Lenovo, HP, Dell Peripherals Face Unpatched Firmware Bugs

Fresh firmware vulnerabilities in Wi-Fi adapters, USB hubs, trackpads and cameras are putting millions of peripheral devices in danger of a range of cyberattacks, according to research from Eclypsium. TouchPad and TrackPoint firmware in Lenovo Laptops, HP Wide Vision FHD camera firmware in HP...

Fedora 30 : ipmitool (2020-92cc67ff5a)

Security fix for CVE-2020-5208 for details see https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qx w-p7cp Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clea...

Fedora 30 : firefox (2020-4e1ba1a692)

Update to 73.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora 31 : ipmitool (2020-eb0cf4d268)

Security fix for CVE-2020-5208 for details see https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qx w-p7cp Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clea...

Fedora 31 : kernel / kernel-headers (2020-f884f9dd7d)

Update to Linux v5.4.19 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

The vulnerability of Firefox browsers, related to a network security service error called CertificateVerify, allows attackers to compromise data integrity.

The vulnerability of Firefox is related to a bug in the Network Security Service’s CertificateVerify function. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

CVE-2018-18508

In Network Security Services NSS before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service. Mitigation This issue only affects applications compiled against NSS which use CMS Cryptographic Message Syntax API. Other...

Authentication flaw

ilbo App ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01 allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors...

Debian DLA-2103-1 : debian-security-support update: libqb and mysql-5.5 end

debian-security-support, the Debian security support coverage checker, has been updated in jessie-security. This marks the end of life of the libqb package in jessie. A recently reported vulnerability against libqb which allows users to overwrite arbitrary files via a symlink attack cannot be...

Fedora 31 : cutter-re / radare2 (2020-acd8cdb08d)

Rebase to radare2-4.2.1 and cutter-re 1.10.1. It fixes CVE-2019-19590 and CVE-2019-19547. It also fix a problem in cutter-re that did not display the window icon on Wayland. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

CVE-2020-8614

CVE-2020-8614 concerns the Askey AP4000W TDC_V1.01.003 device. A vulnerability allows a remote attacker to achieve Remote Code Execution (RCE) by sending a specially crafted network packet to the bd_svr service listening on TCP port 54188. The information available across connected documents conf...

Fedora 31 : kernel (2020-5ce1a122aa)

Update to Linux v5.4.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security...

Fedora 31 : poppler (2020-24ded2cd52)

Security fix for CVE-2019-14494. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 31 : spamassassin (2020-24dac7d890)

Update to 3.4.4. Fixes CVE-2020-1930 and CVE-2020-1931. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

February 11, 2020—KB4537803 (Security-only update)

None None...

CVE-2019-13321

CVE-2019-13321 affects Xiaomi Browser prior to 10.4.0. The flaw is in the Captive Portal handling of HTTP responses; a crafted HTML response can cause the Captive Portal to open a browser to a specified location, enabling code execution in the context of the current process when combined with oth...

Equifax Breach: Four Members of Chinese Military Charged with Hacking

U.S. authorities have charged four Chinese military officers in the 2017 Equifax data breach, which compromised the data of nearly 150 million. The four, Wu Zhiyong, Wang Qian, Xu Ke and Liu Lei, are believed to be members of the 54th Research Institute of the Chinese People’s Liberation Army PLA...

Fedora 31 : 1:libuv / 1:nodejs / nghttp2 (2020-3838c8ea98)

Update to Node.js 12.15.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

Fedora 31 : glib2 (2020-339d413324)

Add patch for CVE-2020-6750 and related issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Fedora 31 : nodejs-mixin-deep (2020-f80e5c0d65)

Update to upstream 1.3.2 release for CVE-2019-10746 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...