April 2020 - cypherpunks - lists.cpunks.org

Fwd: [gentoo-announce] [ GLSA 202004-07 ] Mozilla Firefox: Multiple vulnerabilities
by destroyer 04 Apr '20

04 Apr '20

-------- Forwarded Message -------- Subject: [gentoo-announce] [ GLSA 202004-07 ] Mozilla Firefox: Multiple vulnerabilities Date: Sat, 4 Apr 2020 13:04:33 +0200 From: Thomas Deutschmann <whissi(a)gentoo.org> Reply-To: Gentoo Security <security(a)gentoo.org> Organization: Gentoo Foundation, Inc To: gentoo-announce(a)lists.gentoo.org - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202004-07 - - - - - - - - - - - - - -… [View More] - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Mozilla Firefox: Multiple vulnerabilities Date: April 04, 2020 Bugs: #716098 ID: 202004-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. Background ========== Mozilla Firefox is a popular open-source web browser from the Mozilla Project. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-client/firefox < 74.0.1 *>= 68.6.1 *>= 74.0.1 Description =========== Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact ====== A remote attacker could entice a user to view a specially crafted web page, possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition. Workaround ========== There is no known workaround at this time. Resolution ========== All Mozilla Firefox ESR users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/firefox-68.6.1" All Mozilla Firefox users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=www-client/firefox-74.0.1" References ========== [ 1 ] CVE-2020-6819 https://nvd.nist.gov/vuln/detail/CVE-2020-6819 [ 2 ] CVE-2020-6820 https://nvd.nist.gov/vuln/detail/CVE-2020-6820 [ 3 ] MFSA-2020-11 https://www.mozilla.org/en-US/security/advisories/mfsa2020-11/ Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202004-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security(a)gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2020 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5 [View Less]

1 0

Corona Virus False Flag Operation Debunked by Real Medical Science
by fakevirus＠airmail.cc 04 Apr '20

04 Apr '20

Groundbreaking podcast and scientific papers prove: The government and media are lying to you about Corona Virus / COVID-19 / coronachan. COVID-19 *is* a psyop / false flag operation. Corona Virus response is a mass psychosis that has gripped most of the world. USA has been converted into an open-air prison gulag with nary a whimper of protest. People are ceding all their liberty to the state to "protect" them from a virus that does not even exist. At the beck and call of Pravda the … [View More]

1 0

is this wise? -- Fw: Chinese operator buys up Aussie hospitals
by Zenaan Harkness 04 Apr '20

04 Apr '20

China (at least one particular company) is up to 21 Australian hospitals. Just recently bought 3 in Australia's Illawarra region... is this wise? ----- Forwarded message from Bronwyn Hancock <vaccinfo(a)bigpond.com> ----- Date: Sat, 4 Apr 2020 15:18:01 +1100 (AEDT) Subject: Chinese operator buys up Aussie hospitals User-Agent: OWM Mail 3 I think that this kind of activity, bad enough as it was, will likely intensify hereafter, especially by China, because, clearly, whichever … [View More]

1 0

WorkFromHome: Document Leak Goldmine, Meeting App Crypto Isn't, Bombers, FOIA...
by grarpamp 03 Apr '20

03 Apr '20

On 4/2/20, Peter Fairbrother <peter(a)tsto.co.uk> wrote: > Zoom's end-to-end encryption isn't actually end-to-end at all. > Good thing the PM isn't using it for Cabinet calls. > Oh, for f..." > > https://www.theregister.co.uk/2020/04/01/zoom_spotlight/ There are many more ridiculously insecure meeting apps out there, zoom is not the only one. All with variety of settings, use modes, security, and not. Expect news of massive piles of secret documents and data being scraped … [View More]

2 1

Fox News: FISA reauthorizations in doubt after findings that FBI surveillance was riddled with major errors
by jim bell 03 Apr '20

03 Apr '20

Fox News: FISA reauthorizations in doubt after findings that FBI surveillance was riddled with major errors. https://www.foxnews.com/politics/fisa-reauthorization-may-be-derailed-by-ne…

1 0

LaForest/ OrientalReview.org: "globalism is dead and ready for cremation"
by Zig the N.g 03 Apr '20

03 Apr '20

Look no further for a summary with interesting take on the imminent death of globalism, happening before our couches, I mean eyes. Trump still alive and Putin sending him assistance? Today, the Z.g feels n.gtastic! Time for some moar Raqqa drift, baby yeah.. ;D Putin & Trump Versus The New World Order: The Final Battle Sylvain LaForest via OrientalReview.org, 2020-03-31 https://www.zerohedge.com/geopolitical/putin-trump-versus-new-world-order-f… https://orientalreview.org/… [View More]

1 0

CryptoMe releases document claiming to be "White House Playbook on Pandemic Response"
by Se7en 03 Apr '20

03 Apr '20

Too big to attatch (22MB). Uploaded March 27, 2020. Full title: "Playbook for Early Response to High-Concequence Emerging Infectious Disease Threats and Biological Incidents". The document is undated, and seems to refer to general information shared by The Office of the President. It contains no classification marks other than "Not for Public Distribution". Reading through it, it seems somewhat similar in general information to US ARMY FM 8-284. Of course, US ARMY FM 8-284 is a field guide in … [View More]

2 1

ScienceAlert: Physicists Have Found a New Method For Generating Quantum Entangled Photons
by jim bell 03 Apr '20

03 Apr '20

ScienceAlert: Physicists Have Found a New Method For Generating Quantum Entangled Photons. https://www.sciencealert.com/scientists-have-figured-out-a-new-way-to-gener…

1 0

"Zoom's end-to-end encryption isn't
by Peter Fairbrother 02 Apr '20

02 Apr '20

actually end-to-end at all. Good thing the PM isn't using it for Cabinet calls. Oh, for f..." https://www.theregister.co.uk/2020/04/01/zoom_spotlight/ tldr: not end-to-end mines all your data tracker-friendly sends data to facebook big login hole host can detect if watchers present all your base are belong to us Peter Fairbrother

1 0

re: [OT] Has anyone news about Steve Kinney, please? (Cecilia Tanaka)
by Rob Avina 02 Apr '20

02 Apr '20

I don't know him, but his insta, twitter and git names are all stevekinny and steve.kinny(a)gmail.com is a valid hangouts account. Try him there? On Thu, Apr 2, 2020 at 3:22 AM <cypherpunks-request(a)lists.cpunks.org> wrote: > 4. [OT] Has anyone news about Steve Kinney, please? (Cecilia Tanaka) > > Message: 4 > Date: Thu, 2 Apr 2020 05:48:17 -0300 > From: Cecilia Tanaka <cecilia.tanaka(a)gmail.com> > To: CypherPunks <cypherpunks(a)lists.cpunks.org> > … [View More]

3 3