10579 matches found
Security fix for the ALT Linux 10 package thunderbird version 78.5.0-alt1
Nov. 19, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...
RHEL 7 : firefox (RHSA-2020:4080)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4080 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Mozilla Thunderbird Security Advisories (MFSA2020-50, MFSA2020-52) - Windows
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
Mozilla Firefox Security Advisories (MFSA2020-50, MFSA2020-52) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Security Vulnerabilities fixed in Firefox ESR 78.5 — Mozilla
A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. When drawing a...
Security Vulnerabilities fixed in Thunderbird 78.5 — Mozilla
A parsing and event loading mismatch in Thunderbird's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. When drawing a...
CVE-2020-26968
Mozilla developers reported memory safety bugs present in Firefox 82 and Firefox ESR 78.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 83, Firefox E...
openSUSE Security Update : the Linux Kernel (openSUSE-2020-1906)
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-25704: Fixed a memory leak in perfeventparseaddrfilter bsc1178393. - CVE-2020-25668: Make FONTX ioctl use the tty pointer they were actually passed bsc1178123. -...
IMChecker
This repository is an offensive tool for API misuse detection, specifically designed to identify API misuse bugs in C programs. The tool is called IMChecker, and it uses a constraint-directed static analysis technique powered by a domain-specific language DSL for specifying API usage constraints...
Security fix for the ALT Linux 10 package firefox-esr version 78.5.0-alt1
Nov. 16, 2020 Andrey Cherepanov 78.5.0-alt1 - New version 78.5.0. - Fixes: + CVE-2020-26951 Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code + CVE-2020-16012 Variable time processing of cross-origin images during drawImage calls + CVE-2020-26953 Fullscreen...
OPENSUSE-SU-2020:1906-1 Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25704: Fixed a memory leak in perfeventparseaddrfilter bsc1178393. - CVE-2020-25668: Make FONTX ioctl use the tty pointer they were actually passed bsc1178123. -...
Silver Peak SD-WAN Bugs Allow for Network Takeover
Silver Peak’s Unity Orchestrator, a software-defined WAN SD-WAN management platform, suffers from three remote code-execution security bugs that can be chained together to allow network takeover by unauthenticated attackers. SD-WAN is a cloud-based networking approach used by enterprises and...
Joomla SIGE 3.4.1-FREE / 3.5.3-PRO RFI / Cross Site Scripting
Title: SIGE - Simple Image Gallery Extended joomla extension 3.4.1-FREE / 3.5.3-PRO - Multi Vulnerability Remote File Inclusion RFI & Cross Site Scripting XSS date: 2020-11-11 Vendor Homepage: https://kubik-rubik.de/ Software Link: https://kubik-rubik.de/sige-simple-image-gallery-extended Softwar...
SDL security update
1.2.15-38 - fix CVEs - Resolves: rhbz1716209, rhbz1716210, rhbz1716211, rhbz1716212, rhbz1716213, rhbz1716214, rhbz1716215, rhbz1716216, rhbz1716217, rhbz1716218, rhbz1716219...
MGASA-2020-0401 Updated suricata packages fix security vulnerabilities
The suricata package has been updated to version 4.1.9, which fixes security issues and other bugs. See the upstream announcements for details...
Updated suricata packages fix security vulnerabilities
The suricata package has been updated to version 4.1.9, which fixes security issues and other bugs. See the upstream announcements for details...
Update iOS Right Now to Fix Some Bad Security Bugs
Plus: Ransomware hits Capcom, the US seizes Iranian domains, and more of the week’s top security news...
OSV-2020-2130 Use-of-uninitialized-value in memory_test
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27020 Crash type: Use-of-uninitialized-value Crash state: memorytest fuzzersend SendBuffered...
firefox security update
CentOS Errata and Security Advisory CESA-2020:4310 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...