An update that fixes 12 vulnerabilities is now available.
July 24, 2019
Several security issues were fixed in Patch.
July 24, 2019
An update that fixes 5 vulnerabilities is now available.
July 24, 2019
An update that fixes three vulnerabilities is now available.
July 24, 2019
Several security issues were fixed in Patch.
July 24, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 24, 2019
An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 24, 2019
Jann Horn discovered that the ptrace subsystem in the Linux kernel mishandles the management of the credentials of a process that wants to create a ptrace relationship, allowing a local user to obtain root privileges under certain scenarios.
July 23, 2019
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
July 23, 2019
An update that fixes one vulnerability is now available.
July 23, 2019
An update that solves one vulnerability and has two fixes is now available.
July 23, 2019
An update that fixes one vulnerability is now available.
July 23, 2019
An update that fixes 12 vulnerabilities is now available.
July 23, 2019
An update that solves two vulnerabilities and has one errata is now available.
July 23, 2019
An update that fixes one vulnerability is now available.
July 23, 2019
An update that solves two vulnerabilities and has one errata is now available.
July 23, 2019
An update that solves one vulnerability and has one errata is now available.
July 23, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 23, 2019
An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 23, 2019
Several security issues were fixed in Squid.
July 22, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 22, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 22, 2019
OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698) (CVE-2019-2745) * OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328) (CVE-2019-2762) * OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432) (CVE-2019-2769) * OpenJDK: Missing URL format validation (Networking, 822151 [More…]
July 22, 2019
Several vulnerabilities were found in libxslt the XSLT 1.0 processing library. CVE-2016-4610
July 22, 2019
An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 22, 2019
An update is now available for Red Hat Decision Manager. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 22, 2019
ClamAV could be made to expose sensitive information if it received a specially crafted CHM file.
July 22, 2019
An update for rh-nodejs8-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 22, 2019
An update for rh-maven35-jackson-databind is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 22, 2019
An update for rh-redis5-redis is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 22, 2019
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 22, 2019
security update
July 21, 2019
An update that fixes 10 vulnerabilities is now available.
July 21, 2019
An update that fixes one vulnerability is now available.
July 21, 2019
An update that fixes one vulnerability is now available.
July 21, 2019
An update that fixes one vulnerability is now available.
July 21, 2019
An update that fixes two vulnerabilities is now available.
July 21, 2019
An update that solves 21 vulnerabilities and has two fixes is now available.
July 21, 2019
An update that fixes two vulnerabilities is now available.
July 21, 2019
An update that fixes one vulnerability is now available.
July 21, 2019
An update that solves one vulnerability and has one errata is now available.
July 21, 2019
An update that solves one vulnerability and has two fixes is now available.
July 21, 2019
An update that fixes four vulnerabilities is now available.
July 21, 2019
An update that fixes one vulnerability is now available.
July 21, 2019
Vulnerabilities have been discovered in nss, the Mozilla Network Security Service library.
July 20, 2019
Jann Horn discovered that the ptrace subsystem in the Linux kernel mishandles the management of the credentials of a process that wants to create a ptrace relationship, allowing a local user to obtain root privileges under certain scenarios.
July 20, 2019
An update that fixes one vulnerability is now available.
July 20, 2019
An update that fixes one vulnerability is now available.
July 20, 2019
An update that fixes one vulnerability is now available.
July 20, 2019
An update that solves one vulnerability and has four fixes is now available.
July 20, 2019
An update that fixes one vulnerability is now available.
July 20, 2019
An update that fixes four vulnerabilities is now available.
July 20, 2019
An update that solves one vulnerability and has one errata is now available.
July 20, 2019
An update that fixes four vulnerabilities is now available.
July 20, 2019
Update to Samba 4.9.11 —- Update to Samba 4.9.9 Security fixes for CVE-2019-12435
July 19, 2019
Update to Samba 4.9.11 —- Update to Samba 4.9.9 Security fixes for CVE-2019-12435
July 19, 2019
An update that fixes four vulnerabilities is now available.
July 19, 2019
An update that fixes four vulnerabilities is now available.
July 19, 2019
It was discovered that there was an integer overflow vulnerability in exiv2, a tool to manipulate images containing (eg.) EXIF metadata. This could have resulted in a denial of service via a specially-
July 19, 2019
An update that fixes one vulnerability is now available.
July 19, 2019
An update that solves one vulnerability and has one errata is now available.
July 19, 2019
An update that fixes one vulnerability is now available.
July 19, 2019
An update that fixes one vulnerability is now available.
July 19, 2019
An update that fixes three vulnerabilities is now available.
July 19, 2019
Update to v5.1.18 —- Update to v5.1.17
July 18, 2019
Update to v5.1.18 —- Update to v5.1.17
July 18, 2019
– fixes security issues CVE-2019-10190 and CVE-2019-10191 – https://lists.nic.cz/pipermail/knot-resolver-announce/2019/000009.html
July 18, 2019
– fixes security issues CVE-2019-10190 and CVE-2019-10191 – https://lists.nic.cz/pipermail/knot-resolver-announce/2019/000009.html
July 18, 2019
Several security issues were fixed in LibreOffice.
July 18, 2019
An update that fixes one vulnerability is now available.
July 18, 2019
An update that fixes three vulnerabilities is now available.
July 18, 2019
An update that fixes two vulnerabilities is now available.
July 18, 2019
An update that solves two vulnerabilities and has three fixes is now available.
July 18, 2019
security update
July 17, 2019
Several security issues were fixed in Thunderbird.
July 17, 2019
An update that fixes three vulnerabilities is now available.
July 17, 2019
An update that fixes 12 vulnerabilities is now available.
July 17, 2019
An update that fixes two vulnerabilities is now available.
July 17, 2019
An update that fixes 10 vulnerabilities is now available.
July 17, 2019
An update that solves 7 vulnerabilities and has three fixes is now available.
July 17, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:1775
July 17, 2019
The package chromium before version 75.0.3770.142-1 is vulnerable to multiple issues including arbitrary code execution and information disclosure.
July 17, 2019
The package squid before version 4.8-1 is vulnerable to arbitrary code execution.
July 17, 2019
The package firefox before version 68.0-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, cross-site request forgery, sandbox escape, arbitrary filesystem access, content spoofing, cross-site scripting, denial of service, information disclosure, insufficient validation and silent downgrade.
July 17, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:1774
July 17, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:1777
July 17, 2019
A use-after-free in onig_new_deluxe() in regext.c allows attackers to potentially cause information disclosure, denial of service, or possibly code execution by providing a crafted regular expression. The attacker
July 17, 2019
An update that solves one vulnerability and has two fixes is now available.
July 16, 2019
Several security issues were fixed in NSS.
July 16, 2019
An update is now available for Red Hat JBoss BPM Suite. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 16, 2019
Several security issues were fixed in Redis.
July 16, 2019
An update for vim is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 16, 2019
An update for keepalived is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 16, 2019
An update for libssh2 is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 16, 2019
An update for perl is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 16, 2019
An update for 389-ds-base is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 16, 2019
Several security issues were fixed in NSS.
July 16, 2019
This update includes a fix for a security vulnerability, CVE-2018-20843: > Fix extraction of namespace prefixes from XML names; XML names with multiple colons could end up in the wrong namespace, and take a high amount of RAM and CPU resources while processing, opening the door to use for denial-of-service attacks For more information on […]
July 15, 2019
Rebase to radare2 3.6.0 and fixes CVE-2019-12790 and CVE-2019-12802
July 15, 2019
security update
July 15, 2019