Gentoo Linux Security Advisory 202101-03

Gentoo Linux Security Advisory GLSA 202101-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

GLSA-202101-03 : ipmitool: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-03 ipmitool: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ipmiool. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary cod...

GLSA-202101-02 : Firejail: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-02 Firejail: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Firejail. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

Pillow 缓冲区错误漏洞

Gentoo is an open source Linux system from the Gentoo Foundation. Gentoo Linux prior to version 8.1.0 suffers from a buffer overflow vulnerability that stems from improper handling of system offsets and length tables, where SGIRleDecode has a 4-byte buffer overflow when decoding a carefully craft...

GLSA-202101-04 : Mozilla Firefox: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202101-04 Mozilla Firefox: Remote code execution A use-after-free bug was discovered in Mozilla Firefoxs handling of SCTP. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process, or cau...

GLSA-202101-05 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-05 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

GLSA-202012-23 : Apache Tomcat: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202012-23 Apache Tomcat: Information disclosure It was discovered that Apache Tomcat could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequen...

GLSA-202012-24 : Samba: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-24 Samba: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202012-22 : HAProxy: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202012-22 HAProxy: Arbitrary code execution It was discovered that HAProxy incorrectly handled certain HTTP/2 headers. Impact : A remote attacker, by sending a specially crafted HTTP/2 request, could possibly execute arbitrary cod...

GLSA-202012-09 : Cherokee: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-09 Cherokee: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cherokee. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202012-17 : D-Bus: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-17 D-Bus: Denial of service It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact : An attacker could possibly cause a Denial of Service condition or trigger...

GLSA-202012-19 : PowerDNS Recursor: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-19 PowerDNS Recursor: Denial of service It was discovered that it was possible to update the DNSSEC validation state to a bogus state for a cached record via DNS ANY query. Impact : A remote attacker could send specially...

GLSA-202012-20 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-20 Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE identifiers referenced below for details...

GLSA-202012-13 : OpenSSL: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-13 OpenSSL: Denial of service A NULL pointer dereference flaw was found in OpenSSL. Impact : A remote attacker, able to control the arguments of the GENERALNAMEcmp function in an application linked against OpenSSL, could...

GLSA-202012-14 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-14 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202012-18 : PowerDNS: information disclosure

The remote host is affected by the vulnerability described in GLSA-202012-18 PowerDNS: information disclosure It was discovered that PowerDNS did not properly handle certain unknown records. Impact : An authorized attacker with the ability to insert crafted records into a zone might be able to le...

GLSA-202012-16 : PHP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-16 PHP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers and change log referenced below for details. Impact : An attacker could cause a Denial of Service...

GLSA-202012-10 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-10 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : An attacker, by enticing a user to visit...

GLSA-202012-15 : GDK-PixBuf: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-15 GDK-PixBuf: Denial of service It was discovered that the GDK-PixBuf library did not properly handle certain GIF images. Impact : A remote attacker could entice a user to open a specially crafted GIF image in an applicati...

Cherokee: Multiple vulnerabilities

Background Cherokee is an extra-light web server. Description Multiple vulnerabilities have been discovered in Cherokee. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at this...