Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Samba vulnerabilities (USN-4611-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4611-1 advisory. Steven French discovered that Samba incorrectly handled ChangeNotify permissions. A remote attacker could possibly use this issue...

[SECURITY] [DLA 2422-1] qtsvg-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2422-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2420-1] linux security update

Debian LTS Advisory DLA-2420-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings October 29, 2020 https://wiki.debian.org/LTS Package : linux Version : 4.9.240-1 CVE ID : CVE-2019-9445 CVE-2019-19073 CVE-2019-19074 CVE-2019-19448 CVE-2020-12351 CVE-2020-12352...

Ubuntu 20.04 LTS : fastd vulnerability (USN-4610-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4610-1 advisory. It was discovered that fastd did not properly handle receive buffers under certain circumstances. A remote attacker could possibly use this issue to cause a memor...

[SECURITY] [DLA 2418-1] libsndfile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2418-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz October 29, 2020 https://wiki.debian.org/LTS -...

USN-4610-1: fastd vulnerability

It was discovered that fastd did not properly handle receive buffers under certain circumstances. A remote attacker could possibly use this issue to cause a memory leak, resulting in a denial of service. CVE-2020-27638...

Ubuntu 16.04 LTS : GOsa vulnerabilities (USN-4609-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4609-1 advisory. Fabian Henneke discovered that GOsa incorrectly handled client cookies. An authenticated user could exploit this with a crafted cookie to perform file...

USN-4608-1: ca-certificates update

The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.44 version of the Mozilla certificate authority bundle...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenJDK vulnerabilities (USN-4607-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4607-1 advisory. It was discovered that OpenJDK incorrectly handled deserializing Proxy class objects with many interfaces. A remote attacker coul...

USN-4607-1: OpenJDK vulnerabilities

It was discovered that OpenJDK incorrectly handled deserializing Proxy class objects with many interfaces. A remote attacker could possibly use this issue to cause a denial of service memory consumption via a specially crafted input. CVE-2020-14779 Sergey Ostanin discovered that OpenJDK incorrect...

USN-4605-1: Blueman vulnerability

Vaisha Bernard discovered that blueman did not properly sanitize input on the d-bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service. CVE-2020-15238...

[SECURITY] [DLA 2416-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2416-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 27, 2020 https://wiki.debian.org/LTS -...

Ubuntu 18.04 LTS : Netty vulnerabilities (USN-4600-2)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4600-2 advisory. USN-4600-1 fixed multiple vunerabilities in Netty 3.9. This update provides the corresponding fixes for CVE-2019-20444, CVE-2019-20445 for Netty. Also it...

Ubuntu 16.04 LTS : Firefox vulnerabilities (USN-4599-2)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4599-2 advisory. USN-4599-1 fixed vulnerabilities in Firefox. This update provides the corresponding updates for Ubuntu 16.04 LTS. Tenable has extracted the preceding...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Blueman vulnerability (USN-4605-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4605-1 advisory. Vaisha Bernard discovered that blueman did not properly sanitize input on the d-bus interface to blueman-mechanism. A local attacker could...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-4604-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4604-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL...

USN-4599-2: Firefox vulnerabilities

USN-4599-1 fixed vulnerabilities in Firefox. This update provides the corresponding updates for Ubuntu 16.04 LTS. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit...

[SECURITY] [DLA 2413-1] phpmyadmin security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2413-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 25, 2020 https://wiki.debian.org/LTS -...

Ubuntu 20.04 LTS : Tomcat vulnerabilities (USN-4596-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4596-1 advisory. It was discovered that Tomcat did not properly manage HTTP/2 streams. An attacker could possibly use this to cause Tomcat to consume resources, resulting...

Remote Code Execution (RCE)

openmage/magento-lts is vulnerable to remote code execution RCE. The vulnerability exists as an admin user can generate SOAP credentials that can be used to cause RCE with a PHP Object Injection flaw through the product attributes...