4295 matches found
Design/Logic Flaw
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux...
CVE-2021-25316 Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools
A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux...
SUSE SLED15 / SLES15 Security Update : spamassassin (SUSE-SU-2021:1163-1)
This update for spamassassin fixes the following issues : CVE-2019-12420: memory leak via crafted messages bsc1159133 CVE-2020-1946: security update bsc1184221 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
openSUSE Security Update : tpm2-tss-engine (openSUSE-2021-542)
This update for tpm2-tss-engine fixes the following issues : - Added support to disable fixed compilation flags - Added --disable-defaultflags during compilation to avoid breakage of our gcc-PIE profile resulted in non-position-independent executable tpm2-tss-genkey, bsc1183895 This update was...
OPENSUSE-SU-2021:0535-1 Security update for bcc
This update for bcc fixes the following issues: - Enabled PIE for bcc-lua if lua support is enabled bsc1183399 This update was imported from the SUSE:SLE-15-SP2:Update update project...
openSUSE Security Update : fwupd (openSUSE-2021-522)
This update for fwupd fixes the following issues : - Update to version 1.2.14: bsc1182057 - Add SBAT section to EFI images bsc1182057 - CVE-2020-10759: Validate that gpgmeopverifyresult returned at least one signature bsc1172643 This update was imported from the SUSE:SLE-15-SP2:Update update...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0515-1 Rating: important References: 1184256 Cross-References: CVE-2021-21194 CVE-2021-21195 CVE-2021-21196 CVE-2021-21197 CVE-2021-21198 CVE-2021-21199 Affected Products: openSUSE Backports SLE-15-SP2 An...
OPENSUSE-SU-2021:0485-1 Security update for eclipse
This update for eclipse fixes the following issues: - CVE-2020-27225: Authenticate active help requests to the local help web server bsc1183728. This update was imported from the SUSE:SLE-15-SP2:Update update project...
Security update for eclipse (important)
openSUSE Security Update: Security update for eclipse Announcement ID: openSUSE-SU-2021:0485-1 Rating: important References: 1183728 Cross-References: CVE-2020-27225 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for eclipse...
openSUSE Security Update : evolution-data-server (openSUSE-2021-482)
This update for evolution-data-server fixes the following issues : - CVE-2020-16117: Fix crash on malformed server response with minimal capabilities bsc1174712. - CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 bsc1173910. - Fix buffer overrun when parsing base64 data bsc1182882...
openSUSE Security Update : ldb (openSUSE-2021-469)
This update for ldb fixes the following issues : - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs bsc1183572. - CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable...
openSUSE Security Update : gnutls (openSUSE-2021-470)
This update for gnutls fixes the following issues : - CVE-2021-20232: Fixed a use after free issue which could have led to memory corruption and other potential consequences bsc1183456. - CVE-2021-20231: Fixed a use after free issue which could have led to memory corruption and other potential...
openSUSE Security Update : openssl-1_1 (openSUSE-2021-476)
This update for openssl-11 fixes the security issue : - CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension but includes a signaturealgorithmsce...
Security update for openssl-1_1 (important)
openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2021:0476-1 Rating: important References: 1183852 Cross-References: CVE-2021-3449 CVSS scores: CVE-2021-3449 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update...
Security update for ldb (important)
openSUSE Security Update: Security update for ldb Announcement ID: openSUSE-SU-2021:0469-1 Rating: important References: 1183572 1183574 Cross-References: CVE-2020-27840 CVE-2021-20277 CVSS scores: CVE-2020-27840 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-20277 SUSE: 7.1...
openSUSE Security Update : grub2 (openSUSE-2021-462)
This update for grub2 fixes the following issues : grub2 implements the new 'SBAT' method for SHIM based secure boot revocation. bsc1182057 - CVE-2020-25632: Fixed a use-after-free in rmmod command bsc1176711 - CVE-2020-25647: Fixed an out-of-bound write in grubusbdeviceinitialize bsc1177883 -...
Security update for libmysofa (moderate)
openSUSE Security Update: Security update for libmysofa Announcement ID: openSUSE-SU-2021:0459-1 Rating: moderate References: 1149919 1149920 1149922 1149924 1149926 1159839 1160040 1181977 1181978 1181979 1181980 1181981 1182883 Cross-References: CVE-2019-16091 CVE-2019-16092 CVE-2019-16093...
Debian DLA-2599-1 : shibboleth-sp2 security update
Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks. For additional information please refer to the upstream advisory at https://shibboleth.net/community/advisories/secadv20210317.txt For Debian 9 stretch,...
Debian: Security Advisory (DLA-2599-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...