10918 matches found
SUSE-SU-2021:0628-1 Security update for salt
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd bsc1182740 - Allow extrafilerefs as sanitized kwargs for SSH client - Fix errors with virt.update - Fix for multiple for security issues CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-31...
SUSE-SU-2021:0626-1 Security update for py26-compat-salt
This update for py26-compat-salt fixes the following issues: - Allow extrafilerefs as sanitized kwargs for SSH client - Fix for multiple for security issues CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-3148 CVE-2021-3144 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283 CVE-2021-25284...
Mozilla Thunderbird < 78.8
The version of Thunderbird installed on the remote Windows host is prior to 78.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-09 advisory. - Mozilla developers Alexis Beingessner, Tyson Smith, Nika Layzell, and Mats Palmgren reported memory safety bugs...
USN-4739-1: WebKitGTK vulnerability
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...
HackerOne: HackerOne Jira integration plugin Leaked JWT to unauthorized jira users
Summary: HackerOne provides an application tool HackerOne for Jira, an application that allows programs to track security issues through a jira instance. After testing the integration feature in the application, it was found that the application leads to the leakage of the JWT to unauthorized...
SUSE-SU-2021:0367-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-22 fixes several issues. The following security issues were fixed: - CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locatio...
SUSE-SU-2021:0344-1 Security update for python3
This update for python3 fixes the following issues: - Provide the newest setuptools wheel bsc1176262, CVE-2019-20916 in their correct form bsc1180686...
OPENSUSE-SU-2021:0237-1 Security update for rubygem-nokogiri
This update for rubygem-nokogiri fixes the following issues: rubygem-nokogiri was updated to 1.8.5 bsc1156722. Security issues fixed: - CVE-2019-5477: Fixed a command injection vulnerability bsc1146578. - CVE-2020-26247: Fixed an XXE vulnerability in Nokogiri::XML::Schema bsc1180507. This update...
USN-4717-1: Firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, conduct clickjacking attacks, or execute arbitrary code...
USN-4716-1: MySQL vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.23 in Ubuntu 20.04 LTS and Ubuntu 20.10. Ubuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.33. In addition to security fixes...
OPENSUSE-SU-2021:0198-1 Security update for segv_handler
This update for segvhandler fixes the following issues: - Replace by empty package with README explaining the removal for security reasons boo1180665...
OPENSUSE-SU-2021:0192-1 Security update for go1.15
This update for go1.15 fixes the following issues: Go was updated to version 1.15.7 bsc1175132. Security issues fixed: - CVE-2021-3114: Fixed incorrect operations on the P-224 curve in crypto/elliptic bsc1181145. - CVE-2021-3115: Fixed a potential arbitrary code execution in the build process...
CVE-2021-21278 Risk of code injection in RSSHub
RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 non-semantic versioning there is a risk of code injection. Some routes use eval or Function constructor, which may be injected by the target site with unsafe code, causing server-side securi...
CVE-2020-36205
An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur...
OPENSUSE-SU-2021:0154-1 Security update for wavpack
This update for wavpack fixes the following issues: - Update to version 5.4.0 CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 fixed: disable A32 asm code when building for Apple silicon fixed: issues with Adobe-style floating-point WAV files added: --normalize-floats...
SUSE-SU-2021:0184-1 Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2020-29385: Fixed an infinite loop in lzw.c in the function writeindexes bsc1180393. - Fixed an integer underflow in the GIF loader bsc1174307...
CVE-2021-2088 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2021-2081 vulnerabilities
Vulnerabilities for packages: mysql...