security update
security update
security update
Type: Vulnerability. Multiple IBM products are prone to a local information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Multiple IBM Products are prone to a local security vulnerability; fixes are available.
Type: Vulnerability. Atlassian JIRA is prone to a cross-site scripting vulnerability; fixes are available.
Type: Vulnerability. Atlassian JIRA is prone to an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. NetApp Clustered Data ONTAP is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. IBM Security Access Manager is prone to a remote denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Atlassian JIRA is prone to an information-disclosure vulnerability; fixes are available.
An update that solves one vulnerability and has two fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update for apb, containernetworking-plugins, and golang-github-prometheus-promu is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact
A micro version update (from 7.4 to 7.4.1) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact
Several security issues were fixed in Samba.
An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 3.10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
An update for mediawiki is now available for Red Hat OpenShift Container Platform 3.10. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score,
Reading Time: ~ 4 min. In my previous blog post, Why Healthcare Organizations are Easy Targets for Cybercrime, I discussed various reasons that hospitals and healthcare organizations make desirable and lucrative targets for hackers. In this second installment, I’ll go over how criminals are attacking these organizations, the methods they use, and also what needs to be done […]
Updated file packages fix security vulnerability: A buffer overflow was found in file which may result in denial of service or potentially the execution of arbitrary code if a malformed CDF (Composite Document File) file is processed (CVE-2019-18218).
Updated php and pcre2 packages fix security vulnerabilities: – FPM (#78599) env_path_info underflow in fpm_main.c can lead to RCE. (CVE-2019-11043) – MBString (#78633) Heap buffer overflow (read) in mb_eregi.
This kernel update is based on the upstream 5.3.7 and fixes several issues: * various security issues in the usb subsystem * rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow (CVE-2019-17666)
The updated packages fix a security vulnerability: The agroot() function in cgraphobj.c in libcgraph.a in Graphviz 2.39.20160612.1140 has a NULL pointer dereference, as demonstrated by graphml2gv. (CVE-2019-11023)
Attention-grabbing cyberattacks that use fiendish exploits are probably not the kind of threat that should be your main concern – here’s what your organization should focus on instead The post What you may be getting wrong about cybersecurity appeared first on WeLiveSecurity
Type: Vulnerability. IBM Cloud Orchestrator is prone to an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. QEMU is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Multiple IBM Products are prone to a directory-traversal vulnerability; fixes are available.
Type: Vulnerability. IBM Cloud Orchestrator is prone to local information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Multiple IBM Products are prone to a cross-site scripting vulnerability; fixes are available.
Type: Vulnerability. IBM API Connect is prone to an information-disclosure vulnerability; fixes are available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
The package chromium before version 78.0.3904.70-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, access restriction bypass, authentication bypass, denial of service, information disclosure, privilege escalation and cross-site scripting.
The package firefox before version 70.0-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, denial of service, insufficient validation and same-origin policy bypass.
The package thunderbird before version 68.2.0-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, denial of service, insufficient validation and same-origin policy bypass.
The package php before version 7.3.11-1 is vulnerable to arbitrary code execution.
This is a cumulative bug-fix update from upstream, including a fix for a pre- authentication remote denial of service issue.
New version 4.9.3, Security fix for CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14465, CVE-2018-14881, CVE-2018-14464, CVE-2018-14463, CVE-2018-14467, CVE-2018-10103, CVE-2018-10105, CVE-2018-14880, CVE-2018-16451, CVE-2018-14882, CVE-2018-16227, CVE-2018-16229, CVE-2018-16301, CVE-2018-16230, CVE-2018-16452,
An update that solves 5 vulnerabilities and has 98 fixes is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
– Updated to latest upstream version (70.0)
Update to OpenJDK October CPU (security update). See: https://openjdk.java.net/groups/vulnerability/advisories/2019-10-15 http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2019-October/002025.html
OpenJDK October CPU security update. See: https://openjdk.java.net/groups/vulnerability/advisories/2019-10-15 http://mail.openjdk.java.net/pipermail/jdk8u-dev/2019-October/010452.html
xpdf 4.02. Lots of security fixes here.
An update that fixes one vulnerability is now available.
Security fix for CVE-2018-16301, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
Security fix for CVE-2018-16301, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
Security fix for CVE-2018-16301, CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
security update
security update
An update that fixes 5 vulnerabilities is now available.
Several issues have been found in mosquitto, a MQTT version 3.1/3.1.1 compatible message broker.
An issue has been found in libarchive, a multi-format archive and compression library.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Daniel Mandragona discovered that invalid DSA public keys can cause a panic in dsa.Verify(), resulting in denial of service. For the stable distribution (buster), this problem has been fixed in
A buffer overflow was found in file, a file type classification tool, which may result in denial of service or potentially the execution of arbitrary code if a malformed CDF (Composite Document File) file is processed.
An update that fixes one vulnerability is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 11 vulnerabilities is now available.
An update that fixes 12 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes 28 vulnerabilities is now available.
