SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:3950-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3950-1 advisory. Mozilla Firefox was updated to 115.3.1 ESR, fixing a security issue: MFSA 2023-44 bsc1215814 CVE-2023-5217: Fixed heap buffer overflow in...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libvpx (SUSE-SU-2023:3948-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3948-1 advisory. - CVE-2023-5217: Fixed a heap buffer overflow bsc1215778. Tenable has extracted the preceding description...

RHEL 8 : thunderbird (RHSA-2023:5438)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5438 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fixes: firefox:...

RHEL 9 : thunderbird (RHSA-2023:5435)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5435 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.3.1. Security Fixes: firefox:...

SUSE: Security Advisory (SUSE-SU-2023:3955-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2023:3949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3949-1 advisory. Mozilla Firefox was updated to 115.3.1 ESR, fixing a security issue: MFSA 2023-44 bsc1215814 CVE-2023-521...

RHEL 8 : firefox (RHSA-2023:5440)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5440 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libvpx (SUSE-SU-2023:3946-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3946-1 advisory. - CVE-2023-5217: Fixed a heap buffer overflow bsc1215778. Tenable has extracted the preceding description...

GLSA-202310-04 : libvpx: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-04 libvpx: Multiple Vulnerabilities - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted...

RHEL 8 : firefox (RHSA-2023:5436)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:5436 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

SUSE-SU-2023:3950-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 115.3.1 ESR, fixing a security issue: MFSA 2023-44 bsc1215814 CVE-2023-5217: Fixed heap buffer overflow in libvpx...

SUSE-SU-2023:3948-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow bsc1215778...

SUSE-SU-2023:3946-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow bsc1215778...

SUSE-SU-2023:3942-1 Security update for vim

This update for vim fixes the following issues: Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflistaltfpos bsc1215004. - CVE-2023-4734: Fixed segmentation fault in function ffullcommand bsc1214925. - CVE-2023-4735: Fixed out of bounds write in ops.c bsc1214924. -...

SUSE-SU-2023:3941-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Mozilla Firefox ESR 115.3.1 ESR was released to fix a security issue: - MFSA 2023-44 bsc1215814 CVE-2023-5217: Fixed a heap buffer overflow in libvpx...

SUSE-SU-2023:3940-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow bsc1215778...

OSV-2023-953 Heap-buffer-overflow in xmlDictLookupInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62911 Crash type: Heap-buffer-overflow READ Crash state: xmlDictLookupInternal xmlDictLookup htmlParseNameComplex...

Updated chromium-browser-stable package fixes bugs and vulnerabilities

The chromium-browser-stable package has been updated to the 117.0.5938.92 release, fixing bugs and 31 vulnerabilities, together with 117.0.5938.92, 117.0.5938.88, 117.0.5938.62, 116.0.5845.187 and 116.0.5845.179. Google is aware that an exploit for CVE-2023-5217 exists in the wild. High...

Updated libwebp packages fix a security vulnerability

Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

MGASA-2023-0282 Updated libwebp packages fix a security vulnerability

Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...