OPENSUSE-SU-2021:1989-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - Update to version jdk8u292 icedtea 3.19.0. - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms bsc1185055...

SUSE-SU-2021:2085-1 Security update for go1.16

This update for go1.16 fixes the following issues: - Updated go to upstream version 1.16.4 released 2021-05-06 bsc1182345. - CVE-2021-31525: Fixed stack overflow via net/http ReadRequest bsc1185790...

SUSE-SU-2021:2082-1 Security update for go1.15

This update for go1.15 fixes the following issues: - Updated go to upstream version 1.15.12 released 2021-05-06 bsc1175132. - CVE-2021-31525: Fixed stack overflow via net/http ReadRequest bsc1185790...

SUSE-SU-2021:1989-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - Update to version jdk8u292 icedtea 3.19.0. - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms bsc1185055...

PT-2021-19862

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.16.1 Description The Nextcloud Android app is vulnerable to an issue where a malicious app on the same device could access the shared preferences of the Nextcloud Android application. This requires...

MGASA-2021-0264 Updated libgd packages fix a security vulnerability

A potential integer overflow is fixed in version 2.3.1...

OPENSUSE-SU-2021:0878-1 Security update for containerd, docker, runc

This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.6-ce bsc1184768, bsc1182947, bsc1181594 Switch version to use -ce suffix rather than ce to avoid confusing other tools bsc1182476. CVE-2021-21284: Fixed a potential privilege escalation when the root...

PT-2021-14711 · Jenkins · Jenkins Scriptler Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Scriptler Plugin versions 3.1 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability because the script content is not escaped. This vulnerability is exploitable by attackers with...

Security update for 389-ds (moderate)

openSUSE Security Update: Security update for 389-ds Announcement ID: openSUSE-SU-2021:0868-1 Rating: moderate References: 1185356 Cross-References: CVE-2021-3514 CVSS scores: CVE-2021-3514 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.2 An update that...

PT-2021-17153

Name of the Vulnerable Software and Affected Versions OpenPLC ScadaBR versions through 0.9.1 on Linux and through 1.12.4 on Windows. Description OpenPLC ScadaBR is affected by a stored cross-site scripting XSS vulnerability in the system settings.shtm file. This flaw allows attackers to execute...

PT-2021-15260

Name of the Vulnerable Software and Affected Versions Nextcloud Mail versions prior to 1.9.5 Description The issue is related to improper access control due to a missing permission check. This allows other authenticated users to create mail aliases for other users. Recommendations For versions...

SUSE: Security Advisory (SUSE-SU-2019:2223-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0386-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:3010-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:0839-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2021-0239 Updated cgal packages fix security vulnerabilities

Updated cgal packages fix security vulnerabilities: An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex Faceof OOB read. An attacker can provide malicious input to trigger this vulnerability CVE-2020-28601. An oob read vulnerability exists in NefS2/SNCioparser.h...

SUSE-SU-2021:1878-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2021-3514: Fixed a syncrepl NULL pointer dereference in synccreatestatecontrol bsc1185356 389-ds was updated to version 1.4.3.23git0.f53d0132b: Bump version to 1.4.3.23: Issue 4725 - RFE DS - Update the password policy to support a Temporar...

OPENSUSE-SU-2021:0828-1 Security update for opera

This update for opera fixes the following issues: Update to version 76.0.4017.154 - CHR-8420 Update chromium on desktop-stable-90-4017 to 90.0.4430.212 - DNA-92411 Bookmarks breadcrumbs wrong color when pressed in dark mode - DNA-92587 Sync settings: “Use old password” button doesn’t work -...

PT-2021-17750 · Froala · Froala Wysiwyg Editor

Name of the Vulnerable Software and Affected Versions: Froala WYSIWYG Editor version 3.2.6-1 Description: The issue is related to a namespace confusion during parsing, which leads to a cross-site scripting XSS problem. Recommendations: For Froala WYSIWYG Editor version 3.2.6-1, update to a versio...

Improper Verification of Cryptographic Signature in aws-encryption-sdk

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...