thunderbird: Memory corruption when processing S/MIME messages

A flaw was found in Thunderbird, which is vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS...

PT-2021-23859

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 91.3.0 Description The issue is related to a heap overflow when processing S/MIME messages, specifically those containing certificates with DER-encoded DSA or RSA-PSS signatures. Recommendations For Thunderbird...

Debian: Security Advisory (DSA-5000-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4998-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4997-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4996-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4995-1 : webkit2gtk - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4995 advisory. - A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPad...

GSD-2021-1001905 net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work

net: dsa: microchip: Added the condition for scheduling kszmibreadwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

UVI-2021-1001905 net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work

net: dsa: microchip: Added the condition for scheduling kszmibreadwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit...

GSD-2021-1001859 net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work

net: dsa: microchip: Added the condition for scheduling kszmibreadwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit...

UVI-2021-1001859 net: dsa: microchip: Added the condition for scheduling ksz_mib_read_work

net: dsa: microchip: Added the condition for scheduling kszmibreadwork This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.75 by commit...

PT-2021-26375

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.14 Description: The issue is related to the net: dsa: microchip component in the Linux Kernel. It was introduced in version v5.7 and fixed in version v5.14.14. The actual impact and attack plausibility hav...

Debian: Security Advisory (DSA-4992-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4989-1 : strongswan - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4989 advisory. - The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be...

Debian: Security Advisory (DSA-4988-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4988-1 : libreoffice - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4988 advisory. Two security issues have been discovered in LibreOffice's support for digital signatures in ODF documents, which could result in incorrect signature...

Debian: Security Advisory (DSA-4986-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell EMC NetWorker 18.x / 19.x < 19.4.0.4 Multiple Vulnerabilities (DSA-2021-124)

The version of Dell EMC NetWorker installed on the remote Windows host is 18.x or 19.x prior to 19.4.0.4. It is, therefore, affected by multiple vulnerabilities, as follows: - Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability. A NetWorker server user with remote access...

Debian DSA-4978-1 : linux - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4978 advisory. Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2020-3702 A...

Debian: Security Advisory (DSA-4976-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...