CVE-2020-15667

When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution. Within Firefox as released by Mozilla, this issue is only exploitable with the Mozilla-controll...

CVE-2020-15667

When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution. Within Firefox as released by Mozilla, this issue is only exploitable with the Mozilla-controll...

UBUNTU-CVE-2020-15667

When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution. Within Firefox as released by Mozilla, this issue is only exploitable with the Mozilla-controll...

CVE-2020-15667: Out-of-bounds Write

When processing a MAR update file, after the signature has been validated, an invalid name length could result in a heap overflow, leading to memory corruption and potentially arbitrary code execution. Within Firefox as released by Mozilla, this issue is only exploitable with the Mozilla-controll...

SUSE-SU-2020:14490-1 Security update for shim

This update for shim fixes the following issues: Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 bsc1168994 This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This...

SUSE-SU-2020:2629-1 Security update for shim

This update for shim fixes the following issues: This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...

SUSE-SU-2020:2626-1 Security update for shim

This update for shim fixes the following issues: - Update to the unified shim binary from SUSE Linux Enterprise 15-SP1 bsc1168994 This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1236)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. This update is signed with the new UEFI signing key for openSUSE. It contains rebuilds of all available KMP packages also rebuilt with the new UEFi signing key. boo1174543 The following security bugs were fixed : ...

GHSA-PWQF-9H7J-7MV8 Incorrect threshold signature computation in TUF

Impact Metadadata signature verification, as used in tuf.client.updater, counted each of multiple signatures with identical authorized keyids separately towards the threshold. Therefore, an attacker with access to a valid signing key could create multiple valid signatures in order to meet the...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1236-1 Rating: important References: 1065600 1065729 1120163 1133021 1149032 1152472 1152489 1153274 1154353 1154488 1155518 1155798 1165933 1167773 1168959 1169771 1171857 1171988 1172197 1172201...

OPENSUSE-SU-2020:1236-1 Security update for the Linux Kernel

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. This update is signed with the new UEFI signing key for openSUSE. It contains rebuilds of all available KMP packages also rebuilt with the new UEFi signing key. boo1174543 The following security bugs were fixed: -...

SUSE SLED15 / SLES15 Security Update : fwupd (SUSE-SU-2020:2259-1)

This update of fwupd fixes the following issue : rebuild with new UEFI signing key bsc1174543 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE SLED15 / SLES15 Security Update : fwupd (SUSE-SU-2020:2258-1)

This update of fwupd fixes the following issue : rebuild with new UEFI signing key bsc1174543 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...

SUSE-SU-2020:2259-1 Security update for fwupd

This update of fwupd fixes the following issue: - rebuild with new UEFI signing key bsc1174543...

SUSE-SU-2020:2258-1 Security update for fwupd

This update of fwupd fixes the following issue: - rebuild with new UEFI signing key bsc1174543...

PT-2020-22740

Name of the Vulnerable Software and Affected Versions fwupd affected versions not specified Description The issue concerns a rebuild of fwupd with a new UEFI signing key. Recommendations At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2020-22739

Name of the Vulnerable Software and Affected Versions fwupd affected versions not specified Description The issue concerns a rebuild of fwupd with a new UEFI signing key. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

SUSE SLES12 Security Update : dpdk (SUSE-SU-2020:2194-1)

This update for dpdk to version 16.11.9 following issue : CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service bsc1156146. CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel boo1172004. rebuilt with new...

SUSE-SU-2020:2194-1 Security update for dpdk

This update for dpdk to version 16.11.9 following issue: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service bsc1156146. - CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel boo1172004. - rebuilt with ne...

kernel security and bug fix update

3.10.0-1127.18.2.OL7 - Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 setlease be called without ilock Jeff Layton...