OPENSUSE-SU-2021:0724-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries in position independent bsc1185132. This update was imported from the SUSE:SLE-15-SP2:Update update project...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0344

An update of 'cifs-utils' packages of Photon OS has been released...

Moderate Photon OS Security Update - PHSA-2021-0344

Updates of 'cifs-utils' packages of Photon OS have been released...

Security update for drbd-utils (low)

openSUSE Security Update: Security update for drbd-utils Announcement ID: openSUSE-SU-2021:0724-1 Rating: low References: 1185132 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for drbd-utils fixes the following issues: ...

Critical Photon OS Security Update - PHSA-2021-3.0-0236

Updates of 'cifs-utils', 'unbound' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2021-0236

Updates of 'unbound', 'cifs-utils' packages of Photon OS have been released...

SUSE-SU-2021:1561-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - make all binaries in position independent bsc1185132...

SUSE-SU-2021:1560-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - Hardening: Made all binaries position independent bsc1185132...

SUSE-SU-2021:1559-1 Security update for drbd-utils

This update for drbd-utils fixes the following issues: - Hardening: Made all binaries position independent bsc1185132...

Prototype pollution in @tsed/core

This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

Privilege Escalation

cifs-utils is vulnerable to privilege escalation. The vulnerability exists due to a flaw that allows an attacker to use the Kerberos credentials of the host when mounting a krb5 CIFS file system from within a container...

GHSA-P6JH-P7Q8-PCRG Prototype Pollution in nodee-utils

All versions of package nodee-utils below version 1.2.3 are vulnerable to Prototype Pollution via the deepSet function...

Prototype Pollution in nodee-utils

All versions of package nodee-utils below version 1.2.3 are vulnerable to Prototype Pollution via the deepSet function...

GHSA-GR58-J5WH-M333 Prototype Pollution in nis-utils

All versions of package nis-utils up to and including 0.6.10 are vulnerable to Prototype Pollution via the setValue function...

nis-model (>=0.6.0, <=0.6.22), nis-view (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (0.6.10)

nis-utils NPM version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: OSV:GHSA-GR58-J5WH-M333...

Prototype Pollution in nis-utils

All versions of package nis-utils up to and including 0.6.10 are vulnerable to Prototype Pollution via the setValue function...

GHSA-JVF5-Q4H5-2JMJ Prototype Pollution in madlib-object-utils

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

Prototype Pollution in madlib-object-utils

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

SUSE SLES15 Security Update : cifs-utils (SUSE-SU-2021:1455-1)

This update for cifs-utils fixes the following security issues : CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. bsc1183239 CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. bsc1174477 This update for cifs-utils fixes the following issues :...

Huawei EulerOS: Security Advisory for xdg-utils (EulerOS-SA-2021-1861)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...