dbus bug fix and enhancement update

D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Bug Fixes and Enhancements: dbus-x11 could start per-connect session bus when user does ssh X11 DISPLAY forwarding BZ1916124...

openSUSE Security Update : firejail (openSUSE-2021-271)

This update for firejail fixes the following issues : firejail 0.9.64.4 is shipped to openSUSE Leap 15.2 - CVE-2021-26910: Fixed root privilege escalation due to race condition boo1181990 Update to 0.9.64.4 : - disabled overlayfs, pending multiple fixes - fixed launch firefox for open url in...

CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

Design/Logic Flaw

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

UBUNTU-CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

CVE-2020-35512

CVE-2020-35512 is a use-after-free in D-Bus (multiple branches) that can crash or cause undefined behavior when usernames share a UID. IBM advisories reference this CVE across Cloud Pak for Business Automation, noting fixes via iFixes or upgrades (e.g., 24.0.1-IF004, 24.0.0-IF005, or 25.0.0-IF001...

CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

D-BUS Resource Management Error Vulnerability

D-Bus is a message bus system that is primarily used for inter-process communication and remote procedure calls, among other things. A resource management error vulnerability exists in D-Bus 1.12.20 that results in a crash or other undefined behavior...

Security update for firejail (important)

openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2021:0271-1 Rating: important References: 1181990 Cross-References: CVE-2020-17367 CVE-2020-17368 CVE-2021-26910 CVSS scores: CVE-2020-17367 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-17368 NV...

CVE-2021-21140

Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device...

Vulnerability fixed in IBM Integration Bus

IBM has fixed a vulnerability in the node.js component of Integration Bus. An unauthenticated malicious person could exploit the exploit the vulnerability to cause a denial-of-service. IBM has released updates to fix the vulnerability in Integration Bus V10.0.0.23. For more information, see:...

Security Bulletin: Vulnerabilities in Node.js affect IBM App Connect Enterprise and IBM Integration Bus (CVE-2020-7754)

Summary IBM App Connect Enterprise and IBM Integration Bus ship with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. Vulnerability Details Third Party Entry: 189917 DESCRIPTION: Node.js npm-user-validate module denial of service CVS...

LG Mobile Devices With Android OS Resource Management Error Vulnerability

LG mobile is a line of mobile device products from LG. LG Mobile devices Google Android OS 8.0, 8.1, 9.0, and 10 software suffer from a resource management error vulnerability that stems from the USB laf gadget having a use-after-free...

Apple IO Model Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. Apple IO Model suffers from a buffer error vulnerability that stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigger an...

Apple Model I/O Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. A security vulnerability exists in Apple Model I/O. The vulnerability stems from a boundary condition when handling USB files in the Model I / O component in macOS. A local user can insert a specially crafted USB drive to trigg...

Qualcomm Connectivity Code Issue Vulnerability

Qualcomm Connectivity is a Qualcomm Incorporated USA support component used in chips. A security vulnerability exists in Qualcomm Connectivity that originates from an untrusted pointer dereference when making USB control transfers if multiple requests are made from different standard request...