[ASA-202004-22] chromium: arbitrary code execution

Arch Linux Security Advisory ASA-202004-22 ========================================== Severity: High Date : 2020-04-28 CVE-ID : CVE-2020-6461 CVE-2020-6462 Package : chromium Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1143 Summary ======= The package...

Input validation

Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma-vmfile in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vmfile points. On...

CVE-2019-15793

CVE-2019-15793 concerns a shiftfs issue in Ubuntu’s patched Linux kernel (5.0/5.3). The bug translated user/group IDs to init_user_ns instead of the lower filesystem’s s_user_ns, risking bypass of discretionary access control. Consequence: local attacker could exploit the mis-translation to acces...

CVE-2019-15792 Type confusion in shiftfs

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfsbtrfsioctlfdreplace calls fdgetoldfd, then without further checks passes the resulting file into shiftfsrealfdget, which casts file-privatedata, a void that points to a filesystem-depende...

OracleVM 3.3 : ipmitool (OVMSA-2020-0012)

The remote OracleVM system is missing necessary patches to address critical security updates : - Backport fix for CVE-2020-5208 - Fix missing return in ipmikontronoemmain - CID1261317 - rebase to latest stable upstream version - resolves: rhbz1253416 - remove the redundant OpenIMPI dependency -...

SUSE SLES12 Security Update : git (SUSE-SU-2020:0992-1)

This update for git fixes the following issues : Security issue fixed : CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host bsc1168930. Non-security issue fixed : git was updated to 2.26.0 f...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

firefox security update

68.6.1-1.0.1.el81 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Remove upstream references Orabug: 30530527 68.6.1-1 - Update to 68.6.1 ESR...

qt security update

CentOS Errata and Security Advisory CESA-2020:1172 An update for qt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

libsndfile security update

CentOS Errata and Security Advisory CESA-2020:1185 An update for libsndfile is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

bluez security update

CentOS Errata and Security Advisory CESA-2020:1101 An update for bluez is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Updated kernel packages fix security issues

This update is based on upstream 5.5.15 and fixes some security related issues related to use after free and null pointer dereferences and also some other bugfixes. Other fixes in this update: - WireGuard module has been updated to v1.0.20200401 - ndiswrapper has been fixed and re-enabled...

Updated kernel-linus packages fix security vulnerabilities

This update is based on upstream 5.5.15 and fixes at least the following security vulnerabilities: In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu...

CVE-2018-9465

In taskgetunusedfdflags of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android I...

CVE-2020-9770

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic...

Moderate: Red Hat Security Advisory: samba security, bug fix, and enhancement update

An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

suricata:fuzz_applayerparserparse: Heap-use-after-free in htp_connp_is_line_ignorable

Detailed Report: https://oss-fuzz.com/testcase?key=6197711587246080 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzapplayerparserparse Job Type: aflasansuricata Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6190002949cc Crash State: htpconnpislineignorable...

quickjs:fuzz_compile: Heap-use-after-free in JS_ReadObjectRec

Project: https://github.com/horhof/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=4863930045562880 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzcompile Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

icu, libicu security update

CentOS Errata and Security Advisory CESA-2020:0896 An update for icu is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Fedora 30 : varnish (2020-872ec29251)

New upstream release, a security release - Includes fix for VSV00005 - Added new checkout of pkg-varnish - Temporarily disable haproxy unit tests, as haproxy seems broken in rawhide - Added simple compilation fix for gcc-10.0.1/s390x Note that Tenable Network Security has extracted the preceding...