Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58750)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this vulnerability to cause MySQL Server to...

Oracle MySQL Server Authorization Issues Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An authorization issue vulnerability exists in Oracle MySQL Server Server: PS version 8.0.21 and earlier versions that could allow a highly privilege...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace and mount a FUSE filesystem. Upon interaction with this FUSE filesystem if the userspace component is terminated via a kill of the PID namespace's pid 1 it will result in a hung task and resources being permanently locked up until system reboot. This can result in resource exhaustion.

...

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2020:2143-1)

This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.8+10 July 2020 CPU, bsc1174157 - Security fixes : + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support + JDK-8233234: Better Zip Naming +...

CVE-2020-14576

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: UDF. Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

Fedora 32 : webkit2gtk3 (2020-ab074c6cdf)

Update to 2.28.3 : - Fix kinetic scrolling with async scrolling. - Fix web process hangs on large GitHub pages. - Bubblewrap sandbox should not attempt to bind empty paths. - Fix threading issues in the media player. - Fix several crashes and rendering issues. - Security fixes: CVE-2020-9802,...

Debian DSA-4701-1 : intel-microcode - security update

This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for the Special Register Buffer Data Sampling CVE-2020-0543 , Vector Register Sampling CVE-2020-0548 and L1D Eviction Sampling CVE-2020-0549 hardware vulnerabilities. The microcode update for HEDT and Xe...

SUSE SLES15 Security Update : runc (SUSE-SU-2020:0944-1)

This update for runc fixes the following issues : runc was updated to v1.0.0rc10 CVE-2019-19921: Fixed a mount race condition with shared mounts bsc1160452. Fixed an issue where podman run hangs when spawned by salt-minion process bsc1149954. Note that Tenable Network Security has extracted the...

Oracle VM VirtualBox Denial of Service Vulnerability (CNVD-2020-04049)

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A denial of service vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.36, 6.0.16, and 6.1.2. An attacker could exploit this vulnerability to cause a denial of service hangs or...

Memory Leak

vimeo/psalm is vulnerable to memory leak. The leak exists due to the use of a leaky template type in the replaceTemplateTypesWithArgTypes function, allowing remote attackers to cause system hangs...

CentOS 7 : kernel (CESA-2019:3979)

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

yum security, bug fix, and enhancement update

createrepoc 0.11.0-3 - Backport patch to switch off timestamps on documentation in order to remove file conflicts RhBug:1738788 0.11.0-2 - Consistently produce valid URLs by prepending protocol. RhBug:1632121 - modifyrepoc: Prevent doubling of compression test.gz.gz RhBug:1639287 - Correct pkg...

kernel security update

3.10.0-1062.4.3.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1062.4.3 - drm drm/i915/cmdparser: Fix jump whitelist clearing Dave Airlie...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2019-37938)

Oracle VM VirtualBox is cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.34 and 6.0.14. An attacker could exploit this vulnerability to cause Oracle VM VirtualBox to hang or crash frequently...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2019-37929)

Oracle VM VirtualBox is cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.34 and 6.0.14. An attacker could exploit this vulnerability to cause Oracle VM VirtualBox to hang or crash frequently...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2019-37934)

Oracle VM VirtualBox is cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.34 and 6.0.14. An attacker could use this vulnerability to cause Oracle VM VirtualBox to hang or crash frequently and...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2019-37936)

Oracle VM VirtualBox is cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.34 and 6.0.14. An attacker could exploit this vulnerability to cause Oracle VM VirtualBox to hang or crash frequently...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2019-37145)

MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.017 and earlier. An attacker can exploit this vulnerability to cause the MySQL server t...