openSUSE Security Update : MozillaThunderbird (openSUSE-2021-387)

This update for MozillaThunderbird fixes the following issues : - Mozilla Thunderbird 78.8 - fixed: Importing an address book from a CSV file always reported an error - fixed: Security information for S/MIME messages was not displayed correctly prior to a draft being saved - fixed: Calendar:...

OPENSUSE-SU-2021:0387-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.8 fixed: Importing an address book from a CSV file always reported an error fixed: Security information for S/MIME messages was not displayed correctly prior to a draft being saved fixed: Calendar: FileLink UI...

Security Bulletin: Vulnerabilities in Perl affect AIX (CVE-2020-10543, CVE-2020-10878, and CVE-2020-12723)

Summary There are vulnerabilities in Perl that affect AIX. Vulnerability Details CVEID: CVE-2020-12723 DESCRIPTION: Perl is vulnerable to a buffer overflow, caused by recursive Sstudychunk calls in regcomp.c. By using a specially-crafted regular expression, a remote attacker could overflow a buff...

New Chrome 0-day Bug Under Active Attacks – Update Your Browser ASAP!

Exactly a month after patching an actively exploited zero-day flaw in Chrome, Google today rolled out fixes for yet another zero-day vulnerability in the world's most popular web browser that it says is being abused in the wild. Chrome 89.0.4389.72, released by the search giant for Windows, Mac,...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2021:0659-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 78.8.0 ESR - Fixed: Various stability, functionality, and security fixes MFSA 2021-08 bsc1182614 - CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redire...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 89 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 89.0.4389.72 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

SUSE-SU-2021:0667-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.8.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2021-08 bsc1182614 CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redirect...

SUSE-SU-2021:14657-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.8.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2021-08 bsc1182614 CVE-2021-23969: Content Security Policy violation report could have contained the destination of a redirect...

SUSE-SU-2021:0661-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 78.8 fixed: Importing an address book from a CSV file always reported an error fixed: Security information for S/MIME messages was not displayed correctly prior to a draft being saved fixed: Calendar: FileLink UI...

RHEL 8 : thunderbird (RHSA-2021:0657)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0657 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.8.0. Security Fixes: Mozilla:...

Security update for MozillaFirefox (low)

openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:0335-1 Rating: low References: 1181848 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for MozillaFirefox fixes the following...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2021:0536-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.30.5 bsc1182286 : + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk...

Security fix for the ALT Linux 10 package firefox-esr version 78.8.0-alt1

Feb. 23, 2021 Andrey Cherepanov 78.8.0-alt1 - New version 78.8.0. - Security fixes: + CVE-2021-23969 Content Security Policy violation report could have contained the destination of a redirect + CVE-2021-23968 Content Security Policy violation report could have contained the destination of a...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0532-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute code in the kernel bnc1181349...

SUSE-SU-2021:0533-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - Update to version jdk8u282 icedtea 3.18.0 January 2021 CPU bsc1181239 Security fixes + JDK-8247619: Improve Direct Buffering of Characters CVE-2020-14803 Import of OpenJDK 8 u282 build 01 + JDK-6962725: Regtest...

OPENSUSE-SU-2021:0310-1 Security update for buildah, libcontainers-common, podman

This update for buildah, libcontainers-common, podman fixes the following issues: Changes in libcontainers-common: - Update common to 0.33.0 - Update image to 5.9.0 - Update podman to 2.2.1 - Update storage to 1.24.5 - Switch to seccomp profile provided by common instead of podman - Update...

FreeBSD : chromium -- multiple vulnerabilities (48514901-711d-11eb-9846-e09467587c17)

Chrome Releases reports : This release contains 10 security fixes, including : - 1138143 High CVE-2021-21149: Stack overflow in Data Transfer. Reported by Ryoya Tsukasaki on 2020-10-14 - 1172192 High CVE-2021-21150: Use after free in Downloads. Reported by Woojin Oh@pwnexploit of STEALIEN on...

Moderate: Red Hat Security Advisory: nodejs:14 security and bug fix update

An update for the nodejs:14 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

FreeBSD : openexr, ilmbase -- security fixes related to reading corrupted input files (98044aba-6d72-11eb-aed7-1b1b8a70cc8b)

Cary Phillips reports : Patch release with various bug/sanitizer/security fixes, primarily related to reading corrupted input files.... C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 10 security fixes, including: 1138143 High CVE-2021-21149: Stack overflow in Data Transfer. Reported by Ryoya Tsukasaki on 2020-10-14 1172192 High CVE-2021-21150: Use after free in Downloads. Reported by Woojin Oh@pwnexpoit of STEALIEN on 2021-01-29...