Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
98
security advisoryupdatered hatRed Hat Enterprise Linux RHSA-2020-1487 Critical Chromium Browser Patch
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, . -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: chromium-browser security update Advisory ID: RHSA-2020:1487-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2020:1487 Issue date: 2020-04-16 CVE Names: CVE-2020-6423 CVE-2020-6430 CVE-2020-6431 CVE-2020-6432 CVE-2020-6433 CVE-2020-6434 CVE-2020-6435 CVE-2020-6436 CVE-2020-6437 CVE-2020-6438 CVE-2020-6439 CVE-2020-6440 CVE-2020-6441 CVE-2020-6442 CVE-2020-6443 CVE-2020-6444 CVE-2020-6445 CVE-2020-6446 CVE-2020-6447 CVE-2020-6448 CVE-2020-6454 CVE-2020-6455 CVE-2020-6456 ==================================================================== 1. Summary: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, i686, x86_64 Red Hat Enterprise Linux HPC Node Supplementary (v. 6) - i686, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, i686, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, i686, x86_64 3. Description: Chromium is an open-source web browser, powered by WebKit(Blink). This update upgrades Chromium to version 81.0.4044.92. Security Fix(es): * chromium-browser: Use after free in audio (CVE-2020-6423) * chromium-browser: Use after free in extensions (CVE-2020-6454) * chromium-browser: Out of bounds read in WebSQL (CVE-2020-6455) * chromium-browser: Type Confusion in V8 (CVE-2020-6430) * chromium-browser: Insufficient policy enforcement in full screen (CVE-2020-6431) * chromium-browser: Insufficient policy enforcement in navigations (CVE-2020-6432) * chromium-browser: Insufficient policy enforcement in extensions (CVE-2020-6433) * chromium-browser: Use after free in devtools (CVE-2020-6434) * chromium-browser: Insufficient policy enforcement in extensions (CVE-2020-6435) * chromium-browser: Use after free in window management (CVE-2020-6436) * chromium-browser: Insufficient validation of untrusted input in clipboard (CVE-2020-6456) * chromium-browser: Inappropriate implementation in WebView (CVE-2020-6437) * chromium-browser: Insufficient policy enforcement in extensions (CVE-2020-6438) * chromium-browser: Insufficient policy enforcement in navigations (CVE-2020-6439) * chromium-browser: Inappropriate implementation in extensions (CVE-2020-6440) * chromium-browser: Insufficient policy enforcement in omnibox (CVE-2020-6441) * chromium-browser: Inappropriate implementation in cache (CVE-2020-6442) * chromium-browser: Insufficient data validation in developer tools (CVE-2020-6443) * chromium-browser: Uninitialized use in WebRTC (CVE-2020-6444) * chromium-browser: Insufficient policy enforcement in trusted types (CVE-2020-6445) * chromium-browser: Insufficient policy enforcement in trusted types (CVE-2020-6446) * chromium-browser: Inappropriate implementation in developer tools (CVE-2020-6447) * chromium-browser: Use after free in V8 (CVE-2020-6448) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, referto the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1822604 - CVE-2020-6454 chromium-browser: Use after free in extensions 1822605 - CVE-2020-6423 chromium-browser: Use after free in audio 1822606 - CVE-2020-6455 chromium-browser: Out of bounds read in WebSQL 1822607 - CVE-2020-6430 chromium-browser: Type Confusion in V8 1822608 - CVE-2020-6456 chromium-browser: Insufficient validation of untrusted input in clipboard 1822609 - CVE-2020-6431 chromium-browser: Insufficient policy enforcement in full screen 1822610 - CVE-2020-6433 chromium-browser: Insufficient policy enforcement in extensions 1822611 - CVE-2020-6434 chromium-browser: Use after free in devtools 1822612 - CVE-2020-6435 chromium-browser: Insufficient policy enforcement in extensions 1822613 - CVE-2020-6436 chromium-browser: Use after free in window management 1822614 - CVE-2020-6437 chromium-browser: Inappropriate implementation in WebView 1822615 - CVE-2020-6438 chromium-browser: Insufficient policy enforcement in extensions 1822616 - CVE-2020-6439 chromium-browser: Insufficient policy enforcement in navigations 1822617 - CVE-2020-6440 chromium-browser: Inappropriate implementation in extensions 1822618 - CVE-2020-6441 chromium-browser: Insufficient policy enforcement in omnibox 1822619 - CVE-2020-6442 chromium-browser: Inappropriate implementation in cache 1822620 - CVE-2020-6443 chromium-browser: Insufficient data validation in developer tools 1822621 - CVE-2020-6444 chromium-browser: Uninitialized use in WebRTC 1822622 - CVE-2020-6445 chromium-browser: Insufficient policy enforcement in trusted types 1822623 - CVE-2020-6446 chromium-browser: Insufficient policy enforcement in trusted types 1822624 - CVE-2020-6447chromium-browser: Inappropriate implementation in developer tools 1822625 - CVE-2020-6448 chromium-browser: Use after free in V8 1822636 - CVE-2020-6432 chromium-browser: Insufficient policy enforcement in navigations 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: chromium-browser-81.0.4044.92-2.el6_10.i686.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.i686.rpm i686: chromium-browser-81.0.4044.92-2.el6_10.i686.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.i686.rpm x86_64: chromium-browser-81.0.4044.92-2.el6_10.x86_64.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.x86_64.rpm Red Hat Enterprise Linux HPC Node Supplementary (v. 6): i686: chromium-browser-81.0.4044.92-2.el6_10.i686.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.i686.rpm x86_64: chromium-browser-81.0.4044.92-2.el6_10.x86_64.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.x86_64.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: chromium-browser-81.0.4044.92-2.el6_10.i686.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.i686.rpm i686: chromium-browser-81.0.4044.92-2.el6_10.i686.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.i686.rpm x86_64: chromium-browser-81.0.4044.92-2.el6_10.x86_64.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.x86_64.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: chromium-browser-81.0.4044.92-2.el6_10.i686.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.i686.rpm i686: chromium-browser-81.0.4044.92-2.el6_10.i686.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.i686.rpm x86_64: chromium-browser-81.0.4044.92-2.el6_10.x86_64.rpm chromium-browser-debuginfo-81.0.4044.92-2.el6_10.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2020-6423 https://access.redhat.com/security/cve/CVE-2020-6430 https://access.redhat.com/security/cve/CVE-2020-6431 https://access.redhat.com/security/cve/CVE-2020-6432 https://access.redhat.com/security/cve/CVE-2020-6433 https://access.redhat.com/security/cve/CVE-2020-6434 https://access.redhat.com/security/cve/CVE-2020-6435 https://access.redhat.com/security/cve/CVE-2020-6436 https://access.redhat.com/security/cve/CVE-2020-6437 https://access.redhat.com/security/cve/CVE-2020-6438 https://access.redhat.com/security/cve/CVE-2020-6439 https://access.redhat.com/security/cve/CVE-2020-6440 https://access.redhat.com/security/cve/CVE-2020-6441 https://access.redhat.com/security/cve/CVE-2020-6442 https://access.redhat.com/security/cve/CVE-2020-6443 https://access.redhat.com/security/cve/CVE-2020-6444 https://access.redhat.com/security/cve/CVE-2020-6445 https://access.redhat.com/security/cve/CVE-2020-6446 https://access.redhat.com/security/cve/CVE-2020-6447 https://access.redhat.com/security/cve/CVE-2020-6448 https://access.redhat.com/security/cve/CVE-2020-6454 https://access.redhat.com/security/cve/CVE-2020-6455 https://access.redhat.com/security/cve/CVE-2020-6456 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE-----Version: GnuPGv1 iQIVAwUBXpgcstzjgjWX9erEAQiIgQ/+LIAUFSELhcexhdHhkqIYSeh1M4d4503u 5mQBd6SPxN/84e0d5QqNs3SLgspMVCvrwhrXQo10GsNMaYrmdWepuo5aUga/9fMS 3VNvKY/R+SVKNIKXMhjcLvEQ1JPA66f02mK8P+D9bCmIIhW3i9Cklgg2NH3GpAvY rDq184TfqwXHt3FDAXlwkiZVeTGoLMYvt6+0xn+Eiupp/82OSoOR2cOo+pI5bvM9 hvVaYs/kYReuqVivtkJnbMi+udX2lp8rhKYM6I4Nmn2qefYejsLzmY4Seevq8pnJ V1LtX81RGxKkqXKy4BpW4FayQJXrqcAMjdmtS+5xTj/sSv/D4RRFX8JNBt7FBubj 7jHZoCq7r6HUwbAzaduirl0jV/AMY29y3i3dom+5Xo2guVCjANrQ8W/GXxDdQJXe 1EXyFzs4weZ6z0kLuoXF5geEKRpc/NeI7IJ5m3sqrUCCfY3hy7KPg7YvodIB16SG wiAkJ1A5Su6RkUMtXmpA+vUp4y6b6MkWztryUJ62Ir4Vp0twa/aji2+15y4vCFnR 3vuxL4YhnP+DcoxhYzIxPwmfjWtc7hIO225DXg8rkF1t++rcwOcmJIgtlO4pXKQa f5YJeOLUi9zKT2PJBd9ORN5X32qjKv1RAwZpgx10Z+a402NjHUPdUiATD59mXoZj hvC9DK0QmY0=TEDJ -----END PGP SIGNATURE-------RHSA-announce mailing list
Apr 16, 2020
•Important
Red Hat
98
security advisorysecurity issuemoderate impactRed Hat Enterprise Linux 6 : RHSA-2018:2834-01 Moderate: Firefox Update
An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: firefox security update Advisory ID: RHSA-2018:2834-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2018:2834 Issue date: 2018-09-27 CVE Names: CVE-2018-12383 CVE-2018-12385 ==================================================================== 1. Summary: An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - x86_64 3. Description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.2.1 ESR. Security Fix(es): * Mozilla: Crash in TransportSecurityInfo due to cached data (CVE-2018-12385) * Mozilla: Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords (CVE-2018-12383) For moredetails about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Philipp and Jurgen Gaeremyn as the original reporters. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1625531 - CVE-2018-12383 Mozilla: Setting a master password post-Firefox 58 does not delete unencrypted previously stored passwords 1632062 - CVE-2018-12385 Mozilla: Crash in TransportSecurityInfo due to cached data 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: firefox-60.2.1-1.el6.src.rpm i386: firefox-60.2.1-1.el6.i686.rpm firefox-debuginfo-60.2.1-1.el6.i686.rpm x86_64: firefox-60.2.1-1.el6.x86_64.rpm firefox-debuginfo-60.2.1-1.el6.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): x86_64: firefox-60.2.1-1.el6.i686.rpm firefox-debuginfo-60.2.1-1.el6.i686.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: firefox-60.2.1-1.el6.src.rpm x86_64: firefox-60.2.1-1.el6.i686.rpm firefox-60.2.1-1.el6.x86_64.rpm firefox-debuginfo-60.2.1-1.el6.i686.rpm firefox-debuginfo-60.2.1-1.el6.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: firefox-60.2.1-1.el6.src.rpm i386: firefox-60.2.1-1.el6.i686.rpm firefox-debuginfo-60.2.1-1.el6.i686.rpm ppc64: firefox-60.2.1-1.el6.ppc64.rpm firefox-debuginfo-60.2.1-1.el6.ppc64.rpm s390x: firefox-60.2.1-1.el6.s390x.rpm firefox-debuginfo-60.2.1-1.el6.s390x.rpm x86_64: firefox-60.2.1-1.el6.x86_64.rpm firefox-debuginfo-60.2.1-1.el6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): x86_64: firefox-60.2.1-1.el6.i686.rpm firefox-debuginfo-60.2.1-1.el6.i686.rpm Red Hat Enterprise Linux Workstation (v.6): Source: firefox-60.2.1-1.el6.src.rpm i386: firefox-60.2.1-1.el6.i686.rpm firefox-debuginfo-60.2.1-1.el6.i686.rpm x86_64: firefox-60.2.1-1.el6.x86_64.rpm firefox-debuginfo-60.2.1-1.el6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): x86_64: firefox-60.2.1-1.el6.i686.rpm firefox-debuginfo-60.2.1-1.el6.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-12383 https://access.redhat.com/security/cve/CVE-2018-12385 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBW60/8tzjgjWX9erEAQhyLg//VP0WKYcO00kUsIoSphbwP9VGdES3tnWE RHCEt3xxKXjTzwx2T3YvwBIiygbxKSkutiOYswmJzMh9i85Mj9qBZsI0lAHxaiz8 aOjbsAe14QeJaNXGmawAinArEvU7ta+5CGxPNY7EXP7K70TWhiuUovkG4itb97Wa HJkmv8rARf+P121uC/vCKC3Lv+F6yDgnR+5hLC8OeAZHbkIDOkA+kIuCznN3LssL 02QNEch+tEPcw8vQVJL/MnJJ0TXBAzI+WLPEWPDQQMz3E5LOyZtzgLwZh3r1r2Vr AMldC31aiaHy/Irhr/VIK5tHtOxFzwa13vzJXu2YoaCq3cTeJ7cNHEL77zyJNuvc ae/qF7fa8iBsXXg4RA1E/VhcIxbLg9nGunCQa58OiL1jhaQMLeWwqF8c08p9iw0+ 0h5fLxmAxwws/aO2e7FxCQvcYzpk4zLs8lEinLVg2MGCkTVSVwJbMVky1wpR6+si 4qLqqUemVrJfk8uTGgrMd5cHxw3vW+tGjRLqCJKffDb35mDrmSq2XC4TMNnEmBI4 k1MkJhwUT9R5+BEzPMwRgmMJbW5mQLgUTNSutEDgwiHRWCuEkddtyL8mKgnu64wE gbU/AamMxv0JGG529k4qIByiWTbvIHiNa7V6KlMQMNz6yWPD4oaxk96X898UBrQt 8II8IuuuQCU=gdR6 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 27, 2018
Red Hat
91
security advisorygentooarbitrary codeGentoo: 200903-16 Normal: Epiphany Untrusted Path Advisory
An untrusted search path vulnerability in Epiphany might result in the execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200903-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Epiphany: Untrusted search path Date: March 09, 2009 Bugs: #257000 ID: 200903-16 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= An untrusted search path vulnerability in Epiphany might result in the execution of arbitrary code. Background ========= Epiphany is a GNOME webbrowser based on the Mozilla rendering engine Gecko. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-client/epiphany < 2.22.3-r2 > = 2.22.3-r2 Description ========== James Vega reported an untrusted search path vulnerability in the Python interface. Impact ===== A local attacker could entice a user to run Epiphany from a directory containing a specially crafted python module, resulting in the execution of arbitrary code with the privileges of the user running Epiphany. Workaround ========= Do not run "epiphany" from untrusted working directories. Resolution ========= All Epiphany users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =www-client/epiphany-2.22.3-r2" References ========= [ 1 ] CVE-2008-5985 https://www.cve.org/CVERecord?id=CVE-2008-5985 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200903-16 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Mar 09, 2009
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!