RHEL 8 : firefox (RHSA-2020:3833)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3833 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

RHEL 6 : firefox (RHSA-2020:3835)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3835 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2020-15703

There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an...

happy700sc.or.kr Cross Site Scripting vulnerability OBB-1357978

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Security Vulnerabilities fixed in Thunderbird 78.3 — Mozilla

By exploiting an Open Redirect vulnerability on a website, an attacker could have spoofed the site displayed in the download file dialog to show the original site the one suffering from the open redirect rather than the site the file was actually downloaded from. Thunderbird sometimes ran the...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists through memory safety bugs...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. The vulnerability exists through memory safety bugs...

CVE-2020-15710

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

CVE-2020-14304

A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality...

Fedora 31 : chromium (2020-88bf0a76d1)

Update to Chromium 85.0.4183.83. Bugs fixed, security holes patched, and features added. Hold on to your butts. List of CVEs resolved with this update: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545...

SUSE-SU-2020:2605-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. - CVE-2020-14356: Fixed a null pointer dereference in cgroupv2 subsystem...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2582-1)

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. CVE-2020-14331: Fixed a missing check in vgacon scrollback handling bsc1174205...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2576-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. CVE-2020-14331: Fixed a missing check in vgacon scrollback handling bsc1174205...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:2575-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-1749: Use ip6dstlookupflow instead of ip6dstlookup bsc1165629. CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798...

SUSE-SU-2020:2582-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. - CVE-2020-14331: Fixed a missing check in vgacon scrollback handling bsc1174205. -...

SUSE-SU-2020:2579-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes. The following security bug was fixed: - CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption bsc1176069. The following non-security bugs were fixed: - EDAC: Fix...

SUSE-SU-2020:2578-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to 3.12.31 to receive various security and bugfixes. The following security bug was fixed: - CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption bsc1176069. The following non-security bugs were fixed: - EDAC:...

SUSE-SU-2020:2575-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-1749: Use ip6dstlookupflow instead of ip6dstlookup bsc1165629. - CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798. -...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1379)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-14386: Fixed an overflow in tpacketrcv in afpacket that could lead to a local privilege escalation bsc1176069. The following non-security bugs were fixed : -...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2574-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-1749: Use ip6dstlookupflow instead of ip6dstlookup bsc1165629. CVE-2020-14314: Fixed a potential negative array index in dosplit bsc1173798...