Fedora 31 : nspr / nss (2020-16741ac7ff)

Updates the nspr and nss package to upstream NSPR 4.26 and NSS 3.54. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes : - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.54releasenotes Note that Tenable Network...

nanopb:fuzztest: Use-of-uninitialized-value in pb_encode_varint

Project: https://github.com/nanopb/nanopb.git Detailed Report: https://oss-fuzz.com/testcase?key=5127522971549696 Project: nanopb Fuzzing Engine: libFuzzer Fuzz Target: fuzztest Job Type: libfuzzermsannanopb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

firefox security update

68.11.0-1.0.1 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 68.11.0-1 - Update to 68.11.0 build1...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-4441-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4441-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2020:2008-1)

This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.8+10 July 2020 CPU, bsc1174157 - Security fixes : + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming +...

Low: Red Hat Security Advisory: cloud-init security, bug fix, and enhancement update

An update for cloud-init is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

openSUSE Security Update : xen (openSUSE-2020-985)

This update for xen fixes the following issues : - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. - CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation...

openSUSE Security Update : xen (openSUSE-2020-965)

This update for xen fixes the following issues : - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. - CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation...

Fedora 32 : nspr / nss (2020-3ef1937475)

Updates the nspr and nss package to upstream NSPR 4.26 and NSS 3.54. For details about new functionality and a list of bugs fixed in this release please see the upstream release notes : - https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS3.54releasenotes Note that Tenable Network...

FreeBSD : jenkins -- multiple vulnerabilities (1ddab5cb-14c9-4632-959f-802c412a9593)

Jenkins Security Advisory : DescriptionHigh SECURITY-1868 / CVE-2020-2220 Stored XSS vulnerability in job build time trend High SECURITY-1901 / CVE-2020-2221 Stored XSS vulnerability in upstream cause High SECURITY-1902 / CVE-2020-2222 Stored XSS vulnerability in 'keep forever' badge icons High...

OPENSUSE-SU-2020:0965-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. - CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory: Description High SECURITY-1868 / CVE-2020-2220 Stored XSS vulnerability in job build time trend High SECURITY-1901 / CVE-2020-2221 Stored XSS vulnerability in upstream cause High SECURITY-1902 / CVE-2020-2222 Stored XSS vulnerability in 'keep forever' badge icons High...

c-blosc2:decompress_fuzzer: Heap-use-after-free in ZSTD_DDict_dictContent

Detailed Report: https://oss-fuzz.com/testcase?key=6101295449767936 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62b00000e208 Crash State: ZSTDDDictdictContent...

SUSE-SU-2020:1902-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. - CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation...

SUSE SLES12 Security Update : xen (SUSE-SU-2020:1887-1)

This update for xen fixes the following issues : CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. CVE-2020-15566: Fixed incorrect error handling in event channel port allocation bsc1173376...

SUSE-SU-2020:1887-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. - CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation...

firefox security update

68.10.0-1.0.1.el82 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references Orabug: 30530527 68.10.0-1 - Update to 68.10.0 build1...

firefox security update

68.10.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file Fri Jun 26 2020 Jan Horak - Update to 68.10.0 build1...

c-blosc:compress_fuzzer: Heap-buffer-overflow in blosclz_compress

Project: https://github.com/Blosc/c-blosc.git Detailed Report: https://oss-fuzz.com/testcase?key=5869677174849536 Project: c-blosc Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzerasanc-blosc Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

Security update for unbound (important)

openSUSE Security Update: Security update for unbound Announcement ID: openSUSE-SU-2020:0912-1 Rating: important References: 1157268 1171889 Cross-References: CVE-2019-18934 CVE-2020-12662 CVE-2020-12663 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...