News: 0000831069

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Security updates for Wednesday

([Security] Sep 9, 2020 14:51 UTC (Wed) (ris))


Dist.

ID

Release

Package

Date

Debian

[1]DLA-2368-1

LTS

grunt

2020-09-09

Fedora

[2]FEDORA-2020-d5e74bf9a0

F32

ansible

2020-09-08

Fedora

[3]FEDORA-2020-95f2c5cc25

F31

geary

2020-09-08

openSUSE

[4]openSUSE-SU-2020:1391-1

15.2

firefox

2020-09-09

openSUSE

[5]openSUSE-SU-2020:1385-1

gettext-runtime

2020-09-08

openSUSE

[6]openSUSE-SU-2020:1393-1

15.1 15.2

python-Flask-Cors

2020-09-09

openSUSE

[7]openSUSE-SU-2020:1392-1

15.2

thunderbird

2020-09-09

Oracle

[8]ELSA-2020-3556

OL7

firefox

2020-09-08

Oracle

[9]ELSA-2020-3634

OL8

thunderbird

2020-09-08

Red Hat

[10]RHSA-2020:3697-01

EL7

.NET Core 3.1

2020-09-08

Red Hat

[11]RHSA-2020:3699-01

EL8

.NET Core 3.1

2020-09-08

SUSE

[12]SUSE-SU-2020:2576-1

OS7 SLE12

kernel

2020-09-09

SUSE

[13]SUSE-SU-2020:2578-1

SLE12

kernel

2020-09-09

SUSE

[14]SUSE-SU-2020:2574-1

SLE12

kernel

2020-09-08

SUSE

[15]SUSE-SU-2020:2574-1

SLE12

kernel

2020-09-08

SUSE

[16]SUSE-SU-2020:2580-1

SLE15

kernel

2020-09-09

SUSE

[17]SUSE-SU-2020:2579-1

SLE15

kernel

2020-09-09

SUSE

[18]SUSE-SU-2020:2577-1

SLE15

kernel

2020-09-09

SUSE

[19]SUSE-SU-2020:2577-1

SLE15

kernel

2020-09-09

SUSE

[20]SUSE-SU-2020:2575-1

SLE15

kernel

2020-09-09

SUSE

[21]SUSE-SU-2020:2575-1

SLE15

kernel

2020-09-09

SUSE

[22]SUSE-SU-2020:2570-1

SLE12

libjpeg-turbo

2020-09-08

SUSE

[23]SUSE-SU-2020:2569-1

SLE15

libjpeg-turbo

2020-09-08

Ubuntu

[24]USN-4491-1

20.04

gnutls28

2020-09-09

Ubuntu

[25]USN-4487-2

12.04 14.04

libx11

2020-09-08



[1] https://lwn.net/Articles/831046/

[2] https://lwn.net/Articles/831047/

[3] https://lwn.net/Articles/831048/

[4] https://lwn.net/Articles/831049/

[5] https://lwn.net/Articles/831050/

[6] https://lwn.net/Articles/831051/

[7] https://lwn.net/Articles/831052/

[8] https://lwn.net/Articles/831053/

[9] https://lwn.net/Articles/831054/

[10] https://lwn.net/Articles/831044/

[11] https://lwn.net/Articles/831045/

[12] https://lwn.net/Articles/831059/

[13] https://lwn.net/Articles/831062/

[14] https://lwn.net/Articles/831056/

[15] https://lwn.net/Articles/831055/

[16] https://lwn.net/Articles/831064/

[17] https://lwn.net/Articles/831063/

[18] https://lwn.net/Articles/831061/

[19] https://lwn.net/Articles/831060/

[20] https://lwn.net/Articles/831058/

[21] https://lwn.net/Articles/831057/

[22] https://lwn.net/Articles/831066/

[23] https://lwn.net/Articles/831065/

[24] https://lwn.net/Articles/831067/

[25] https://lwn.net/Articles/831068/

The new "I Love You" virus is not the work of some snot-nosed acne-laced
teenager working from a basement in the Phillipines. It's actually part of
a conspiracy concocted by the unholy alliance of Microsoft and several
well-known and well-despised spammers.

You'll notice that the ILOVEYOU, Melissa, and Tuxissa strains all extract
email addresses from the victim's system. This is a gold mine for
spammers, who are able to use these viruses to harvest active email
addresses for them. Everytime ILOVEYOU, for instance, propogates, it keeps
track of all the email addresses it has been sent to, so that when it
finally boomerangs back to a spammer, they have a nice convenient list of
addresses to send "laser printer toner" and "get rich quick!"
advertisements to.

-- Bob Smith (not his real code-name), in a speech given at the
First Annual Connecticut Conspiracy Convention (ConConCon),
"the largest ever gathering of conspiracy theorists east of the
Mississippi."