CVE-2021-29978

Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability affects Mozilla VPN 2.3...

JetBrains Security Bulletin Q2 2021

JetBrains News Security JetBrains Security Bulletin Q2 2021 Robert Demmer In the second quarter of 2021, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description |...

CVE-2021-29978: Undefined Security Weakness

Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability affects Mozilla VPN 2.3...

PT-2021-25754

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description The issue concerns a potential security vulnerability in the Linux Kernel. It involves the cgroup component, where the source verification process may be flawed, as it does not properly check...

[ASA-202108-4] chromium: multiple issues

Arch Linux Security Advisory ASA-202108-4 ========================================= Severity: High Date : 2021-08-03 CVE-ID : CVE-2021-30590 CVE-2021-30591 CVE-2021-30592 CVE-2021-30593 CVE-2021-30594 CVE-2021-30596 CVE-2021-30597 Package : chromium Type : multiple issues Remote : Yes Link :...

SUSE-SU-2021:2560-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19756 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. bsc1188062 - CVE-2021-22555: Fixed an heap out-of-bounds write in...

USN-5024-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

[ASA-202107-72] 389-ds-base: multiple issues

Arch Linux Security Advisory ASA-202107-72 ========================================== Severity: Medium Date : 2021-07-27 CVE-ID : CVE-2021-3514 CVE-2021-3652 Package : 389-ds-base Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2206 Summary ======= The package...

Ubuntu: Security Advisory (USN-5022-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5022-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.26 in Ubuntu 20.04 LTS and Ubuntu 21.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.35. In addition to security fixes, the updated packages...

OPENSUSE-SU-2021:1087-1 Security update for crmsh

This update for crmsh fixes the following issues: Update to version 4.3.1+20210624.67223df2: - Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node bsc1187553 - Fix: history: use Path.mkdir instead of mkdir commandbsc1179999, CVE-2020-35459 - Dev: crashtest: Add...

SUSE-SU-2021:2453-1 Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-12251 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. bsc1187597 - CVE-2021-23133: Fixed...

CVE-2021-2352 vulnerabilities

Vulnerabilities for packages: mysql...

SUSE-SU-2021:2440-1 Security update for curl

This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. bsc1188220 - CVE-2021-22924: Bad connection reuse due to flawed path name checks. bsc1188219 - CVE-2021-22923: Insufficiently Protected Credentials. bsc1188218 - CVE-2021-22922: Wrong conten...

OpenJDK 7 <= 7u301 / 8 <= 8u292 / 11.0.0 <= 11.0.11 / 13.0.0 <= 13.0.7 / 15.0.0 <= 15.0.3 / 16.0.0 <= 16.0.1 Multiple Vulnerabilities (2021-07-20)

The version of OpenJDK installed on the remote host is 7 prior to 7u301 / 8 prior to 8u292 / 11.0.0 prior to 11.0.11 / 13.0.0 prior to 13.0.7 / 15.0.0 prior to 15.0.3 / 16.0.0 prior to 16.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021-07-20 advisory. Please...

[ASA-202107-61] libcurl-compat: multiple issues

Arch Linux Security Advisory ASA-202107-61 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-22924 CVE-2021-22925 Package : libcurl-compat Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2196 Summary ======= The package...

[ASA-202107-60] lib32-curl: multiple issues

Arch Linux Security Advisory ASA-202107-60 ========================================== Severity: Medium Date : 2021-07-21 CVE-ID : CVE-2021-22924 CVE-2021-22925 Package : lib32-curl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2195 Summary ======= The package...

SUSE-SU-2021:2407-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/xtables.c that could allow local provilege escalation. bnc1188116 - CVE-2021-33909: Fixed an...

USN-5011-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, overlay text over another domain, or execute arbitrary code...

OPENSUSE-SU-2021:2354-1 Security update for nodejs14

This update for nodejs14 fixes the following issues: Update nodejs14 to 14.17.2. Including fixes for: - CVE-2021-22918: libuv upgrade - Out of bounds read bsc1187973 - CVE-2021-27290: ssri Regular Expression Denial of Service bsc1187976 - CVE-2021-23362: hosted-git-info Regular Expression Denial ...