rootserverprojekt.de

Package : ruby-kramdown
CVE ID : CVE-2020-14001
Debian Bug : 965305

A flaw was discovered in ruby-kramdown, a fast, pure ruby, Markdown parser and converter, which could result in unintended read access to files or unintended embedded…

Package : json-c
CVE ID : CVE-2020-12762

Tobias Stoeckmann discovered an integer overflow in the json-c JSON library, which could result in denial of service or potentially the execution of arbitrary code if large malformed JSON files are…

Package : firejail
CVE ID : CVE-2020-17367 CVE-2020-17368

Tim Starling discovered two vulnerabilities in firejail, a sandbox program to restrict the running environment of untrusted applications.

CVE-2020-17367

It was reported that firejail…

Package : thunderbird
CVE ID : CVE-2020-6463 CVE-2020-6514 CVE-2020-15652 CVE-2020-15659

Multiple security issues have been found in Thunderbird which could result in denial of service or potentially the execution of arbitrary code.

For the…

Package : webkit2gtk
CVE ID : CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895
CVE-2020-9915 CVE-2020-9925

The following vulnerabilities have been discovered in the webkit2gtk web engine:

CVE-2020-9862

Ophir Lojkine discovered that…

Package : ark
CVE ID : CVE-2020-16116

Dominik Penner discovered that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives writing outside the extraction directory.

For the stable…

Package : xrdp
CVE ID : CVE-2020-4044
Debian Bug : 964573

Ashley Newson discovered that the XRDP sessions manager was susceptible to denial of service. A local attacker can further take advantage of this flaw to impersonate the XRDP…

Package : firefox-esr
CVE ID : CVE-2020-6463 CVE-2020-6514 CVE-2020-15652 CVE-2020-15659

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or an…

Package : grub2
Debian Bug : 966554

The update for grub2 released as DSA 4735-1 caused a boot-regression when chainloading another bootlaoder and breaking notably dual-boot with Windows. Updated grub2 packages are now available to correct this…

Package : grub2
CVE ID : CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310
CVE-2020-14311 CVE-2020-15706 CVE-2020-15707

Several vulnerabilities have been discovered in the GRUB2 bootloader.

CVE-2020-10713

A flaw in the grub.cfg…