EulerOS 2.0 SP2 : spamassassin (EulerOS-SA-2021-1360)

According to the versions of the spamassassin package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2. The vulnerability arises with certain...

EulerOS 2.0 SP2 : cups (EulerOS-SA-2021-1286)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions.CVE-2018-4180 - In macOS...

EulerOS 2.0 SP2 : gnome-keyring (EulerOS-SA-2021-1300)

According to the version of the gnome-keyring packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM...

EulerOS 2.0 SP2 : pcp (EulerOS-SA-2021-1341)

According to the versions of the pcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE...

EulerOS 2.0 SP2 : python-reportlab (EulerOS-SA-2021-1354)

According to the version of the python-reportlab package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ReportLab through 3.5.26 allows remote code execution because of toColorevalarg in colors.py, as demonstrated by a crafted XML document wi...

EulerOS 2.0 SP2 : cifs-utils (EulerOS-SA-2021-1284)

According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject arbitrary...

EulerOS 2.0 SP2 : perl-XML-Twig (EulerOS-SA-2021-1344)

According to the version of the perl-XML-Twig package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - perl-XML-Twig: The option to expandexternalents, documented as controlling external entity expansion in XML::Twig does not work. External...

Security update for php7 (important)

openSUSE Security Update: Security update for php7 Announcement ID: openSUSE-SU-2021:0305-1 Rating: important References: 1182049 Cross-References: CVE-2021-21702 CVSS scores: CVE-2021-21702 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update tha...

openSUSE Security Update : openvswitch (openSUSE-2021-283)

This update for openvswitch fixes the following issues : - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding bsc1181742. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package...

2021-02 Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 for x64 (KB4602961)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4603005)

Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4603005 Notice Revised 6/8/2021 On June 8th, 2021, this update was released to replace a previous update to address a “revocation server was offline” error that may occur during installation. If you'...

Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 (KB4602961)

Security Only Update for .NET Framework 4.6 for Windows Server 2008 SP2 KB4602961 Notice Revised 6/8/2021 On June 8th, 2021, this update was released to replace a previous update to address a “revocation server was offline” error that may occur during installation. If you've already installed a...

openSUSE Security Update : openvswitch (openSUSE-2021-239)

This update for openvswitch fixes the following issues : - openvswitch was updated to 2.13.2 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets bsc1181345 This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : nodejs14 (openSUSE-2021-66)

This update for nodejs14 fixes the following issues : - New upstream LTS version 14.15.4 : - CVE-2020-8265: use-after-free in TLSWrap High bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap objec...

openSUSE Security Update : PackageKit (openSUSE-2020-2344)

This update for PackageKit fixes the following issue : - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal bsc1176930. - Update summary and description of gstreamer-plugin and gtk3-module. bsc1104313 This update was imported from the...

openSUSE Security Update : crmsh (openSUSE-2021-55)

This update for crmsh fixes the following issue : - CVE-2020-35459: Fixed a privilege escalation in hawkinvoke bsc1179999. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

openSUSE Security Update : gdk-pixbuf (openSUSE-2021-150)

This update for gdk-pixbuf fixes the following issues : - CVE-2020-29385: Fixed an infinite loop in lzw.c in the function writeindexes bsc1180393. - Fixed an integer underflow in the GIF loader bsc1174307. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network...

openSUSE Security Update : webkit2gtk3 (openSUSE-2020-2310)

This update for webkit2gtk3 fixes the following issues : -webkit2gtk3 was updated to version 2.30.3 bsc1179122 bsc1179451 : - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code...

openSUSE Security Update : tomcat (openSUSE-2021-43)

This update for tomcat fixes the following issue : - CVE-2020-17527: Fixed a HTTP/2 request header mix-up bsc1179602. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

openSUSE Security Update : ovmf (openSUSE-2020-2314)

This update for ovmf fixes the following issues : - CVE-2019-14584: Fixed a null dereference in AuthenticodeVerify bsc1177789. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...