Debian DLA-2103-1 : debian-security-support update: libqb and mysql-5.5 end

debian-security-support, the Debian security support coverage checker, has been updated in jessie-security. This marks the end of life of the libqb package in jessie. A recently reported vulnerability against libqb which allows users to overwrite arbitrary files via a symlink attack cannot be...

Fedora 31 : cutter-re / radare2 (2020-acd8cdb08d)

Rebase to radare2-4.2.1 and cutter-re 1.10.1. It fixes CVE-2019-19590 and CVE-2019-19547. It also fix a problem in cutter-re that did not display the window icon on Wayland. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

CVE-2020-8614

CVE-2020-8614 concerns the Askey AP4000W TDC_V1.01.003 device. A vulnerability allows a remote attacker to achieve Remote Code Execution (RCE) by sending a specially crafted network packet to the bd_svr service listening on TCP port 54188. The information available across connected documents conf...

Fedora 31 : kernel (2020-5ce1a122aa)

Update to Linux v5.4.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Fedora 31 : poppler (2020-24ded2cd52)

Security fix for CVE-2019-14494. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 31 : spamassassin (2020-24dac7d890)

Update to 3.4.4. Fixes CVE-2020-1930 and CVE-2020-1931. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

February 11, 2020—KB4537803 (Security-only update)

None None...

CVE-2019-13321

CVE-2019-13321 affects Xiaomi Browser prior to 10.4.0. The flaw is in the Captive Portal handling of HTTP responses; a crafted HTML response can cause the Captive Portal to open a browser to a specified location, enabling code execution in the context of the current process when combined with oth...

Equifax Breach: Four Members of Chinese Military Charged with Hacking

U.S. authorities have charged four Chinese military officers in the 2017 Equifax data breach, which compromised the data of nearly 150 million. The four, Wu Zhiyong, Wang Qian, Xu Ke and Liu Lei, are believed to be members of the 54th Research Institute of the Chinese People’s Liberation Army PLA...

Fedora 31 : glib2 (2020-339d413324)

Add patch for CVE-2020-6750 and related issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Fedora 31 : 1:libuv / 1:nodejs / nghttp2 (2020-3838c8ea98)

Update to Node.js 12.15.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 31 : nodejs-mixin-deep (2020-f80e5c0d65)

Update to upstream 1.3.2 release for CVE-2019-10746 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 30 : sox (2020-cb7b7181a0)

Fixes CVE-2017-18189. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

Fedora 30 : nodejs-mixin-deep (2020-4a8f110332)

Update to upstream 1.3.2 release for CVE-2019-10746 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 31 : nodejs-set-value (2020-582515fa8a)

Update to upstream 2.0.1 release for CVE-2019-10747 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 30 : 1:java-11-openjdk (2020-d735a887d1)

Update to the January 2020 CPU release 11.0.6. See: http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2020-January/00 2374.html https://openjdk.java.net/groups/vulnerability/advisories/2020-01-14 Note that Tenable Network Security has extracted the preceding description block directly from t...

Fedora 30 : nodejs-set-value (2020-1f1c94907b)

Update to upstream 2.0.1 release for CVE-2019-10747 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 31 : libasr / opensmtpd (2020-a861033a4d)

libasr-1.0.4, opensmtpd-6.6.2p1 update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Dangerous Domain Corp.com Goes Up for Sale

As an early domain name investor, Mike O'Connor had by 1994 snatched up several choice online destinations, including bar.com, cafes.com, grill.com, place.com, pub.com and television.com. Some he sold over the years, but for the past 26 years O'Connor refused to auction perhaps the most sensitive...

Cisco Digital Network Architecture Center Cross-Site Scripting Vulnerability (CNVD-2020-04518)

Cisco Digital Network Architecture Center DNA Center is a set of digital network architecture solutions from the U.S. company Cisco Cisco. The program can extend and protect devices, applications, etc. within the network. A cross-site scripting vulnerability exists in Cisco Digital Network...