[ASA-202108-4] chromium: multiple issues

Arch Linux Security Advisory ASA-202108-4 ========================================= Severity: High Date : 2021-08-03 CVE-ID : CVE-2021-30590 CVE-2021-30591 CVE-2021-30592 CVE-2021-30593 CVE-2021-30594 CVE-2021-30596 CVE-2021-30597 Package : chromium Type : multiple issues Remote : Yes Link :...

SUSE-SU-2021:2560-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19756 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. bsc1188062 - CVE-2021-22555: Fixed an heap out-of-bounds write in...

USN-5024-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Ubuntu: Security Advisory (USN-5022-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-202107-72] 389-ds-base: multiple issues

Arch Linux Security Advisory ASA-202107-72 ========================================== Severity: Medium Date : 2021-07-27 CVE-ID : CVE-2021-3514 CVE-2021-3652 Package : 389-ds-base Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2206 Summary ======= The package...

USN-5022-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.26 in Ubuntu 20.04 LTS and Ubuntu 21.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.35. In addition to security fixes, the updated packages...

OPENSUSE-SU-2021:1087-1 Security update for crmsh

This update for crmsh fixes the following issues: Update to version 4.3.1+20210624.67223df2: - Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node bsc1187553 - Fix: history: use Path.mkdir instead of mkdir commandbsc1179999, CVE-2020-35459 - Dev: crashtest: Add...

SUSE-SU-2021:2453-1 Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-12251 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. bsc1187597 - CVE-2021-23133: Fixed...

CVE-2021-2352 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE-SU-2021:2440-1 Security update for curl

This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. bsc1188220 - CVE-2021-22924: Bad connection reuse due to flawed path name checks. bsc1188219 - CVE-2021-22923: Insufficiently Protected Credentials. bsc1188218 - CVE-2021-22922: Wrong conten...

[ASA-202107-61] libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-202107-61 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-22924 CVE-2021-22925 Package : libcurl-compat Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2196 Summary ======= The package...

OpenJDK 7 <= 7u301 / 8 <= 8u292 / 11.0.0 <= 11.0.11 / 13.0.0 <= 13.0.7 / 15.0.0 <= 15.0.3 / 16.0.0 <= 16.0.1 Multiple Vulnerabilities (2021-07-20)

The version of OpenJDK installed on the remote host is prior to 7 = 7u301 / 8 = 8u292 / 11.0.0 = 11.0.11 / 13.0.0 = 13.0.7 / 15.0.0 = 15.0.3 / 16.0.0 = 16.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021-07-20 advisory. Note that Nessus has not tested for this...

[ASA-202107-60] lib32-curl: multiple issues

Arch Linux Security Advisory ASA-202107-60 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-22924 CVE-2021-22925 Package : lib32-curl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2195 Summary ======= The package...

SUSE-SU-2021:2407-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/xtables.c that could allow local provilege escalation. bnc1188116 - CVE-2021-33909: Fixed an...

USN-5011-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, overlay text over another domain, or execute arbitrary code...

OPENSUSE-SU-2021:2354-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: Update nodejs14 to 14.17.2. Including fixes for: - CVE-2021-22918: libuv upgrade - Out of bounds read bsc1187973 - CVE-2021-27290: ssri Regular Expression Denial of Service bsc1187976 - CVE-2021-23362: hosted-git-info Regular Expression Denial ...

SUSE-SU-2021:2344-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19748 fixes several issues. The following security issues were fixed: - CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. bsc1187687 - CVE-2021-0512: Fixed a...

[ASA-202107-23] ruby: multiple issues

Arch Linux Security Advisory ASA-202107-23 ========================================== Severity: High Date : 2021-07-14 CVE-ID : CVE-2021-31810 CVE-2021-32066 Package : ruby Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2138 Summary ======= The package ruby before...

Cumulative Update 10 for Exchange Server 2019 (KB5003612)

None None...

CVE-2021-32753

EdgeX Foundry’s CVE-2021-32753 affects Edinburgh, Fuji, Geneva, and Hanoi releases. When the EdgeX API gateway is configured for OAuth2 authentication and a proxy user exists, the proxy username is used as both the client_id and client_secret, enabling a remote attacker to perform a dictionary-ba...