3952 matches found
Stable Channel Update for Desktop
The Stable channel has been updated to 88.0.4324.146 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...
CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)
Update Feb 3, 2021: It has been reported that macOS, AIX, and Solaris are also vulnerable to CVE-2021-3156, and that others may also still be vulnerable. Qualys has not independently verified the exploit. Original Post: The Qualys Research Team has discovered a heap overflow vulnerability in sudo...
CVE-2021-3156 "Baron Samedit"
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via “sudoedit -s” and a command-line argument that ends with a single backslash character. Recent assessments: cdelafuente-r7 at January 27, 2021 3:40pm UTC...
CVE-2020-36213
The CVE-2020-36213 issue affects the abi_stable crate for Rust prior to 0.9.1. A retain call can produce an invalid UTF-8 string, violating soundness and potentially undermining memory-safety guarantees. Documented impact centers on Rust crate soundness rather than explicit exploit paths in the p...
Fedora 33 : flatpak (2021-f970ea9d79)
The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-f970ea9d79 advisory. - This updates flatpak from 1.8 to new 1.10 stable series. The major new feature in this series compared to 1.8 is the support for the new repo format which...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 88 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 88.0.4324.96 for Mac and Linux and 88.0.4324.104 for windows contains a number of fixes and improvements -- a list of changes...
[SECURITY] [DSA 4833-1] gst-plugins-bad1.0 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4833-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 18, 2021 https://www.debian.org/security/faq -...
CVE-2021-3004
The deposit function in the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should...
Stable Yield Credit Security Breach
Stable Yield Credit is a new protocol for decentralized lending, stablecoin, and automated market maker AMM in one for the Stable Yield Credit community. Stable Yield Credit suffers from a security vulnerability that stems from certain miscalculations in the deposit function. An attacker could...
Fedora 32 : kernel (2020-bc0cc81a7a)
The 5.9.14 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
[SECURITY] [DSA 4813-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4813-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 16, 2020 https://www.debian.org/security/faq -...
Debian DSA-4812-1 : xen - security update
Multiple vulnerabilities have been discovered in the Xen hypervisor : Several security issues affecting Xenstore could result in cross domain access denial of service, information leaks or privilege escalation or denial of service against xenstored. Additional vulnerabilities could result in...
Fedora 32 : kernel / kernel-headers (2020-c2081fca05)
The 5.9.13 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...
Updated chromium-browser-stable packages fix security vulnerabilities
The updated packages fix some problems found in version 86 and security vulnerabilities...
Stable Channel Update for Desktop
The Stable channel has been updated to 87.0.4280.88 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...
Debian: Security Advisory (DSA-4798-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4796-1 : thunderbird - security update
Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4796. The text itself is...
Debian DSA-4790-1 : thunderbird - security update
A use-after-free was found in Thunderbird, which could potentially result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4790. The text itself is...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 87 to the Stable channel 87.0.4280.66 for Windows and Linux, 87.0.4280.67 for Mac. This will roll out over the coming days/weeks. Chrome 87.0.4280.66/67 contains native support for Apple M1 devices and a number of fixes and...
PowerPoint 2003/2007/2010 Silent Builder Exploit
The exploit allows you to convert EXE & JAR to .PPS its coded 100% from scratch and used by private method to assure a great stability and lasting FUD time. You are able to attach it to the most e-mail providers nowadays everyone uses Microsoft Office so it gives a huge chance of success. This...