[SECURITY] [DSA 4645-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4645-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 22, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4645-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4645-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 22, 2020 https://www.debian.org/security/faq -...

openSUSE Security Update : chromium (openSUSE-2020-365)

This update for chromium to version 80.0.3987.149 fixes the following issues : Chromium was update to 80.0.3987.149 bsc1167090 : - CVE-2020-6422: Fixed a use after free in WebGL. - CVE-2020-6424: Fixed a use after free in media. - CVE-2020-6425: Fixed an insufficient policy enforcement in...

CVE-2020-6449

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-6449

CVE-2020-6449 is a use-after-free vulnerability in the audio component of Google Chrome prior to 80.0.3987.149. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page. Documents confirm the affected product is Google Chrome/Chromium and that the fix was applied i...

CVE-2020-6449

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-6449

Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Google Chrome < 80.0.3987.149 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 80.0.3987.149. It is, therefore, affected by multiple vulnerabilities as referenced in the 202003stable-channel-update-for-desktop18 advisory. - Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by vulnerabilities in OpenSSL Libraries version 1.0.1 (CVE-2013-4353, CVE-2013-6450, CVE-2013-6449)

Summary Security vulnerabilities have been discovered in the OpenSSL libraries used by IBM Sterling B2B Integrator and IBM Sterling File Gateway. Vulnerability Details SWIFTNet adapters of IBM Sterling B2B Integrator and IBM Sterling File Gateway use OpenSSL libraries for cryptography, and thus a...

CVE-2012-6449

CVE-2012-6449 affects cPanel & WHM 11.34.0 (build 8); the vulnerable components are clientconf.html and detailbw.html, with a documented cross-site scripting (XSS) vulnerability. NVD CVSSv3.1 base score 5.4 (MEDIUM) via NETWORK/vector: LOW spoofed user interaction required? The data shows UI inte...

Security Bulletin: IBM Flex System Manager (FSM) and compatible IBM Systems Director agents are affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450, and CVE-2013-6449)

Summary An interface on the IBM BladeCenter Advanced Management Module AMM may expose user account names and passwords that have been configured on that AMM. Vulnerability Details Abstract The FSM and compatible agents contain a version of openssl that contained the 3 vulnerabilities listed above...

Security Bulletin: IBM Systems Director (ISD) is affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450, and CVE-2013-6449)

Summary : IBM Systems Director contains a version of openssl that contained the 3 vulnerabilities listed above. Vulnerability Details Abstract IBM Systems Director contains a version of openssl that contained the 3 vulnerabilities listed above. Content Vulnerability Details: CVE-ID: CVE-2013-4353...

Security Bulletin: IBM Tivoli Composite Application Manager for Transactions is affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450 and CVE-2013-6449)

Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2013-4353 DESCRIPTION: A carefully crafted invalid TLS handshake could crash OpenSSL with a NULL pointer exception. A malicious server could use this flaw to crash a connecting client. This issue...

Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by vulnerabilities in OpenSSL (CVE-2013-4353, CVE-2013-6450 and CVE-2013-6449)

Summary Security vulnerabilities have been discovered in OpenSSL. Vulnerability Details CVE-ID: CVE-2013-4353 DESCRIPTION: A carefully crafted invalid TLS handshake could crash OpenSSL with a NULL pointer exception. A malicious server could use this flaw to crash a connecting client. This issue...

CVE-2015-6449

...

CVE-2015-6449

CVE-2015-6449 is rejected/not used; the entry does not represent a vulnerability.

CVE-2016-6449

CVE-2016-6449 affects Cisco FireAMP Connector Endpoint software. It describes a local denial-of-service risk where an authenticated, local attacker can stop certain protected FireAMP system processes via the lack of proper access controls on system utilities used to troubleshoot processes. The co...

CVE-2014-6449

CVE-2014-6449 affects Juniper Networks Junos OS (multiple branches/versions) where TCP packet reassembly is mishandled. A remote attacker can cause a denial of service by sending a crafted sequence of packets destined to the device, leading to buffer consumption. Concretely, the vulnerability tar...

Fedora Update for mingw-openssl FEDORA-2014-17587

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for openssl FEDORA-2014-13012

Check the version of openssl SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868417";...