Google Chrome Security Update (stable-channel-update-for-desktop_2020-01) - Linux

Google Chrome is prone to an use after free vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Fedora Update for nbdkit FEDORA-2019-a75665981b

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libnbd FEDORA-2019-d20b357d44

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stable Channel Update for Desktop

The stable channel has been updated to 79.0.3945.117 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

Reptile Rootkit - reptile_cmd Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reptile Rootkit reptilecmd Privilege Escalation', 'Description' = %q This module uses Reptile rootkit's reptilecmd backdoor executable to gain ro...

Debian: Security Advisory (DSA-4585-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stable Channel Update for Desktop

The stable channel has been updated to 79.0.3945.88 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 79 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 79.0.3945.79 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

llvm:clang-fuzzer: Segv on unknown address in clang::Sema::LookupQualifiedName

Detailed Report: https://oss-fuzz.com/testcase?key=5702033537761280 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Sema::LookupQualifiedName...

llvm:clang-fuzzer: Segv on unknown address in llvm::APInt::udiv

Detailed Report: https://oss-fuzz.com/testcase?key=5698461165158400 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: llvm::APInt::udiv...

Hefeixin pc client in DLL hijacking vulnerability

Fetion PC Stable Edition is a new version of the PC client software based on the previous Fetion, and Fetion PC Stable Edition is a basic communication service software developed by China Mobile. And Fetion pc client in the DLL hijacking vulnerability, attackers can use the vulnerability in the...

llvm:clang-fuzzer: Segv on unknown address in clang::Parser::tryParseCXXIdExpression

Detailed Report: https://oss-fuzz.com/testcase?key=5730465248182272 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: clang::Parser::tryParseCXXIdExpression...

FreeBSD : GNU cpio -- multiple vulnerabilities (f59af308-07f3-11ea-8c56-f8b156b6dcc8)

Sergey Poznyakoff reports : This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2016-2037: The cpiosafernamesuffix function ...

libavc:avc_dec_fuzzer: Heap-buffer-overflow in ih264d_decode_slice_thread

Project: https://android.googlesource.com/platform/external/libavc Detailed Report: https://oss-fuzz.com/testcase?key=5689831887994880 Project: libavc Fuzzing Engine: libFuzzer Fuzz Target: avcdecfuzzer Job Type: libfuzzerasanlibavc Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

Debian: Security Advisory (DSA-4563-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libsass:data_context_fuzzer: Bad-cast to Sass::PreValue from Sass::SelectorList in Sass::Eval::operator

Detailed Report: https://oss-fuzz.com/testcase?key=5635227418624000 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzerubsanlibsass Platform Id: linux Crash Type: Bad-cast Crash Address: 0x00000191b2a0 Crash State: Bad-cast to Sass::PreValue from...

[SECURITY] [DSA 4566-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4566-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 12, 2019 https://www.debian.org/security/faq -...

libheif:file-fuzzer: Heap-buffer-overflow in ff_hevc_put_hevc_epel_pixels_8_sse

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4818096369434624 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: file-fuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

Nostromo - Directory Traversal Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nostromo Directory Traversal Remote Command Execution', 'Description' = %q This module exploits a remote command execution vulnerability in...

[SECURITY] [DSA 4556-1] qtbase-opensource-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4556-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 31, 2019 https://www.debian.org/security/faq -...