Oracle Linux 8 : nodejs:10 (ELSA-2020-1317)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1317 advisory. - Rebase to 10.19.0 to fix CVE-2019-15604 to CVE-2019-15606 - Rebase to 10.16.3 to fix CVE-2019-9511 to CVE-2019-9518 Tenable has extracted the preceding...

About the security content of watchOS 5.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

ICU: Integer overflow in UnicodeString::doAppend()

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

Remote Code Execution (RCE)

ICU is vulnerable to remote code execution RCE. The vulnerability exists through an integer overflow in UnicodeString::doAppend...

PT-2020-22580

Name of the Vulnerable Software and Affected Versions icu versions 66 Description The issue is related to a crash type of Use-of-uninitialized-value. It involves the u strFindFirst 66 function and icu 66::UnicodeString::indexOf. Recommendations For icu version 66, at the moment, there is no...

PT-2020-22599

Name of the Vulnerable Software and Affected Versions icu 64 affected versions not specified Description The issue is related to a crash in the icu 64 library, specifically in the UCharsTrie class. The crash occurs due to an unknown read error. Technical details about the crash include the...

PT-2020-22600

Name of the Vulnerable Software and Affected Versions icu 64 affected versions not specified Description The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the appendCEsFromCE32 function, fetchCEs function, and getCEs function. Recommendations At...

Important: Red Hat Security Advisory: rh-nodejs12-nodejs security update

An update for rh-nodejs12-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

SUSE SLED15 / SLES15 Security Update : icu (SUSE-SU-2020:0819-2)

This update for icu fixes the following issues : CVE-2020-10531: Fixed a potential integer overflow in UnicodeString:doAppend bsc1166844. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE-SU-2020:0819-2 Security update for icu

This update for icu fixes the following issues: - CVE-2020-10531: Fixed a potential integer overflow in UnicodeString:doAppend bsc1166844...

Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2020-1777)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2020-22322

Name of the Vulnerable Software and Affected Versions icu 64 affected versions not specified Description The issue is related to a crash in the icu 64 library, specifically in the UCharsTrie::branchNext function. The crash occurs when the CollationIterator::nextCE32FromContraction function is...

PT-2020-22312

Name of the Vulnerable Software and Affected Versions icu 64 affected versions not specified Description The issue is related to a crash type of Use-of-uninitialized-value. It involves the u strFindFirst 64 function and icu 64::UnicodeString::indexOf. Recommendations At the moment, there is no...

EulerOS Virtualization 3.0.6.0 : icu (EulerOS-SA-2020-1777)

According to the version of the icu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based...

Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2020-1708)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : icu (EulerOS-SA-2020-1708)

According to the version of the icu package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a...

FreeBSD : Node.js -- June 2020 Security Releases (11fcfa8f-ac64-11ea-9dab-000d3ab229d6)

Node.js reports : Updates are now available for all supported Node.js release lines for the following issues. TLS session reuse can lead to host certificate verification bypass High CVE-2020-8172 The 'session' event could be emitted before the 'secureConnect' event. It should not be, because the...

Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2020-1602)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : icu (EulerOS-SA-2020-1602)

According to the version of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer...

June 2020 Security Releases

June 2020 Security Releases Update 2-June-2020 Security releases available Updates are now available for all supported Node.js release lines for the following issues. TLS session reuse can lead to host certificate verification bypass High CVE-2020-8172 The 'session' event could be emitted before...