RHEL 6 : firefox (RHSA-2020:0816)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0816 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

Oracle Linux 7 : firefox (ELSA-2020-0815)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-0815 advisory. 68.6.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:0686-1)

This update for MozillaFirefox fixes the following issues : Mozilla Firefox was updated to 68.6.0 ESR MFSA 2020-09 bsc1132665 bsc1166238 CVE-2020-6805: Fixed a use-after-free when removing data about origins CVE-2020-6806: Fixed improper protections against state confusion CVE-2020-6807: Fixed a...

Updated thunderbird packages fix security vulnerabilities

The updated packages fix a security vulnerabilities: Out of bounds reads in sctploadaddressesfrominit. CVE-2019-20503 Use-after-free when removing data about origins. CVE-2020-6805 BodyStream::OnInputStreamReady was missing protections against state confusion. CVE-2020-6806 Use-after-free in cube...

Information Disclosure

libvpx.so is vulnerable information disclosure. A lack of proper validation of data length in the function vp8decodeframe of decodeframe.c leads to an out-of-bound reads during the reading of frames, allowing a user without no additional privilege to disclose information if error correction mode ...

Security fix for the ALT Linux 10 package firefox-esr version 68.6.0-alt1

March 10, 2020 Andrey Cherepanov 68.6.0-alt1 - New ESR version 68.6.0. - Fix license tag according to SPDX. - Fixed: + CVE-2020-6805 Use-after-free when removing data about origins + CVE-2020-6806 BodyStream::OnInputStreamReady was missing protections against state confusion + CVE-2020-6807...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

AZL-35345 CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

Out-of-bounds

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

MGASA-2020-0127 Updated libarchive packages fix security vulnerabilities

The updated packages fix several issues including security vulnerabilities: In Libarchive 3.4.0, archivewstringappendfrommbs in archivestring.c has an out-of-bounds read because of an incorrect mbrtowc or mbtowc call. For example, bsdtar crashes via a crafted archive. CVE-2019-19221...

CVE-2019-20503

CVE-2019-20503 is an out-of-bounds read in usrsctp’s sctp_load_addresses_from_init. Connected documents confirm affected components (libusrsctp/usrsctp) and indicate versions prior to 0.9.5.0-1 are vulnerable (Mariner packages). A patched version (0.9.5.0-1 or later) is available, per CBLMariner ...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

CVE-2019-20503

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

openSUSE: Security Advisory for nginx (openSUSE-SU-2020:0204-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0204-1 Security update for nginx

This update for nginx fixes the following issues: - CVE-2019-20372: Fixed an HTTP request smuggling with certain errorpage configurations which could have allowed unauthorized web page reads bsc1160682. This update was imported from the SUSE:SLE-15-SP1:Update update project...