Menu

Category Archives: GNU/Linux

Everything about GNU+Linux security

An update that fixes 5 vulnerabilities is now available.

This update upgrades Thunderbird to version 91.11. * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-2022-34468) * Mozilla: Use-after-free in nsSHistory (CVE-2022-34470) * Mozilla: A popup window could be resized in a way to overlay the address bar with web content (CVE-2022-34479) * Mozilla: Memory safety bugs fixed in […]

Several security vulnerabilities have been discovered in isync, an IMAP and MailDir mailbox synchronizer. An malicious attacker who can control an IMAP server may exploit these flaws for remote code execution.

This update upgrades Firefox to version 91.11 ESR. * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-2022-34468) * Mozilla: Use-after-free in nsSHistory (CVE-2022-34470) * Mozilla: A popup window could be resized in a way to overlay the address bar with web content (CVE-2022-34479) * Mozilla: Memory safety bugs fixed […]

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

The Migration Toolkit for Containers (MTC) 1.7.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update for vim is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

security update

How to Spend Less Time on Web and API Security

Several security issues were fixed in Vim.

A heap use-after-free vulnerability was found in systemd, a system and service manager, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate

Several security issues were fixed in Libjpeg6b.

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

– Update to new upstream (102.0)

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.

Scanning container image vulnerabilities with Clair

An update that fixes 9 vulnerabilities is now available.

An update that fixes 5 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes 9 vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

security update

security update

Guide to Web Application Penetration Testing
The experience of bringing OpenSSL 3.0 into RHEL and Fedora

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for kernel-rt is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from

An update that fixes two vulnerabilities is now available.

security update

Several security issues were fixed in curl.

An update that fixes 25 vulnerabilities is now available.

Several security issues were fixed in SpiderMonkey JavaScript Library.

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug and security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update that contains security fixes can now be installed.

The system could be made to crash under certain conditions.

An update that fixes two vulnerabilities is now available.

This is the June 2022 monthly release for .NET 6. This updates .NET SDK to 6.0.106 and Runtime to 6.0.6. It includes at least one known security fix. Upstream release notes: https://github.com/dotnet/core/blob/main/release- notes/6.0/6.0.6/6.0.6.md

https://www.mediawiki.org/wiki/Release_notes/1.37#MediaWiki_1.37.2

This is the June 2022 monthly release for .NET 6. This updates .NET SDK to 6.0.106 and Runtime to 6.0.6. It includes at least one known security fix. Upstream release notes: https://github.com/dotnet/core/blob/main/release- notes/6.0/6.0.6/6.0.6.md

Security fix for CVE-2015-20107

An update that fixes one vulnerability is now available.

Security features in Red Hat Enterprise Linux 9
Thank You for Participating in Our Security Dashboard Redesign Survey

The container bci/python was updated. The following patches have been included in this update:

The container suse/sle15 was updated. The following patches have been included in this update:

An update is now available for Red Hat OpenShift GitOps 1.3 on OpenShift 4.6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS). The updated image includes bug and security fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update is now available for Red Hat OpenShift GitOps 1.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update that contains security fixes can now be installed.

An update that solves one vulnerability, contains one feature and has one errata is now available.

An update that solves four vulnerabilities and has 8 fixes is now available.

An update that solves 7 vulnerabilities and has 10 fixes is now available.

An update that contains security fixes can now be installed.

An update that contains security fixes can now be installed.

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

security update

security update

Web App Vs. Progressive Web App: How Are They Different?

An update that fixes 11 vulnerabilities is now available.

An update that fixes 9 vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For

USN-5487-1 introduced a regression in Apache.

Squid could be made to crash if it received specially crafted network traffic.

An update that contains security fixes can now be installed.

An update that contains security fixes can now be installed.

postgresql: Autovacuum, REINDEX, and others omit “security restricted operation” sandbox (CVE-2022-1552) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 postgresql-debuginfo-9.2.24-8.el7_9.i686.rpm postgresql-debuginfo-9.2.24-8.el7_9.x86_64.rpm postgresql-libs-9.2.24-8. [More…]

An update that contains security fixes can now be installed.

An update that contains security fixes can now be installed.

Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege escalation.

Several security issues were fixed in QEMU.

OpenSSL could be made to crash or run programs when the c_rehash script is used.

Interview with Guardian Digital CEO Dave Wreski: Open Source Utilization in Email Security Solutions & More
Email Security FAQs Answered by Guardian Digital

An update that fixes one vulnerability is now available.

Several security issues were fixed in Apache HTTP Server.

This update includes the latest changes to the leap second list, including an update to its expiry date, which was set for the end of June.

security update

Five Things You Need To Know about Linux Container Security
Akamai Warns Of “Panchan” Linux Botnet That Leverages Golang Concurrency, Systemd

Brief introduction CVE-2017-13755

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that solves 17 vulnerabilities and has 26 fixes is now available.

security update

security update

It was discovered that exo, a support library for the Xfce desktop environment, would allow executing remote .desktop files. In some scenario, an attacker could use this vulnerability to trick an user an execute arbitrary code on the platform with the privileges of that user.

Security fix for CVE-2015-20107

Security fix for CVE-2015-20107

Update to version 2.1.1 CVE-2022-24065

New version 2.8.5 is released. This new version address the security issue CVE-2022-31033 related to header information leak.

Security fix for CVE-2015-20107

Common Security Advisory Framework (CSAF) beta files now available