An update that fixes 5 vulnerabilities is now available.
June 27, 2020
A vulnerability was discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service via malformed HTTP/2 headers.
June 27, 2020
An update that fixes one vulnerability is now available.
June 27, 2020
– avoid overwriting a local file with -J (CVE-2020-8177) – fix partial password leak over DNS on HTTP redirect (CVE-2020-8169)
June 26, 2020
An update that fixes one vulnerability is now available.
June 26, 2020
An update that fixes one vulnerability is now available.
June 26, 2020
An update that solves two vulnerabilities and has 10 fixes is now available.
June 26, 2020
An update that fixes one vulnerability is now available.
June 26, 2020
An update that fixes one vulnerability is now available.
June 26, 2020
An update that fixes one vulnerability is now available.
June 26, 2020
An update that fixes one vulnerability is now available.
June 26, 2020
An update that fixes one vulnerability is now available.
June 25, 2020
An update for nghttp2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 25, 2020
An update that fixes one vulnerability is now available.
June 25, 2020
An update that solves one vulnerability and has 9 fixes is now available.
June 25, 2020
Red Hat AMQ Broker 7.7 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 25, 2020
**horde 5.2.23** * [mjr] SECURITY: Fix javascript injection vulnerability in mobile login page. * [mjr] Fix broken cloud search in portal block.
June 24, 2020
security update
June 24, 2020
An update that fixes three vulnerabilities is now available.
June 24, 2020
An update for candlepin and satellite is now available for Red Hat Satellite 6.5 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
June 24, 2020
An update that fixes one vulnerability is now available.
June 24, 2020
An update that fixes one vulnerability is now available.
June 24, 2020
An update that fixes two vulnerabilities is now available.
June 24, 2020
An update that fixes one vulnerability is now available.
June 24, 2020
Kernel: vfio: access to disabled MMIO space of some devices may lead to DoS scenario (CVE-2020-12888) SL7 x86_64 bpftool-3.10.0-1127.13.1.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1127.13.1.el7.x86_64.rpm kernel-3.10.0-1127.13.1.el7.x86_64.rpm kernel-debug-3.10.0-1127.13.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1127.13.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-1 [More…]
June 23, 2020
ntp: ntpd using highly predictable transmit timestamps could result in time change or DoS (CVE-2020-13817) * ntp: DoS on client ntpd using server mode packet (CVE-2020-11868) SL7 x86_64 ntp-4.2.6p5-29.el7_8.2.x86_64.rpm ntp-debuginfo-4.2.6p5-29.el7_8.2.x86_64.rpm ntpdate-4.2.6p5-29.el7_8.2.x86_64.rpm sntp-4.2.6p5-29.el7_8.2.x86_64.rpm noarch ntp-doc-4.2.6p5-29.el7_8.2 [More…]
June 23, 2020
An update that solves two vulnerabilities and has 10 fixes is now available.
June 23, 2020
An update that solves two vulnerabilities and has 10 fixes is now available.
June 23, 2020
An update that fixes three vulnerabilities is now available.
June 23, 2020
Updated microcode_ctl packages that fix several security bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact
June 23, 2020
security update
June 22, 2020
Several security issues were fixed in Mutt.
June 22, 2020
nfs-utils could be made to overwrite files as the administrator.
June 22, 2020
unbound: amplification of an incoming query into a large number of queries directed to a target (CVE-2020-12662) * unbound: infinite loop via malformed DNS answers received from upstream servers (CVE-2020-12663) SL6 x86_64 unbound-debuginfo-1.4.20-29.el6_10.1.i686.rpm unbound-debuginfo-1.4.20-29.el6_10.1.x86_64.rpm unbound-libs-1.4.20-29.el6_10.1.i686.rpm unbound-libs-1.4.2 [More…]
June 22, 2020
unbound: incomplete fix for CVE-2020-12662 in RHEL7 (CVE-2020-10772) SL7 x86_64 unbound-1.6.6-5.el7_8.x86_64.rpm unbound-debuginfo-1.6.6-5.el7_8.i686.rpm unbound-debuginfo-1.6.6-5.el7_8.x86_64.rpm unbound-libs-1.6.6-5.el7_8.i686.rpm unbound-libs-1.6.6-5.el7_8.x86_64.rpm unbound-devel-1.6.6-5.el7_8.i686.rpm unbound-devel-1.6.6-5.el7_8.x86_64.rpm unbound-python [More…]
June 22, 2020
Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage (CVE-2020-12398) * Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405) * Mozilla: JavaScript Type confusion with NativeTypes (CVE-2020-12406) * Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 (CVE-2020-12410) SL7 x86_64 thunderbird-68.9.0-1.el7_8.x86_64.rpm thunderbird-deb [More…]
June 22, 2020
An update that solves 5 vulnerabilities and has 22 fixes is now available.
June 22, 2020
What You Need to Know About Linux Rootkits [Updated]>
June 21, 2020
It was discovered that there was an out-of-bounds access vulnerability in the server-server protocol in the ngircd Internet Relay Chat (IRC) server.
June 21, 2020
Updated gnutls packages fix security vulnerability: It was found that GnuTLS 3.6.4 introduced a regression in the TLS protocol implementation. This caused the TLS server to not securely construct a session ticket encryption key considering the application
June 20, 2020
security update
June 20, 2020
Damian Poddebniak and Fabian Ising discovered two security issues in the STARTTLS handling of the Mutt mail client, which could enable MITM attacks.
June 20, 2020
security update
June 19, 2020
Two vulnerabilities were found in Ruby on Rails, a MVC ruby-based framework geared for web application development, which could lead to remote code execution and untrusted user input usage, depending on the
June 19, 2020
An update for jaeger-all-in-one-rhel7-container, jaeger-collector-rhel7-container, and jaeger-ingester-rhel7-container is now available for Jaeger-1.17. Red Hat Product Security has rated this update as having a security impact
June 19, 2020
An update that solves 5 vulnerabilities and has 22 fixes is now available.
June 19, 2020
An update that solves 5 vulnerabilities and has 22 fixes is now available.
June 19, 2020
An update that fixes one vulnerability is now available.
June 19, 2020
Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage (CVE-2020-12398) * Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405) * Mozilla: JavaScript Type confusion with NativeTypes (CVE-2020-12406) * Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 (CVE-2020-12410) SL6 x86_64 thunderbird-68.9.0-1.el6_10.x86_64.rpm thunderbird-de [More…]
June 19, 2020
An update that fixes 7 vulnerabilities is now available.
June 18, 2020
An update that solves one vulnerability and has one errata is now available.
June 18, 2020
Drupal 7 has an Open Redirect vulnerability. For example, a user could be tricked into visiting a specially crafted link which would redirect them to an arbitrary external URL.
June 18, 2020
An update that fixes four vulnerabilities is now available.
June 18, 2020
An update that fixes one vulnerability is now available.
June 18, 2020
An update that solves 55 vulnerabilities and has 93 fixes is now available.
June 18, 2020
security update
June 18, 2020
security update
June 17, 2020
An update is now available for Red Hat build of Eclipse Vert.x. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For
June 17, 2020
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For
June 17, 2020
NSS could be made to expose sensitive information over the network.
June 17, 2020
An update that solves one vulnerability and has one errata is now available.
June 17, 2020
An update that solves one vulnerability and has two fixes is now available.
June 17, 2020
An update that fixes 6 vulnerabilities is now available.
June 17, 2020
The package intel-ucode before version 20200609-1 is vulnerable to information disclosure.
June 16, 2020
The package dbus before version 1.12.18-1 is vulnerable to denial of service.
June 16, 2020
An update that fixes one vulnerability is now available.
June 16, 2020
An update that fixes one vulnerability is now available.
June 16, 2020
An update that fixes two vulnerabilities is now available.
June 16, 2020
An update that fixes one vulnerability is now available.
June 16, 2020
This is a security update for JBoss EAP Continuous Delivery 12.0. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
June 15, 2020
This is a security update for JBoss EAP Continuous Delivery 13.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 15, 2020
This is a security update for JBoss EAP Continuous Delivery 18.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 15, 2020
This is a security update for JBoss EAP Continuous Delivery 16.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 15, 2020
This is a security update for JBoss EAP Continuous Delivery 14.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
June 15, 2020
An error in Cyrus IMAP Server allows mailboxes to be created with administrative privileges.
June 15, 2020
Update to upstream 3.6.14 release, and security fix for CVE-2020-13777.
June 14, 2020
Fixes CVE-2020-10995, CVE-2020-12244 and CVE-2020-10030
June 14, 2020
Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. —- – Fix certificate chain validation involving the expired “AddTrust External Root”. – Disable RSA blinding during FIPS self-tests to avoid hanging if there is not enough entropy for `getrandom()` – Add `–waitresumption` option to `gnutls-cli` to force the client to wait for resumption data […]
June 14, 2020
Fixes CVE-2019-20479
June 14, 2020
– Update to 1.20.12 release – ifcfg-rh: handle “802-1x.{,phase2-}ca-path” (rh #1841395, CVE-2020-10754)
June 14, 2020
Update to upstream 3.6.14 release, and security fix for CVE-2020-13777.
June 14, 2020
security update
June 13, 2020
security update
June 13, 2020
security update
June 13, 2020
An update that fixes three vulnerabilities is now available.
June 13, 2020
An update that fixes 10 vulnerabilities is now available.
June 13, 2020
An update that solves 25 vulnerabilities and has 132 fixes is now available.
June 13, 2020
An update that fixes four vulnerabilities is now available.
June 13, 2020
An update that fixes two vulnerabilities is now available.
June 13, 2020
An update that fixes four vulnerabilities is now available.
June 13, 2020
An update that fixes four vulnerabilities is now available.
June 12, 2020
June 12, 2020
An update that fixes one vulnerability is now available.
June 12, 2020
An update that fixes 7 vulnerabilities is now available.
June 12, 2020
An update for net-snmp is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
June 12, 2020
Multiple security issues have been found in Thunderbird which could result in the setup of a non-encrypted IMAP connection, denial of service or potentially the execution of arbitrary code.
June 12, 2020
An update that fixes one vulnerability is now available.
June 11, 2020
Three vulnerabilities have been found in the MySQL Connector/J JDBC driver. For the oldstable distribution (stretch), these problems have been fixed
June 11, 2020
Multiple security issues have been found in Thunderbird which could result in the setup of a non-encrypted IMAP connection, denial of service or potentially the execution of arbitrary code.
June 11, 2020