Critical Photon OS Security Update - PHSA-2021-3.0-0236

Updates of 'cifs-utils', 'unbound' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2021-0236

Updates of 'unbound', 'cifs-utils' packages of Photon OS have been released...

SUSE-SU-2021:1561-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries in position independent bsc1185132...

SUSE-SU-2021:1560-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - Hardening: Made all binaries position independent bsc1185132...

SUSE-SU-2021:1559-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - Hardening: Made all binaries position independent bsc1185132...

Prototype pollution in @tsed/core

This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

Privilege Escalation

cifs-utils is vulnerable to privilege escalation. The vulnerability exists due to a flaw that allows an attacker to use the Kerberos credentials of the host when mounting a krb5 CIFS file system from within a container...

GHSA-P6JH-P7Q8-PCRG Prototype Pollution in nodee-utils

All versions of package nodee-utils below version 1.2.3 are vulnerable to Prototype Pollution via the deepSet function...

Prototype Pollution in nodee-utils

All versions of package nodee-utils below version 1.2.3 are vulnerable to Prototype Pollution via the deepSet function...

Prototype Pollution in nis-utils

All versions of package nis-utils up to and including 0.6.10 are vulnerable to Prototype Pollution via the setValue function...

GHSA-GR58-J5WH-M333 Prototype Pollution in nis-utils

All versions of package nis-utils up to and including 0.6.10 are vulnerable to Prototype Pollution via the setValue function...

GHSA-JVF5-Q4H5-2JMJ Prototype Pollution in madlib-object-utils

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

Prototype Pollution in madlib-object-utils

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

SUSE SLES15 Security Update : cifs-utils (SUSE-SU-2021:1455-1)

This update for cifs-utils fixes the following security issues : CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. bsc1183239 CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. bsc1174477 This update for cifs-utils fixes the following issues :...

Huawei EulerOS: Security Advisory for xdg-utils (EulerOS-SA-2021-1861)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for cifs-utils (openSUSE-SU-2021:0639-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:0639-1 Security update for cifs-utils

This update for cifs-utils fixes the following security issues: - CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. bsc1183239 - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. bsc1174477 This update for cifs-utils fixes the following issue...

SUSE-SU-2021:1455-1 Security update for cifs-utils

This update for cifs-utils fixes the following security issues: - CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. bsc1183239 - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. bsc1174477 This update for cifs-utils fixes the following issue...

EulerOS 2.0 SP3 : xdg-utils (EulerOS-SA-2021-1861)

According to the version of the xdg-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The openenvvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER...

Security update for cifs-utils (important)

openSUSE Security Update: Security update for cifs-utils Announcement ID: openSUSE-SU-2021:0639-1 Rating: important References: 1152930 1174477 1183239 1184815 Cross-References: CVE-2020-14342 CVE-2021-20208 CVSS scores: CVE-2020-14342 NVD : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H...