Ubuntu: Security Advisory (USN-4621-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

async-mutex (>=1.0.1, <=1.4.1), blocking-permit (>=0.1.0, <=1.2.1) +18 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2, <=0.3.1)

futures-intrusive CARGO version =0.2.2, =1.0.1, =0.1.0, =0.4.0, =0.4.0, =0.4.0, =0.2.0, =0.10.0, =0.3.6, =0.3.7 - raii-counter-futures 0.1.0 - stm32f1xx-futures 0.1.0 - switchyard 0.1.0 and more Source cves: CVE-2020-35915 Source advisory: OSV:RUSTSEC-2020-0072...

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +25 more potentially affected by CVE-2020-7752 via systeminformation (>=4.0.9, <=4.27.7)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =1.2.3 - @hnordt/sysinfo 0.1.1 and more Source cves:...

webkitgtk4 security update

CentOS Errata and Security Advisory CESA-2020:4035 An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

qt5 security update

CentOS Errata and Security Advisory CESA-2020:4025 An update for qt5-qtbase is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

pcp, perl, python security update

CentOS Errata and Security Advisory CESA-2020:3869 An update for pcp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update

CentOS Errata and Security Advisory CESA-2020:3958 An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2020:3861 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

@adeunis/codecs (>=1.3.0, <=1.4.0), @koalarx/utils (>=3.0.7, <=3.0.8) +5 more potentially affected by CVE-2020-7772 via doc-path (>=2.0.0, <=2.2.0)

doc-path NPM version =2.0.0, =1.3.0, =3.0.7, =1.0.5, =3.2.0, =1.1.4, =1.2.3 Source cves: CVE-2020-7772 Source advisory: SNYK:JS-DOCPATH-1011952...

20190403-utils (1.0.0), 3nit-utils (>=0.24.0, <=1.0.2) +4751 more potentially affected by CVE-2020-15168 via node-fetch (>=2.0.0, <=2.6.0)

node-fetch NPM version =2.0.0, =0.24.0, =0.0.0-alpha.1, =1.0.43, =0.0.80, =1.0.0-beta.1, =0.0.0-canary.0, =0.0.1, =2.0.0-alpha10, =1.0.0-beta, =0.1.0, =2.0.0-alpha10, =2.0.3 and more Source cves: CVE-2020-15168 Source advisory: OSV:GHSA-W7RC-RWVF-8Q5R...

Important: kernel

Issue Overview: A flaw null pointer dereference in the Linux kernel cgroupv2 subsystem in versions before 5.7.10 was found in the way when reboot the system. A local user could use this flaw to crash the system or escalate their privileges on the system. CVE-2020-14356 A flaw was found in the Lin...

@atlauncher/atlauncher-scripts (>=0.1.0-18, <=0.1.0-19), @atomist/sample-sdm (>=0.5.1-atomist-update-latest-1540938130032.20181101043939, <=0.5.1-master.20181101044648) +415 more potentially affected by unknown CVE via lodash.merge (>=4.0.1, <=4.6.1)

lodash.merge NPM version =4.0.1, =0.1.0-18, =0.5.1-atomist-update-latest-1540938130032.20181101043939, =5.3.8, =3.1.0, =5.0.0, =5.2.7, =5.2.8, =6.1.1, =5.0.0, =5.0.0, =5.2.8, =5.1.1, =0.1.3, =6.2.6, =6.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H726-X36V-RX45...

@27works/posto (2.0.2), @asephermann/capacitor-filechooser (0.0.1) +161 more potentially affected by unknown CVE via eco (>=1.0.3, <=1.1.0-rc-3)

eco NPM version =1.0.3, =0.0.9, =1.0.1, =0.0.1, =0.0.73, =0.0.1, =1.2.1, =0.0.1, =0.2.5, =1.0.0, =0.1.0, =0.2.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-R32X-JHW5-G48P...

@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4939 via yui (>=3.5.0, <=3.9.1)

yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4939 Source advisory: OSV:GHSA-MJ87-8XF8-FP4W...

amino-deploy (>=0.0.1, <=0.1.1), amino-drone (>=0.0.1, <=0.1.2) +65 more potentially affected by CVE-2013-4116 via npm (>=1.1.70, <=1.3.1)

npm NPM version =1.1.70, =0.0.1, =0.0.1, =0.3.4, =0.0.0, =0.12.3, =6.5.1-dev, =0.0.2, =1.0.30, =0.0.0, =0.0.1, =0.0.1, =0.2.0, =0.2.6 and more Source cves: CVE-2013-4116 Source advisory: OSV:GHSA-V3JV-WRF4-5845...

10er10 (0.23.0), 7th-setin (1.0.2) +404 more potentially affected by CVE-2015-7982 via gm (>=1.0.5, <=1.20.0)

gm NPM version =1.0.5, =0.0.13, =0.0.1, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =0.3.4, =0.5.0, =0.3.1, =0.0.1, =1.3.0, =3.9.1-patch1, =3.11.2-patch1 and more Source cves: CVE-2015-7982 Source advisory: OSV:GHSA-PJH3-JV7W-9JPR...

@hytong-yarn/cli (1.4.0), @yym-yarn/cli (1.0.0) +10 more potentially affected by CVE-2013-6393 via libyaml (>=0.0.2, <=0.2.2)

libyaml NPM version =0.0.2, =0.3.0, =1.0.24, =2.0.8, =0.0.1, =0.1.2, =0.0.10, =0.0.4, =0.0.5 Source cves: CVE-2013-6393 Source advisory: OSV:GHSA-M75H-CGHQ-C8H5...

@aqsi/ui (>=3.22.0-rc.0, <=4.15.1), @ausbom/charts (>=0.1.0, <=0.1.2) +6 more potentially affected by unknown CVE via highcharts (>=8.0.0, <=8.1.0)

highcharts NPM version =8.0.0, =3.22.0-rc.0, =0.1.0, =0.0.0, =1.3.0, =7.0.0-alpha1, =16.8.1, =1.2.8, =1.0.6, =1.0.7 Source cves: unknown CVE Source advisory: OSV:GHSA-GR4J-R575-G665...

@decentverse/server (>=0.0.1, <=0.0.148), @swapscanner/truffle-hdwallet-provider-klaytn (1.4.2) +18 more potentially affected by CVE-2020-7717 via dot-notes (3.1.1)

dot-notes NPM version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dot-notes and may be impacted: - @decentverse/server =0.0.1, =1.0.0, =1.0.0, =1.0.1-rc.4, =1.4.0-rc.1, =1.0.0, =1.6.4, =0.0.1, =1.0.0, =0.0.1, =0.1.1 and more Source cves:...

@abstract.tech/brad-cli (>=0.0.4, <=1.0.1), @bandwidth/shared-components (>=6.0.2, <=6.2.2) +106 more potentially affected by CVE-2020-36632 via flat (>=4.0.0, <=4.1.0)

flat NPM version =4.0.0, =0.0.4, =6.0.2, =1.0.7, =4.2.2, =1.2.10, =2.1.31, =1.0.11, =2.0.11, =1.1.11, =1.0.27, =2.0.8, =1.0.0, =0.0.6, =0.0.1, =0.0.2, =0.0.8 and more Source cves: CVE-2020-36632 Source advisory: SNYK:JS-FLAT-596927...