MGASA-2021-0398 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.56 and fixes at least the following security issues: In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection...

DLA-2723-1 linuxptp - security update

Bulletin has no description...

OPENSUSE-SU-2021:2555-1 Security update for git

This update for git fixes the following issues: Update from version 2.26.2 to version 2.31.1 jscSLE-18152 Security fixes: - CVE-2021-21300: On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters such as Git LFS,...

MGASA-2021-0386 Updated python3 packages fix security vulnerabilities

Update python3 to 3.8.11 to fix several security issues. Fixes in 3.8.10 are also included. Bundled pip and setuptools were updated in 3.8.11 so python-pip needs to be updated to 21.1.3 and python-setuptools to 56.2.0 at the same time. Also, we fix the following issue: In Python before 3.9.5, the...

MGASA-2021-0367 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.52 and fixes at least the following security issues: There is a race condition in net/can/bcm.c that can lead to local privilege escalation to root CVE-2021-3609. A vulnerability was found in the Linux kernel. Missing size validations on inbound...

OPENSUSE-SU-2021:1068-1 Security update for nextcloud

This update for nextcloud fixes the following issues: nextcloud was updated to 20.0.11: - Fix boo1188247 - CVE-2021-32678: OCS API response ratelimits are not applied - Fix boo1188248 - CVE-2021-32679: filenames where not escaped by default in controllers using DownloadResponse - Fix boo1188249 -...

DLA-2714-1 linux-4.19 - security update

Bulletin has no description...

MGASA-2021-0347 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.48 and fixes at least the following security issues: The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c...

DLA-2701-1 openexr - security update

Bulletin has no description...

SUSE-SU-2021:2184-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26558: Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 may permit a nearby man-in-the-middle attacker to identify the Passkey...

MGASA-2021-0283 Updated kernel-linus packages fix security and other issues

The kernel-linus update in MGASA-2021-0258 contained some security fixes that caused regressions in at least some container and chroot setups. This update provides upstream 5.10.45 that adds follow-up fixes to resolve the regressions and other various security-related and other bugfixes. For more...

SUSE-SU-2021:2147-1 Security update for freeradius-server

This update for freeradius-server fixes the following issues: - Fixed plaintext password entries in logfiles bsc1184016...

PT-2021-4125 · Tor +4 · Tor +4

Name of the Vulnerable Software and Affected Versions: Tor versions prior to 0.4.6.5 Description: The issue is related to errors in authorization, allowing a remote attacker to cause a denial of service. An attacker can forge RELAY END or RELAY RESOLVED to bypass the intended access control for...

DLA-2686-1 python-urllib3 - security update

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2019:0505-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2683-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2562-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-2672-1 imagemagick - security update

Bulletin has no description...

DSA-4925-1 firefox-esr - security update

Bulletin has no description...

MGASA-2021-0214 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.37 and fixes at least the following security issues: It was discovered that the iouring implementation of the Linux kernel did not properly enforce the MAXRWCOUNT limit in some situations. A local attacker could use this to cause a denial of service...