An update that fixes 5 vulnerabilities is now available.
July 15, 2019
An update that fixes two vulnerabilities is now available.
July 15, 2019
An update that fixes 20 vulnerabilities is now available.
July 15, 2019
An update that solves three vulnerabilities and has 5 fixes is now available.
July 15, 2019
This update upgrades Thunderbird to version 60.8.0. * Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 (CVE-2019-11709) * Mozilla: Sandbox escape via installation of malicious language pack (CVE-2019-9811) * Mozilla: Script injection within domain through inner window reuse (CVE-2019-11711) * Mozilla: Cross-origin POST requests can be made with NPAPI plugins by […]
July 15, 2019
Several security issues were fixed in Squid.
July 15, 2019
A system hardening measure could be bypassed.
July 15, 2019
An update that fixes one vulnerability is now available.
July 15, 2019
Zipios could be made to crash or consume system resources if it received specially crafted input.
July 15, 2019
This update upgrades Thunderbird to version 60.8.0. * Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 (CVE-2019-11709) * Mozilla: Sandbox escape via installation of malicious language pack (CVE-2019-9811) * Mozilla: Script injection within domain through inner window reuse (CVE-2019-11711) * Mozilla: Cross-origin POST requests can be made with NPAPI plugins by […]
July 15, 2019
Several security issues were fixed in Exiv2.
July 15, 2019
vim/neovim: ‘:source!’ command allows arbitrary command execution via modelines (CVE-2019-12735) SL6 x86_64 vim-X11-7.4.629-5.el6_10.2.x86_64.rpm vim-common-7.4.629-5.el6_10.2.x86_64.rpm vim-debuginfo-7.4.629-5.el6_10.2.x86_64.rpm vim-enhanced-7.4.629-5.el6_10.2.x86_64.rpm vim-filesystem-7.4.629-5.el6_10.2.x86_64.rpm vim-minimal-7.4.629-5.el6_10.2.x86_64.rpm i386 [More…]
July 15, 2019
Vulnerabilities have been identified in libspring-java, a modular Java/J2EE application framework.
July 14, 2019
An update that solves one vulnerability and has 11 fixes is now available.
July 14, 2019
An update that fixes three vulnerabilities is now available.
July 14, 2019
Firefox could be made to crash or run programs as your login if it opened a malicious website.
July 13, 2019
An update that solves one vulnerability and has one errata is now available.
July 13, 2019
An update that fixes one vulnerability is now available.
July 13, 2019
An update that fixes one vulnerability is now available.
July 13, 2019
An update that fixes two vulnerabilities is now available.
July 13, 2019
Harsh Jaiswal discovered a remote shell execution vulnerability in ruby-mini-magick, a Ruby library providing a wrapper around ImageMagick or GraphicsMagick, exploitable when using MiniMagick::Image.open with specially crafted URLs coming from unsanitized user input.
July 13, 2019
security update
July 13, 2019
An update that contains security fixes can now be installed.
July 12, 2019
#### Update to v1.48 * New API: – `snapd_client_get_connections_async` – `snapd_client_get_connections_finish` – `snapd_client_get_connections_sync` – `snapd_client_get_interfaces2_async` – `snapd_client_get_interfaces2_finish` – `snapd_client_get_interfaces2_sync` – `snapd_client_get_snap_conf_async`
July 12, 2019
– New upstream version (60.8.0)
July 12, 2019
#### Update to v1.48 * New API: – `snapd_client_get_connections_async` – `snapd_client_get_connections_finish` – `snapd_client_get_connections_sync` – `snapd_client_get_interfaces2_async` – `snapd_client_get_interfaces2_finish` – `snapd_client_get_interfaces2_sync` – `snapd_client_get_snap_conf_async`
July 12, 2019
– Update to 2.8 fixes rhbz#1581180 rhbz#1603993 rhbz#1674893 and rhbz#1524335 – Removed upstreamed patch – Bug 1524335 – CVE-2017-17459 fossil: Command injection via malicious ssh URLs [fedora-all] – Bug 1581180 – Update fossil version to 2.6 (currently is 2.2) – Bug 1603993 – fossil: FTBFS in Fedora rawhide – Bug 1674893 – fossil: FTBFS in […]
July 12, 2019
update to 2.1.10, security fix for CVE-2019-12781
July 12, 2019
security update
July 12, 2019
security update
July 12, 2019
This update upgrades Firefox to version 60.8.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 (CVE-2019-11709) * Mozilla: Sandbox escape via installation of malicious language pack (CVE-2019-9811) * Mozilla: Script injection within domain through inner window reuse (CVE-2019-11711) * Mozilla: Cross-origin POST requests can be made with NPAPI plugins […]
July 12, 2019
Multiple vulnerabilities were discovered in the HyperLogLog implementation of Redis, a persistent key-value database, which could result in denial of service or potentially the execution of arbitrary code.
July 12, 2019
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, cross-site scripting, spoofing, information disclosure, denial of service or cross-site request forgery.
July 12, 2019
An update that fixes one vulnerability is now available.
July 12, 2019
An update that fixes one vulnerability is now available.
July 12, 2019
An update that solves one vulnerability and has one errata is now available.
July 12, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:1763
July 12, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:1765
July 12, 2019
An update that fixes one vulnerability is now available.
July 12, 2019
An update that solves 11 vulnerabilities and has two fixes is now available.
July 12, 2019
An update that contains security fixes can now be installed.
July 11, 2019
security update
July 11, 2019
This update provides ffmpeg version 4.1.4, which fixes several security vulnerabilities and other bugs which were corrected upstream References: – https://bugs.mageia.org/show_bug.cgi?id=25109
July 11, 2019
An update that fixes one vulnerability is now available.
July 11, 2019
An update that solves one vulnerability and has one errata is now available.
July 11, 2019
Two vulnerabilities were discovered in the DOSBox emulator, which could result in the execution of arbitrary code on the host running DOSBox when running a malicious executable in the emulator.
July 11, 2019
Two security vulnerabilities were discovered in openjpeg2, a JPEG 2000 image library. CVE-2016-9112
July 11, 2019
The urllib library in Python ships support for a second, not well known URL scheme for accessing local files (“local_file://”). This scheme can be used to circumvent protections that try to block local file access
July 11, 2019
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 11, 2019
An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 11, 2019
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 11, 2019
An update for the virt:8.0.0 module is now available for Red Hat Enterprise Linux 8 Advanced Virtualization. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 11, 2019
Upstream details at : https://access.redhat.com/errata/RHSA-2019:1726
July 11, 2019
An update that solves one vulnerability and has one errata is now available.
July 11, 2019
New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.
July 10, 2019
An update that fixes two vulnerabilities is now available.
July 10, 2019
An update that solves one vulnerability and has one errata is now available.
July 10, 2019
An update that fixes one vulnerability is now available.
July 10, 2019
dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass (CVE-2019-12749) SL6 x86_64 dbus-1.2.24-11.el6_10.x86_64.rpm dbus-debuginfo-1.2.24-11.el6_10.i686.rpm dbus-debuginfo-1.2.24-11.el6_10.x86_64.rpm dbus-libs-1.2.24-11.el6_10.i686.rpm dbus-libs-1.2.24-11.el6_10.x86_64.rpm dbus-x11-1.2.24-11.el6_10.x86_64.rpm dbus-devel-1.2.24-11.el6_10.i686.rpm dbus-devel-1 [More…]
July 10, 2019
An update that solves one vulnerability and has 8 fixes is now available.
July 10, 2019
An update that solves one vulnerability and has three fixes is now available.
July 10, 2019
An update that solves 21 vulnerabilities and has two fixes is now available.
July 10, 2019
An update that solves one vulnerability and has two fixes is now available.
July 10, 2019
It was discovered that there were two heap buffer overflows in the Hyperloglog functionality provided by the Redis in-memory key-value database.
July 10, 2019
An update for openstack-ironic-inspector is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 10, 2019
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 10, 2019
An update for openstack-tripleo-common is now available for Red Hat OpenStack Platform 13.0 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
July 10, 2019
security update
July 9, 2019
Apport could be made to expose sensitive information in crash reports.
July 9, 2019
An update that fixes one vulnerability is now available.
July 9, 2019
An update that fixes one vulnerability is now available.
July 9, 2019
An update is now available for Red Hat JBoss Web Server 3.1. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
July 9, 2019
An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 6 and Red Hat JBoss Web Server 3.1 for RHEL 7. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
July 9, 2019
Several security issues were fixed in GVfs.
July 9, 2019
The package python2-django before version 1.11.22-1 is vulnerable to silent downgrade.
July 9, 2019
The package python-django before version 2.2.3-1 is vulnerable to silent downgrade.
July 9, 2019
The package irssi before version 1.2.1-1 is vulnerable to arbitrary code execution.
July 9, 2019
Spring Security support plain text passwords using PlaintextPasswordEncoder. If an application using an affected version of Spring Security is leveraging PlaintextPasswordEncoder and a user
July 9, 2019
Whoopsie could be made to crash or expose sensitive information if it processed a specially crafted crash report.
July 9, 2019
Apport could be made to expose sensitive information in crash reports.
July 9, 2019
Fang-Pen Lin discovered a stack-based buffer-overflow flaw in ZeroMQ, a lightweight messaging kernel library. A remote, unauthenticated client connecting to an application using the libzmq library, running with a
July 8, 2019
An update that fixes one vulnerability is now available.
July 8, 2019
An update that fixes one vulnerability is now available.
July 8, 2019
An update that fixes two vulnerabilities is now available.
July 8, 2019
An update that fixes two vulnerabilities is now available.
July 8, 2019
GLib did not properly restrict directory and file permissions.
July 8, 2019
Docker could be made to overwrite files as the administrator.
July 8, 2019
Fang-Pen Lin discovered a stack-based buffer-overflow flaw in ZeroMQ, a lightweight messaging kernel library. A remote, unauthenticated client connecting to an application using the libzmq library, running with a socket listening with CURVE encryption/authentication enabled, can take
July 8, 2019
An update for python27-python is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 8, 2019
Several security issues were fixed in libvirt.
July 8, 2019
An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
July 8, 2019
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
July 8, 2019
security update
July 6, 2019
Bugfixes, and a security fix: Fixed vulnerabilities: Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands.
July 6, 2019
Bugfixes, and a security fix: Fixed vulnerabilities: Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands.
July 6, 2019
Bugfixes, and a security fix: Fixed vulnerabilities: Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands.
July 6, 2019
Bugfixes, and a security fix: Fixed vulnerabilities: Filenames containing double-quotation marks were not escaped correctly when selected for opening/editing. Depending on the associated program, parts of the filename could be interpreted as commands.
July 6, 2019
Fix vfs_fruit, vfs_glusterfs and smbspool —- Update to Samba 4.10.5 Security fixes for CVE-2019-12435 and CVE-2019-12436
July 6, 2019