Arbitrary Code Execution

linux is vulnerable to arbitrary code execution. The vulnerabilitye exists as the kernel PV block backend expects the kernel thread handler to reset ring-xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and...

Security fix for the ALT Linux 10 package thunderbird version 78.8.0-alt1

Feb. 25, 2021 Andrey Cherepanov 78.8.0-alt1 - New version 78.8.0. - Security fixes: + CVE-2021-23969 Content Security Policy violation report could have contained the destination of a redirect + CVE-2021-23968 Content Security Policy violation report could have contained the destination of a...

CVE-2021-21153

Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

[ASA-202102-9] ansible: information disclosure

Arch Linux Security Advisory ASA-202102-9 ========================================= Severity: Medium Date : 2021-02-06 CVE-ID : CVE-2021-20178 CVE-2021-20180 CVE-2021-20191 Package : ansible Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-1437 Summary ======= T...

DSA-4843-1 linux - security update

Bulletin has no description...

GLSA-202101-28 : ncurses: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-28 ncurses: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202012-20 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-20 Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE identifiers referenced below for details...

Scientific Linux Security Update : pacemaker on SL7.x i686/x86_64 (2020:5453)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5453-1 advisory. - pacemaker: ACL restrictions bypass CVE-2020-25654 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1i-alt1

1.1.1i-alt1 built Dec. 9, 2020 Gleb Fotengauer-Malinovskiy in task 263105 Dec. 8, 2020 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1i fixes CVE-2020-1971...

DEBIAN-CVE-2020-12912

A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit RAPL interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access...

Privilege escalation

Insufficiently protected credentials in the IntelR QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Security fix for the ALT Linux 10 package libetpan version 1.9.4-alt2

Oct. 1, 2020 Aleksei Nikiforov 1.9.4-alt2 - Applied security fixes from upstream Fixes: CVE-2020-15953...

[ASA-202009-9] chromium: multiple issues

Arch Linux Security Advisory ASA-202009-9 ========================================= Severity: High Date : 2020-09-23 CVE-ID : CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 Package : chromium Type : multiple issues Remote : Yes Link :...

Denial Of Service (DoS)

linux is vulnerable to denial of service DoS. The vulnerability exists in through a malicious USB device in the drivers/usb/class/cdc-acm.c driver...

An overview of targeted attacks and APTs on Linux

Perhaps unsurprisingly, a lot has been written about targeted attacks on Windows systems. Windows is, due to its popularity, the platform for which we discover most APT attack tools. At the same time, theres a widely held opinion that Linux is a secure-by-default operating system that isnt...

Stable Channel Update for Desktop

The stable channel has been updated to 84.0.4147.135 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

Ghostscript < 9.51 Multiple Vulnerabilities - Linux

Ghostscript is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202007-53 : Dropbear: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-53 Dropbear: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202007-50 : GLib Networking: Improper certificate validation

The remote host is affected by the vulnerability described in GLSA-202007-50 GLib Networking: Improper certificate validation GTlsClientConnection skips hostname verification of the servers TLS certificate if the application fails to specify the expected server identity. Impact : There may be a...

[ASA-202006-15] freerdp: multiple issues

Arch Linux Security Advisory ASA-202006-15 ========================================== Severity: High Date : 2020-06-28 CVE-ID : CVE-2020-4030 CVE-2020-4031 CVE-2020-4032 CVE-2020-4033 CVE-2020-11095 CVE-2020-11096 CVE-2020-11097 CVE-2020-11098 CVE-2020-11099 Package : freerdp Type : multiple issu...