer update: September 10, 2013
Description of the Visio 2010 Viewer update: September 10, 2013 INTRODUCTION Microsoft has released an update for Microsoft Visio 2010 Viewer. This update provides the latest fix for the 32-bit and 64-bit editions of Visio 2010 Viewer. Additionally, this update contains stability and performance...
Description of the Office 2013 update: March 12, 2013
Description of the Office 2013 update: March 12, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains stability and performance improvements. Issu...
Description of the Office 2010 update: December 13, 2011
Description of the Office 2010 update: December 13, 2011 INTRODUCTION Microsoft has released an update for Microsoft Office 2010. This update provides the latest fixes for the 32-bit and the 64-bit editions of Office 2010. Additionally, this update contains stability and performance improvements...
SUSE-SU-2020:1021-1 Security update for libqt4
This update for libqt4 fixes the following issues: - CVE-2018-15518: Fixed a double free in QXmlStreamReader bsc1118595 - CVE-2018-19873: Fixed a segmantation fault via a malformed BMP file bsc1118596. - CVE-2018-19869: Fixed an improper checking which might lead to a crach via a malformed url...
Description of the Microsoft Office 2008 for Mac 12.1.3 Update
Describes the changes that the Office 2008 for Mac 12.1.3 Update makes to Office 2008 for Mac programs.INTRODUCTIONMicrosoft has released security bulletin MS08-057. This security bulletin contains all the relevant information about the security updates for Microsoft Office 2008 for Mac. To view...