OPENSUSE-SU-2021:1554-1 Security update for glib-networking

This update for glib-networking fixes the following issues: Update to version 2.62.4: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460. This update was imported from the SUSE:SLE-15-SP2:Update update project...

Security update for glib-networking (important)

openSUSE Security Update: Security update for glib-networking Announcement ID: openSUSE-SU-2021:1554-1 Rating: important References: 1172460 Cross-References: CVE-2020-13645 CVSS scores: CVE-2020-13645 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2020-13645 SUSE: 6.5...

Oracle Linux 8 : virt:ol / and / virt-devel:ol (ELSA-2021-4191)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4191 advisory. - security: fix SELinux label generation logic CVE-2021-3631 - storagedriver: Unlock object on ACL fail in storagePoolLookupByTargetPath CVE-2021-3667 ...

Security Bulletin: Jan 2020 : Multiple vulnerabilities in IBM Java Runtime affect CICS Transaction Gateway

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 7.0, 7.1 and 8.0 used by CICS Transaction Gateway. CICS Transaction Gateway has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2593 DESCRIPTION: An unspecified vulnerability in Java SE...

SUSE: Security Advisory (SUSE-SU-2021:3944-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : glib-networking (openSUSE-SU-2021:3944-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3944-1 advisory. - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if...

openSUSE: Security Advisory for glib-networking (openSUSE-SU-2021:3944-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : glib-networking (SUSE-SU-2021:3944-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3944-1 advisory. Update to version 2.62.4: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460. Tenable has extracted the...

SUSE-SU-2021:3944-1 Security update for glib-networking

This update for glib-networking fixes the following issues: Update to version 2.62.4: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460...

OPENSUSE-SU-2021:3944-1 Security update for glib-networking

This update for glib-networking fixes the following issues: Update to version 2.62.4: - CVE-2020-13645: Fixed a connection failure when the server identity is unset bsc1172460...

Security update for glib-networking (important)

openSUSE Security Update: Security update for glib-networking Announcement ID: openSUSE-SU-2021:3944-1 Rating: important References: 1172460 Cross-References: CVE-2020-13645 CVSS scores: CVE-2020-13645 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2020-13645 SUSE: 6.5...

Security Bulletin: CVE-2021-2341 may affect IBM® SDK, Java™ Technology Edition

Summary CVE-2021-2341 was disclosed as part of the Oracle July 2021 Critical Patch Update. Vulnerability Details CVEID: CVE-2021-2341 DESCRIPTION: An unspecified vulnerability in Java SE related to the Networking component could allow an unauthenticated attacker to obtain sensitive information...

Dell Networking X-Series HOST Injection Vulnerability

Dell Networking X-Series is a series of intelligent managed switches from Dell, U.S. A HOST injection vulnerability exists in Dell Networking X-Series, which can be exploited by remote, unauthenticated attackers to poison web caches or trigger redirects by injecting arbitrary host header values...

Dell Networking OS10 Resource Management Error Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. Dell Networking OS10 is vulnerable to a resource management error that could be exploited by attackers to cause a denial of service...

Dell Networking X-Series Input Validation Error Vulnerability

Dell Networking X-Series is a series of intelligent managed switches from Dell, U.S.A. The Dell Networking X-Series is vulnerable to an input validation error that could be exploited by a remote, unauthenticated attacker to trigger a denial of service by sending specially crafted data...

Dell Networking OS10 Information Disclosure Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL, Inc. Dell Networking OS10 is vulnerable to information disclosure, which can be exploited by a low-privilege authenticated attacker to gain access to SNMP authentication failure messages...

Dell Networking X-Series Authentication Bypass Vulnerability

Dell Networking X-Series is a series of intelligent managed switches from Dell, Inc. An authentication bypass vulnerability exists in Dell Networking X-Series, which can be exploited by remote, unauthenticated attackers to hijack sessions and access network servers by spoofing session IDs...

Dell Networking OS10 Authentication Bypass Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. Dell Networking OS10 is vulnerable to an authentication bypass vulnerability that could be exploited by attackers to gain access to the affected system and perform operations...

Dell Networking OS10 Elevation of Privilege Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. An elevation of privilege vulnerability exists in Dell Networking OS10, which could be exploited by an attacker with specific API access to gain administrator privileges on the affected system...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Installation Manager and IBM Packaging Utility

Summary There is a vulnerability in IBM Runtime Environment Java Version 8 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVE. Vulnerability Details CVEID: CVE-2021-2341 DESCRIPTION: An unspecified...