[SECURITY] [DLA 2321-1] firmware-nonfree new upstream version

Debian LTS Advisory DLA-2321-1 [email protected] https://www.debian.org/lts/security/ August 11, 2020 https://wiki.debian.org/LTS Package : firmware-nonfree Version : 20190114-2deb9u1 The firmware-nonfree package has been updated to include additional firmware that may be requested by...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Samba vulnerability (USN-4454-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4454-1 advisory. Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT...

USN-4454-1: Samba vulnerability

Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT server. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service...

[SECURITY] [DLA 2316-1] ruby-kramdown security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2316-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 08, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2317-1] pillow security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2317-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 08, 2020 https://wiki.debian.org/LTS -...

Curfew e-Pass Management System 1.0 SQL Injection

Exploit Title: Curfew e-Pass Management System 1.0 Multiple SQL Injection Vulnerabilities Google Dork: N/A Date: 04.08.2020 Exploit Author: Mucahit Karadag Vendor Homepage: https://products.phpgurukul.com/product/curfew-e-pass-management-system-project-report/ Software Link:...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : libssh vulnerability (USN-4447-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4447-1 advisory. It was discovered that libssh incorrectly handled certain requests. An attacker could possibly use this issue to cause a denial of service...

Ubuntu 20.04 LTS : libvirt vulnerability (USN-4452-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4452-1 advisory. Trent Shea working with Trend Micros Zero Day Initiative, discovered that the libvirt package set incorrect permissions on the UNIX domain socket. A local attacke...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : ppp vulnerability (USN-4451-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4451-1 advisory. Thomas Chauchefoin working with Trend Micros Zero Day Initiative, discovered that ppp incorrectly handled module loading. A local attacker...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenJDK 8 vulnerabilities (USN-4453-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4453-1 advisory. Johannes Kuhn discovered that OpenJDK 8 incorrectly handled access control contexts. An attacker could possibly use this issue to...

Ubuntu 20.04 LTS : MySQL regression (USN-4441-2)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4441-2 advisory. USN-4441-1 fixed vulnerabilities in MySQL. The new upstream version changed compiler options and caused a regression in certain scenarios. This update fixes the...

Security Bulletin: IBM MQ is affected by a vulnerability within IBM WebSphere Liberty (CVE-2020-4329)

Summary A vulnerability has been found within the version of IBM WebSphere Liberty shipped with IBM MQ. Vulnerability Details CVEID: CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to...

USN-4451-1: ppp vulnerability

Thomas Chauchefoin working with Trend Micro´s Zero Day Initiative, discovered that ppp incorrectly handled module loading. A local attacker could use this issue to load arbitrary kernel modules and possibly execute arbitrary code...

USN-4450-1: Whoopsie vulnerabilities

Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to consume memory, resulting in a denial of service. CVE-2020-11937 Seong-Joong Kim discovered that Whoopsie incorrectly handled parsing files. A local attacker could use...

Ubuntu 20.04 LTS : Ghostscript vulnerability (USN-4445-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4445-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted...

[SECURITY] [DLA 2310-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2310-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 02, 2020 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 2309-1] evolution-data-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2309-1 [email protected] https://www.debian.org/lts/security/ August 02, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

[SECURITY] [DLA 2300-1] kdepim-runtime security update

Package : kdepim-runtime Version : 4:16.04.2-2+deb9u1 CVE ID : CVE-2020-15954 It was discovered that there was an issue where kdepim-runtime would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use. For Debian 9 "Stretch", this issue has been fixe...

Ubuntu 16.04 LTS / 18.04 LTS : librsvg regression (USN-4436-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4436-2 advisory. USN-4436-1 fixed a vulnerability in librsvg. The upstream fix caused a regression when parsing certain SVG files. This update backs out the fix pendin...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-4441-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4441-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL...