Vulnerabilities fixed in SUSE kernel

Vulnerabilities have been fixed in SUSE kernel. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Access to system data Increased user privileges -= SUSE =- SUSE has made updates available to address the...

2021-08 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB5005031)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

PT-2021-14612 · Dell · Dell Openmanage Enterprise

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Enterprise versions prior to 3.6.1 Description: The issue is related to an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or...

[SECURITY] [DLA 2711-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2711-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 19, 2021 https://wiki.debian.org/LTS -...

Important: libX11

Issue Overview: A missing validation flaw was found in libX11. This flaw allows an attacker to inject X11 protocol commands on X clients, and in some cases, also bypass, authenticate via injection of control characters, or potentially execute arbitrary code with permissions of the application...

Medium: python-pip

Issue Overview: A flaw was found in python-urllib3. SSL certificate validation is omitted in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy if an SSLContext isn't given via proxyconfig doesn't verify the hostname of the certificate. This means certificates...

Medium: python-urllib3

Issue Overview: A flaw was found in python-urllib3. The HTTPConnection.request does not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation of the request by injecting additional HTTP headers. The highest threat from this vulnerability is to...

Important: systemd

Issue Overview: It was discovered that systemd is vulnerable to a state injection attack when deserializing the state of a service. Properties longer than LINEMAX are not correctly parsed and an attacker may abuse this flaw in particularly configured services to inject, change, or corrupt the...

Dell System Update Resource Management Error Vulnerability

Dell System Update is an application package from Dell, Inc. that provides application updates. Dell System Update DSU 1.9 and earlier versions contain a security vulnerability that could be exploited by an attacker with low privileged local authentication to run multiple instances of the...

SUSE: Security Advisory (SUSE-SU-2019:0425-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pre-installed auto installer threat found on Android mobile devices in Germany

Users primarily located in Germany are experiencing malware that downloads and installs on their Gigaset mobile devices—right out of the box! The culprit installing these malware apps is the Update app, package name com.redstone.ota.ui, which is a pre-installed system app. This app is not only th...

CVE-2021-21529

Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...

CVE-2021-21529

Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...

Denial of service

Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...

CVE-2021-21529

Dell DSU (Dell System Update) version 1.9 and earlier is affected by a local DoS vulnerability where a low-privileged, authenticated user can spawn multiple instances of the vulnerable DSU process, exhausting system memory. The issue is documented under CVE-2021-21529 with CVSS metrics indicating...

CVE-2021-21529

Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...

Dell System Update 资源管理错误漏洞

Dell System Update is an application package from Dell, Inc. that provides application updates. Dell System Update DSU 1.9 and earlier versions contain a security vulnerability that could be exploited by an attacker with low privileged local authentication to run multiple instances of the...

New Android malware poses as “System Update” to steal your data

By Deeba Ahmed The malware is also capable of controlling the device's front and back camera to take photos periodically. This is a post from HackRead.com Read the original post: New Android malware poses as "System Update" to steal your data...

Watch Out! That Android System Update May Contain A Powerful Spyware

Researchers have discovered a new information-stealing trojan, which targets Android devices with an onslaught of data-exfiltration capabilities — from collecting browser searches to recording audio and phone calls. While malware on Android has previously taken the guise of copycat apps, which go...

SUSE-SU-2021:0840-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-2446 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check bsc1179664. -...