3304 matches found
CVE-2020-1971 vulnerabilities
Vulnerabilities for packages: mysql...
OPENSUSE-SU-2020:2160-1 Security update for minidlna
This update for minidlna fixes the following issues: minidlna was updated to version 1.3.0 boo1179447 - Fixed some build warnings when building with musl. - Use $USER instead of $LOGNAME for the default friendly name. - Fixed build with GCC 10 - Fixed some warnings from newer compilers - Disallow...
CVE-2020-26406
Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposed through GraphQL to non-members of public projects with repository visibility restricted as well as guest members on private projects. Affected versions are:...
OPENSUSE-SU-2020:1937-1 Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.183 boo1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data...
OPENSUSE-SU-2020:1869-1 Security update for u-boot
This update for u-boot fixes the following issues: - CVE-2020-8432: Fixed a double free in the cmd/gpt.c dorenamegptparts function, which allowed an attacker to execute arbitrary code bsc1162198 - CVE-2020-10648: Fixed improper signature verification during verified boot bsc1167209. This update w...
OPENSUSE-SU-2020:1811-1 Security update for samba
This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records bsc1177613. - CVE-2020-14323: Unprivileged user can crash winbind bsc1173994. - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify...
SUSE-SU-2020:3054-1 Security update for pacemaker
This update for pacemaker fixes the following issues: Update to 2.0.4: - based: use crmexit to free qb-logging - cibsecret: don't use pssh -q option unless supported - crmerror: use gfree for a proper match - crmmon: NULL output-pointer when buffer is freed - crmresource: avoid unnecessary issus...
OPENSUSE-SU-2020:1731-1 Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap buffer overflow in Freetype. -...
CVE-2020-14870 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14838 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14830 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14839 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14785 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14765 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14775 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14672 vulnerabilities
Vulnerabilities for packages: mysql...
MGASA-2020-0383 Updated phpmyadmin packages fix security vulnerabilities
A vulnerability was discovered where an attacker can cause an XSS attack through the transformation feature. If an attacker sends a crafted link to the victim with the malicious JavaScript, when the victim clicks on the link, the JavaScript will run and complete the instructions made by the...
OPENSUSE-SU-2020:1674-1 Security update for icingaweb2
This update for icingaweb2 fixes the following issues: - icingaweb2 was updated to 2.7.4 CVE-2020-24368: Fixed a path Traversal which could have allowed an attacker to access arbitrary files which are readable by the process running boo1175530...
Beers with Talos Ep. #93: “More Secure” myths and misconceptions
Beers with Talos BWT Podcast episode No. 93 is now available. Download this episode and subscribe to Beers with Talos:Apple Podcasts Google PodcastsSpotify StitcherIf iTunes and Google Play aren't your thing, click here. By Mitch Neff. Recorded Sept. 11, 2020 On today’s show, we take several of t...