Updated flatpak runtime and SDK, including latest Fedora 32 security and bug-fix errata.
A security issue affects these releases of Ubuntu and its derivatives:
PulseAudio could be made to crash or run programs as your login if it received specially crafted input.
Software DescriptionRatchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5 module. An attacker could use this issue to cause PulseAudio to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-15710)
Update instructionsThe problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary changes.
ReferencesA security issue affects these releases of Ubuntu and its derivatives:
Email-Address-List could be made to remotely exhaust resources if it received specially crafted email data.
Software DescriptionIt was discovered that Email-Address-List does not properly parse email addresses during email-ingestion. A remote attacker could use this issue to cause an algorithmic complexity attack, resulting in a denial of service. (CVE-2018-18898)
Update instructionsThe problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary changes.
ReferencesA security issue affects these releases of Ubuntu and its derivatives:
xawtv could be made to expose sensitive information and escalate user privileges if it received specially crafted input.
Software DescriptionMatthias Gerstner discovered that xawtv incorrectly handled opening files. A local attacker could possibly use this issue to open and write to arbitrary files and escalate privileges. (CVE-2020-13696)
Update instructionsThe problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary changes.
ReferencesA security issue affects these releases of Ubuntu and its derivatives:
GnuPG could be made to expose sensitive information.
Software DescriptionIt was discovered that GnuPG signatures could be forged when the SHA-1 algorithm is being used. This update removes validating signatures based on SHA-1 that were generated after 2019-01-19. In environments where this is still required, a new option –allow-weak-key-signatures can be used to revert this behaviour.
Update instructionsThe problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary changes.
ReferencesA security issue affects these releases of Ubuntu and its derivatives:
Pure-FTPd could be made to expose sensitive information if it recieved specially crafted input.
Software DescriptionAntonio Norales discovered that Pure-FTPd incorrectly handled directory aliases. An attacker could possibly use this issue to access sensitive information. (CVE-2020-9274)
Update instructionsThe problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
In general, a standard system update will make all the necessary changes.
ReferencesUpdate to Node.js 14.11.0
September 2020 Security Release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
Node.js 14.10.0
Update to Node.js 14.11.0
September 2020 Security Release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
Node.js 14.10.0
Update to Node.js 14.11.0
September 2020 Security Release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
Node.js 14.10.0
A security issue affects these releases of Ubuntu and its derivatives:
libproxy could be made to crash if it received a specially crafted PAC file.
Software DescriptionIt was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of service.
Update instructionsThe problem can be corrected by updating your system to the following package versions:
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
After a standard system update you need to restart your session to make all the necessary changes.
ReferencesUpdate to Node.js 12.18.4
September 2020 security release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
Update to Node.js 12.18.4
September 2020 security release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
Update to Node.js 12.18.4
September 2020 security release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/
Update to Node.js 12.18.4
September 2020 security release - https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/