Synopsis: Important: thunderbird security update Advisory ID: SLSA-2020:5238-1 Issue Date: 2020-11-30 CVE Numbers: CVE-2020-26951 CVE-2020-16012 CVE-2020-26953 CVE-2020-26956 CVE-2020-26958 CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26965 CVE-2020-26968 — This update upgrades Thunderbird to version 78.5.0. Security Fix(es): * Mozilla: Parsing mismatches could confuse and … Read More
Synopsis: Important: firefox security update Advisory ID: SLSA-2020:5239-1 Issue Date: 2020-11-30 CVE Numbers: CVE-2020-26951 CVE-2020-16012 CVE-2020-26953 CVE-2020-26956 CVE-2020-26958 CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26965 CVE-2020-26968 — This update upgrades Firefox to version 78.5.0 ESR. Security Fix(es): * Mozilla: Parsing mismatches could confuse … Read More
Synopsis: Important: thunderbird security update Advisory ID: SLSA-2020:5235-1 Issue Date: 2020-11-30 CVE Numbers: CVE-2020-26951 CVE-2020-16012 CVE-2020-26953 CVE-2020-26956 CVE-2020-26958 CVE-2020-26959 CVE-2020-26960 CVE-2020-26961 CVE-2020-26965 CVE-2020-26968 — This update upgrades Thunderbird to version 78.5.0. Security Fix(es): * Mozilla: Parsing mismatches could confuse and … Read More
Synopsis: Important: net-snmp security update Advisory ID: SLSA-2020:5129-1 Issue Date: 2020-11-24 CVE Numbers: CVE-2020-15862 — Security Fix(es): * net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution (CVE-2020-15862) — SL6 x86_64 net-snmp-5.5-60.el6_10.2.x86_64.rpm net-snmp-debuginfo-5.5-60.el6_10.2.i686.rpm net-snmp-debuginfo-5.5-60.el6_10.2.x86_64.rpm net-snmp-libs-5.5-60.el6_10.2.i686.rpm net-snmp-libs-5.5-60.el6_10.2.x86_64.rpm … Read More
Synopsis: Important: thunderbird security update Advisory ID: SLSA-2020:5164-1 Issue Date: 2020-11-24 CVE Numbers: CVE-2020-26950 — This update upgrades Thunderbird to version 78.4.3. Security Fix(es): * Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950) — SL6 x86_64 thunderbird-78.4.3-1.el6_10.x86_64.rpm … Read More
Synopsis: Moderate: microcode_ctl security, bug fix, and enhancement update Advisory ID: SLSA-2020:5084-1 Issue Date: 2020-11-11 CVE Numbers: None — Security Fix(es): * hw: Vector Register Leakage-Active (CVE-2020-8696) * hw: Fast forward store predictor (CVE-2020-8698) — SL6 x86_64 microcode_ctl-1.17-33.31.el6_10.x86_64.rpm microcode_ctl-debuginfo-1.17-33.31.el6_10.x86_64.rpm i386 … Read More
Synopsis: Critical: firefox security update Advisory ID: SLSA-2020:5104-1 Issue Date: 2020-11-12 CVE Numbers: None — Security Fix(es): * Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950) — SL6 x86_64 firefox-78.4.1-1.el6_10.x86_64.rpm firefox-debuginfo-78.4.1-1.el6_10.x86_64.rpm i386 firefox-78.4.1-1.el6_10.i686.rpm – Scientific Linux Development … Read More
Synopsis: Critical: firefox security update Advisory ID: SLSA-2020:5099-1 Issue Date: 2020-11-12 CVE Numbers: None — Security Fix(es): * Mozilla: Write side effects in MCallGetProperty opcode not accounted for (CVE-2020-26950) — SL7 x86_64 firefox-78.4.1-1.el7_9.x86_64.rpm firefox-debuginfo-78.4.1-1.el7_9.x86_64.rpm firefox-78.4.1-1.el7_9.i686.rpm – Scientific Linux Development Team
Synopsis: Moderate: microcode_ctl security, bug fix, and enhancement update Advisory ID: SLSA-2020:5083-1 Issue Date: 2020-11-11 CVE Numbers: None — Security Fix(es): * hw: Information disclosure issue in Intel SGX via RAPL interface (CVE-2020-8695) * hw: Vector Register Leakage-Active (CVE-2020-8696) * … Read More
Synopsis: Moderate: python security update Advisory ID: SLSA-2020:5009-1 Issue Date: 2020-11-10 CVE Numbers: None — Security Fix(es): * python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907) — SL7 x86_64 python-debuginfo-2.7.5-90.el7.x86_64.rpm python-2.7.5-90.el7.x86_64.rpm python-debuginfo-2.7.5-90.el7.i686.rpm python-devel-2.7.5-90.el7.x86_64.rpm python-libs-2.7.5-90.el7.i686.rpm python-libs-2.7.5-90.el7.x86_64.rpm python-debug-2.7.5-90.el7.x86_64.rpm … Read More
