Fedora 31 : glibc (2020-4e92a61688)

This update incorporates fixes from the upstream glibc 2.30 stable release branch, including a fix for a medium severity security vulnerability. CVE-2020-6096 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable h...

[SECURITY] [DSA 4740-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4740-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 02, 2020 https://www.debian.org/security/faq -...

go-dns:fuzz_msg_unpack: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5642061701971968 Project: go-dns Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgunpack Job Type: libfuzzerasango-dns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000002d140 Crash State: NULL Sanitizer: address ASAN Recommended...

Debian: Security Advisory (DSA-4731-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4730-1] ruby-sanitize security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4730-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 19, 2020 https://www.debian.org/security/faq -...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 84 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 84.0.4147.89 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

[SECURITY] Fedora 32 Update: botan2-2.14.0-1.fc32

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

[SECURITY] [DSA 4723-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4723-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 12, 2020 https://www.debian.org/security/faq -...

Debian DSA-4722-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Debian: Security Advisory (DSA-4722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4720-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4719-1] php7.3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4719-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 06, 2020 https://www.debian.org/security/faq -...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::ConcatenateOffsets<int>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6440533038989312 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6190000009ac...

Debian: Security Advisory (DSA-4716-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stable Channel Update for Desktop

The stable channel has been updated to 83.0.4103.116 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain...

Fedora 32 : kernel / kernel-headers (2020-e47d28bc2b)

The 5.6.18 stable kernel update contains a number of important fixes across the tree. ---- The 5.6.17 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...

Ripple20 Vulnerabilities Affecting Treck IP Stacks

The Cybersecurity and Infrastructure Security Agency CISA is aware of multiple vulnerabilities, known as Ripple20, affecting Treck IP stack implementations for embedded systems. A remote attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages user...

Stable Channel Update for Desktop

The stable channel has been updated to 83.0.4103.106 for Windows, Mac, and Linux, which will roll out over the coming days/weeks Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

draco:draco_decoder_fuzzer: Crash in std::__1::_MetaBase<__can_be_converted_to_string_view<char, std::__1::char_trait

Project: https://github.com/google/draco.git Detailed Report: https://oss-fuzz.com/testcase?key=5750127758409728 Project: draco Fuzzing Engine: libFuzzer Fuzz Target: dracodecoderfuzzer Job Type: libfuzzerubsandraco Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002242 Crash...

skia:svg_dom: Global-buffer-overflow in SkParse::FindNamedColor

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5124092452929536 Project: skia Fuzzing Engine: afl Fuzz Target: svgdom Job Type: aflasanskia Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x000001da0690 Crash State:...