Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10099-1 Rating: important References: 1202509 Cross-References: CVE-2022-2852 CVE-2022-2853 CVE-2022-2854 CVE-2022-2855 CVE-2022-2856 CVE-2022-2857 CVE-2022-2858 CVE-2022-2859 CVE-2022-2860 CVE-2022-2861...

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP4) (SUSE-SU-2022:2854-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2854-1 advisory. This update for the Linux Kernel 5.14.21-15040022 fixes several issues. The following security issues were fixed: - CVE-2022-28389: Fixed a...

Chromium: CVE-2022-2854 Use after free in SwiftShader

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Debian DSA-5212-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5212 advisory. - Use after free in FedCM. CVE-2022-2852 - Heap buffer overflow in Downloads. CVE-2022-2853 - Use after free in SwiftShader. CVE-2022-2854 - Use after free in...

Google Chrome Security Update (stable-channel-update-for-desktop_16-2022-08) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Update Chrome now! Google issues patch for zero day spotted in the wild

Google updated the Stable channel for Chrome to 104.0.5112.101 for Mac and Linux and 104.0.5112.102/101 for Windows which will roll out over the coming days/weeks. Extended stable channel has been updated to 104.0.5112.101 for Mac and 104.0.5112.102 for Windows , which will roll out over the comi...

FreeBSD : chromium -- multiple vulnerabilities (f12368a8-1e05-11ed-a1ef-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f12368a8-1e05-11ed-a1ef-3065ec8fd3ec advisory. - Use after free in FedCM. CVE-2022-2852 - Heap buffer overflow in Downloads. CVE-2022-2853 -...

Google Chrome < 104.0.5112.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 104.0.5112.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop16 advisory. - Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.10...

Google Chrome < 104.0.5112.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 104.0.5112.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop16 advisory. - Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101...

SUSE: Security Advisory (SUSE-SU-2017:2854-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2854

Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced...

CVE-2020-2854

CVE-2020-2854 affects Oracle E-Business Suite — Oracle Advanced Outbound Telephony (UI) for versions 12.1.1–12.1.3. The vulnerability enables an unauthenticated attacker with HTTP access to compromise data, with the attack described as requiring user interaction and potentially exposing data conf...

RHEL 7 : kpatch-patch (RHSA-2019:2854)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2854 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. Security Fixes: A...

CVE-2019-2854

CVE-2019-2854 affects IBM Rational DOORS Next Generation 6.0.6.1 (Outside In Filters in Oracle Outside In Technology). The IBM advisory explicitly lists the vulnerable component and provides a fix path: upgrade to Rational DOORS Next Generation 6.0.6.1 iFix004 or later (and for prior versions, up...

CVE-2017-2854

creationtimestamp| type| source ---|---|--- 2018-09-18 00:18:33+00:00| seen| https://t.me/cibsecurity/246...

CVE-2017-2854

Foscam C1 Indoor HD Camera (firmware 2.52.2.43) is affected by CVE-2017-2854 through its DDNS client. When configured to use the oray.com DDNS provider (ddnsServer=1) and with DDNS enabled, the update thread fetches the public IP via provider-specific code and processes server responses unsafely....

CVE-2018-2854

CVE-2018-2854 affects Oracle Financial Services Basel Regulatory Capital Basic, subcomponent Portfolio/Attribution, in the 8.0.x line. The vulnerability allows an unauthenticated, network-accessible attacker (via HTTP) to read and modify data, with a required user interaction component on the tar...

SUSE SLED12 / SLES12 Security Update : tcpdump (SUSE-SU-2017:2854-1)

This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed : - CVE-2017-11108: Prevent remote attackers to cause DoS heap-based buffer over-read and application crash via crafted packet data. The crash occured in the EXTRACT16BITS function, called from the...

CVE-2016-2854

The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

CVE-2016-2854

CVE-2016-2854 concerns the AUFS module in the Linux kernel (versions 3.x/4.x), which does not properly maintain POSIX ACL xattr data. This can allow a local attacker to gain privileges by exploiting a group-writable setgid directory. The connected documents confirm the vulnerability and its local...