Everything about GNU+Linux security
An update for python-XStatic-jQuery is now available for Red Hat OpenStack Platform 13 (Queens). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update for the nginx:1.16 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
New Red Hat Single Sign-On 7.4.4 packages are now available for Red Hat Enterprise Linux 8. 2. Relevant releases/architectures: Red Hat Single Sign-On 7.4 for RHEL 8 – noarch
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
New Red Hat Single Sign-On 7.4.4 packages are now available for Red Hat Enterprise Linux 7. 2. Relevant releases/architectures: Red Hat Single Sign-On 7.4 for RHEL 7 Server – noarch
security update
An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
An update for xorg-x11-server is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
Red Hat OpenShift Container Platform release 4.6.8 is now available with updates to packages and images that fix several bugs. This release includes a security update for openshift-enterprise-builder-container for Red Hat OpenShift Container
An update for libexif is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
Red Hat OpenShift Container Platform release 4.6.8 is now available with updates to packages and images that fix several bugs. An update for ironic-images, openshift, openshift-ansible, openshift-clients, and python-eventlet, cri-o, openshift-kuryr,
An update for libpq is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
Yaniv Nizry discovered that the clean module of lxml, Python bindings for libxml2 and libxslt could be bypassed. For the stable distribution (buster), this problem has been fixed in
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Ruild with hardening flags enabled; also, add -doc subpackage, fix .so version symlinking, make -devel dependency on main package strict (arched), and other minor improvements
New version 3.4.0. Security fix for CVE-2020-26575, CVE-2020-28030.
The container caasp/v4.5/velero-restic-restore-helper was updated. The following patches have been included in this update:
The container caasp/v4.5/velero-plugin-for-microsoft-azure was updated. The following patches have been included in this update:
The container caasp/v4.5/velero-plugin-for-gcp was updated. The following patches have been included in this update:
The container caasp/v4.5/velero-plugin-for-aws was updated. The following patches have been included in this update:
The container caasp/v4.5/velero was updated. The following patches have been included in this update:
The container caasp/v4.5/skuba-tooling was updated. The following patches have been included in this update:
An update that solves 11 vulnerabilities and has 62 fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability, contains one feature and has 6 fixes is now available.
An update that fixes 8 vulnerabilities is now available.
An update that solves four vulnerabilities and has 11 fixes is now available.
security update
security update
The update of sqlite3 released as DLA-2340-1 contained an incomplete fix for CVE-2019-20218. Updated sqlite3 packages are now available to correct this issue.
An update that solves 12 vulnerabilities and has 72 fixes is now available.
An update that solves one vulnerability, contains one feature and has 7 fixes is now available.
An update that solves 12 vulnerabilities and has 72 fixes is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
security update
The updated packages fix some problems found in version 86 and security vulnerabilities. References: – https://bugs.mageia.org/show_bug.cgi?id=27630
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves 8 vulnerabilities, contains one feature and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
security update
security update
David Benjamin discovered a flaw in the GENERAL_NAME_cmp() function which could cause a NULL dereference, resulting in denial of service. Additional details can be found in the upstream advisory:
An update that solves 6 vulnerabilities and has one errata is now available.
An update for mariadb-galera is now available for Red Hat OpenStack Platform 10 (Newton). Red Hat Product Security has rated this update as having a security impact of High. A Common Vulnerability Scoring System (CVSS) base score, which
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves 5 vulnerabilities and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that contains security fixes can now be installed.
When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable (CVE-2020-26970).
In PDFResurrect before 0.20, lack of header validation checks causes a heap-buffer-overflow in pdf_get_version() (CVE-2020-20740). References: – https://bugs.mageia.org/show_bug.cgi?id=27704
Mutt before 2.0.2 did not ensure that $ssl_force_tls was processed if an IMAP server’s initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle (CVE-2020-28896).
Security fix for CVE-2020-8037
security update
security update
The package musl before version 1.2.1-2 is vulnerable to arbitrary code execution.
The package webkit2gtk before version 2.30.3-1 is vulnerable to arbitrary code execution.
The package gitea before version 1.12.6-1 is vulnerable to insufficient validation.
The package neomutt before version 20201120-1 is vulnerable to silent downgrade.
The package matrix-synapse before version 1.20.1-1 is vulnerable to denial of service.
security update
Two vulnerabilities in the certificate list syntax verification and in the handling of CSN normalization were discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can take advantage of these
Several vulnerabilities were discovered in salt. CVE-2020-16846
An update that fixes 5 vulnerabilities, contains one feature is now available.
An update that fixes 10 vulnerabilities is now available.
Chiaki Ishikawa discovered a stack overflow in SMTP server status handling which could potentially result in the execution of arbitrary code.
An update that solves 5 vulnerabilities and has one errata is now available.
An update that contains security fixes can now be installed.
An update that fixes one vulnerability is now available.
An update that solves 5 vulnerabilities and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
security update
An update that fixes one vulnerability is now available.
An update is now available for Red Hat Ceph Storage 4.1. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that contains security fixes can now be installed.
An update that fixes one vulnerability is now available.