EulerOS Virtualization 2.9.1 : edk2 (EulerOS-SA-2021-1633)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - EFI Development Kit II AARCH64 UEFI FirmwareSecurity Fixes:AuthenticodeVerify calls OpenSSLs d2iPKCS7 API to parse asn encoded signe...

OPENSUSE-SU-2021:0376-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.30.5 bsc1182286: + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk fo...

Photon OS 3.0: Linux PHSA-2021-3.0-0201

An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0201. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid146997;...

Photon OS 2.0: Binutils PHSA-2021-2.0-0321

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0321. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

AZL-41571 CVE-2021-23841 affecting package shim-unsigned-aarch64 for versions less than 15.8-5

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

Moderate: Red Hat Security Advisory: nodejs:14 security and bug fix update

An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

nodejs:14 security and bug fix update

An update is available for nodejs-nodemon, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Node.js is a software development platform for...

unicorn:fuzz_emu_arm64_armbe: Use-of-uninitialized-value in float64_squash_input_denormal_aarch64eb

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5131298677063680 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemuarm64armbe Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

qemu security update

15:4.2.1-4.el7 - Document CVE-2020-25723 as fixed Mark Kanda Orabug: 32222397 CVE-2020-25084 CVE-2020-25723 - hw/net/e1000e: advance descoffset in case of null descriptor Prasad J Pandit Orabug: 32217517 CVE-2020-28916 - i386: Add 2nd Generation AMD EPYC processors Moger, Babu Orabug: 32217570 -...

keystone:fuzz_asm_arm64_arm: Use-of-uninitialized-value in llvm_ks::APFloat::convertDoubleAPFloatToAPInt

Detailed Report: https://oss-fuzz.com/testcase?key=5321231467413504 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmarm64arm Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

glibc security and bug fix update

2.17-322.0.2 - merge RH el7 u9 errata patches with Oracle patches Review-exception: Simple merge - merge RH el7 u9 patches with Oracle patches Review-exception: Simple merge - Four patches to match 3rd patch bundle from Marvell - modify MIPS values in elf/elf.h - add sysdeps/aarch64/sys/ifunc.h -...

CVE-2021-20221

An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU on aarch64 platform. The issue occurs because while writing an interrupt ID to the controller memory area, it is not masked to be 4 bits wide. It may lead to the said issue while updating...

CentOS 8 : edk2 (CESA-2020:1712)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1712 advisory. - edk2: numeric truncation in MdeModulePkg/PiDxeS3BootScriptLib CVE-2019-14563 Note that Nessus has not tested for this issue but has instead relied only on the...

openSUSE Security Update : webkit2gtk3 (openSUSE-2020-2304)

This update for webkit2gtk3 fixes the following issues : -webkit2gtk3 was updated to version 2.30.3 bsc1179122 bsc1179451 : - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code...

openSUSE Security Update : gcc7 (openSUSE-2020-2301)

This update for gcc7 fixes the following issues : - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instruction...

openSUSE Security Update : gcc7 (openSUSE-2020-2300)

This update for gcc7 fixes the following issues : - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instruction...

openSUSE Security Update : webkit2gtk3 (openSUSE-2020-2310)

This update for webkit2gtk3 fixes the following issues : -webkit2gtk3 was updated to version 2.30.3 bsc1179122 bsc1179451 : - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code...

Updated glibc packages fix security vulnerability

Security fixes: - fix buffer overrun in EUC-KR conversion module bz 2497 CVE-2019-25013 - arm: CVE-2020-6096: Fix multiarch memcpy for negative length BZ 25620 - arm: CVE-2020-6096: fix memcpy and memmove for negative length BZ 25620 - iconv: Fix incorrect UCS4 inner loop bounds BZ 26923...

kernel security and bug fix update

4.18.0-240.10.13.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x6...

Photon OS 1.0: Linux PHSA-2020-1.0-0350

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0350. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid144519...