CVE-2020-25839

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

Design/Logic Flaw

NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1...

Security update for gdm (important)

openSUSE Security Update: Security update for gdm Announcement ID: openSUSE-SU-2020:1961-1 Rating: important References: 1178150 Cross-References: CVE-2020-16125 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for gdm fixes t...

openSUSE Security Update : spice-vdagent (openSUSE-2020-1898)

This update for spice-vdagent fixes the following issues : Security issues fixed : - CVE-2020-25650: Fixed a memory DoS via arbitrary entries in activexfers hash table bsc1177780. - CVE-2020-25651: Fixed a possible file transfer DoS and information leak via activexfers hash map bsc1177781. -...

openSUSE Security Update : java-1_8_0-openj9 (openSUSE-2020-1893)

This update for java-180-openj9 fixes the following issues : -OpenJDK was updated to 8u2732 build 10 with OpenJ9 0.23.0 virtual machine -includes Oracle July 2020 bsc1174157 and October 2020 CPU bsc1177943 - CVE-2020-14556, CVE-2020-14577, CVE-2020-14578, CVE-2020-14579, CVE-2020-14581,...

openSUSE Security Update : apache-commons-httpclient (openSUSE-2020-1875)

This update for apache-commons-httpclient fixes the following issues : - http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service HTTPS call hang via unspecified vectors...

Security update for gnome-settings-daemon, gnome-shell (moderate)

openSUSE Security Update: Security update for gnome-settings-daemon, gnome-shell Announcement ID: openSUSE-SU-2020:1861-1 Rating: moderate References: 1172760 1175155 Cross-References: CVE-2020-17489 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has one errata ...

EulerOS 2.0 SP2 : ppp (EulerOS-SA-2020-2387)

According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, o...

EulerOS 2.0 SP2 : numpy (EulerOS-SA-2020-2375)

According to the version of the numpy packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary...

EulerOS 2.0 SP2 : glib-networking (EulerOS-SA-2020-2346)

According to the version of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS...

EulerOS 2.0 SP2 : cups (EulerOS-SA-2020-2336)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gai...

EulerOS 2.0 SP2 : compat-poppler022 (EulerOS-SA-2020-2335)

According to the version of the compat-poppler022 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to...

EulerOS 2.0 SP2 : perl-DBD-MySQL (EulerOS-SA-2020-2381)

According to the version of the perl-DBD-MySQL package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There is a vulnerability of type use-after-free affecting DBD::mysql aka DBD-mysql or the Database Interface DBI MySQL driver for Perl 3.x a...

EulerOS 2.0 SP2 : python (EulerOS-SA-2020-2388)

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker...

EulerOS 2.0 SP2 : python-rsa (EulerOS-SA-2020-2390)

According to the version of the python-rsa package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., ...

EulerOS 2.0 SP2 : patch (EulerOS-SA-2020-2378)

According to the version of the patch package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and...

EulerOS 2.0 SP2 : python-sqlalchemy (EulerOS-SA-2020-2391)

According to the version of the python-sqlalchemy package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled.CVE-2019-7548 Note that Tenable Network Security has...

openSUSE Security Update : xen (openSUSE-2020-1783)

This update for xen fixes the following issues : - bsc1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries XSA-286 - bsc1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code XSA-345 - bsc1177413 - VUL-0: CVE-2020-27671: xen: undue...

openSUSE Security Update : spice (openSUSE-2020-1802)

This update for spice fixes the following issues : - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC image decoding bsc1177158. This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks ...

openSUSE Security Update : pacemaker (openSUSE-2020-1782)

This update for pacemaker fixes the following issues : Update to 2.0.4 : - based: use crmexit to free qb-logging - cibsecret: don't use pssh -q option unless supported - crmerror: use gfree for a proper match - crmmon: NULL output-pointer when buffer is freed - crmresource: avoid unnecessary issu...