OPENSUSE-SU-2021:1498-1 Security update for barrier

This update for barrier fixes the following issues: Updated to version 2.4.0: Barrier now supports client identity verification fixes CVE-2021-42072, CVE-2021-42073. Previously a malicious client could connect to Barrier server without any authentication and send application-level messages. This...

OPENSUSE-SU-2021:3762-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake bsc1192516...

SUSE-SU-2021:3762-1 Security update for postgresql13

This update for postgresql13 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake bsc1192516...

SUSE-SU-2021:3761-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake bsc1192516...

SUSE-SU-2021:3760-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake bsc1192516...

OPENSUSE-SU-2021:3759-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - Let rpmlint ignore...

SUSE-SU-2021:3759-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - Let rpmlint ignore...

OPENSUSE-SU-2021:3758-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake bsc1192516...

SUSE-SU-2021:3757-1 Security update for postgresql96

This update for postgresql96 fixes the following issues: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake bsc1192516. - CVE-2021-23222: Make libpq reject extraneous data after an SSL or GSS encryption handshake bsc1192516...

Vulnerabilities fixed in Dell Wyse Management Suite

Dell has fixed two vulnerabilities in Wyse Management Suite. An unauthenticated malicious person could exploit them to execute arbitrary code on the vulnerable system. Also, through a man-in-the-middle attack to gain access to sensitive data. This update also includes previously fixed...

Security update for postgresql13 (important)

openSUSE Security Update: Security update for postgresql13 Announcement ID: openSUSE-SU-2021:3762-1 Rating: important References: 1192516 Cross-References: CVE-2021-23214 CVE-2021-23222 CVSS scores: CVE-2021-23214 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23222 SUSE: 3.7...

Security update for postgresql12 (important)

openSUSE Security Update: Security update for postgresql12 Announcement ID: openSUSE-SU-2021:3758-1 Rating: important References: 1192516 Cross-References: CVE-2021-23214 CVE-2021-23222 CVSS scores: CVE-2021-23214 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23222 SUSE: 3.7...

Security update for barrier (moderate)

openSUSE Security Update: Security update for barrier Announcement ID: openSUSE-SU-2021:1498-1 Rating: moderate References: Cross-References: CVE-2021-42072 CVE-2021-42073 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available. Description: This update for...

Security update for postgresql14 (important)

openSUSE Security Update: Security update for postgresql14 Announcement ID: openSUSE-SU-2021:3759-1 Rating: important References: 1191782 1192516 Cross-References: CVE-2021-23214 CVE-2021-23222 CVSS scores: CVE-2021-23214 SUSE: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-23222 SUSE:...

SUSE: Security Advisory (SUSE-SU-2021:3755-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for hylafax+ (moderate)

openSUSE Security Update: Security update for hylafax+ Announcement ID: openSUSE-SU-2021:1494-1 Rating: moderate References: 1191571 Affected Products: openSUSE Backports SLE-15-SP3 An update that contains security fixes can now be installed. Description: hylafax+ was updated to version 7.0.4:...

SUSE SLED12: libecpg6 / libpq5 / libpq5-32bit / postgresql / postgresql-contrib / etc (SUSE-SU-2021:3755-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3755-1 advisory. Security issues fixed: - CVE-2021-23214: Make the server reject extraneous data after an SSL or GSS encryption handshake...

Product Security Incident Response PSIRT information

Abstract Product Security Incident Response security information Content IBM has a Product Security Incident Response team where security vulnerabilities are monitored for various technologies/products and if affected IBM will issue a formal response via a security bulletin and post on the PSIRT...

[SECURITY] [DSA 5011-1] salt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5011-1 [email protected] https://www.debian.org/security/ Markus Koschany November 19, 2021 https://www.debian.org/security/faq -...

Debian DSA-5011-1 : salt - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5011 advisory. - An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allo...