An update that fixes two vulnerabilities is now available.
May 21, 2019
An update that fixes four vulnerabilities is now available.
May 21, 2019
An update that fixes 6 vulnerabilities is now available.
May 21, 2019
Fixes possible man-in-the-middle security vulnerability – CVE-2019-11065
May 20, 2019
This update fixes security vulnerability – Checkstyle loads external DTDs by default. Upstream issue: https://github.com/checkstyle/checkstyle/issues/6474 https://github.com/checkstyle/checkstyle/issues/6478 References: https://checkstyle.org/releasenotes.html#Release_8.18
May 20, 2019
Multiple vulnerabilities have been discovered in jruby, Java implementation of the Ruby programming language.
May 20, 2019
Several security vulnerabilities have been discovered in drupal7, a PHP web site platform. The vulnerabilities affect the embedded versions of the jQuery JavaScript library and the Typo3 Phar Stream Wrapper library.
May 20, 2019
An update that fixes one vulnerability is now available.
May 20, 2019
An update that solves 14 vulnerabilities and has 90 fixes is now available.
May 20, 2019
An update that fixes four vulnerabilities is now available.
May 20, 2019
An update that solves one vulnerability and has one errata is now available.
May 20, 2019
An update is now available for Red Hat Quay 3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
May 20, 2019
gnome-desktop 3.30.2.3 release, fixing thumbnailer sandbox escape, CVE-2019-11460
May 20, 2019
Multiple vulnerabilities have been discovered in graphicsmagick, the image processing toolkit: CVE-2019-11473
May 20, 2019
A vulnerability was discovered in libspring-security-2.0-java, a modular Java/J2EE application security framework, when using SecureRandomFactoryBean#setSeed to configure a SecureRandom instance,
May 19, 2019
The update for ghostscript released as DLA-1792-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal “pdfdict” now hidden in the ghostscript update. Updated cups-filters
May 19, 2019
* Fix rendering of emojis copy-pasted from GTK emoji chooser. * Fix space characters not being rendered with some CJK fonts. * Fix adaptive streaming playback with older GStreamer versions. * Set a maximum zoom level for pinch zooming gesture. * Fix navigation gesture to not interfere with scrolling. * Fix SSE2 detection at compile […]
May 19, 2019
An update that fixes 6 vulnerabilities is now available.
May 17, 2019
The minified jquery library was broken in version 1.7.2+dfsg-3.2+deb8u6 due to an error during the build. This problem has now been fixed in version 1.7.2+dfsg-3.2+deb8u7
May 17, 2019
An update that fixes 8 vulnerabilities is now available.
May 17, 2019
– [3.1.1](https://github.com/TYPO3/phar-stream-wrapper/releases/tag/v3.1.1) – [TYPO3-PSA-2019-007](https://typo3.org/security/advisory/typo3-psa-2019-007/) / [CVE-2019-11831](https://nvd.nist.gov/vuln/detail/CVE-2019-11831) – [TYPO3-PSA-2019-008](https://typo3.org/security/advisory/typo3-psa-2019-008/) / [CVE-2019-11830](https://nvd.nist.gov/vuln/detail/CVE-2019-11830) –
May 16, 2019
An update that fixes 6 vulnerabilities is now available.
May 16, 2019
An update that solves 11 vulnerabilities and has 20 fixes is now available.
May 16, 2019
An update that fixes one vulnerability is now available.
May 16, 2019
An update that solves four vulnerabilities and has 6 fixes is now available.
May 16, 2019
An update that fixes four vulnerabilities is now available.
May 16, 2019
An update that solves three vulnerabilities and has 8 fixes is now available.
May 16, 2019
An update that solves four vulnerabilities and has three fixes is now available.
May 16, 2019
An update that fixes 6 vulnerabilities is now available.
May 16, 2019
An update that fixes one vulnerability is now available.
May 16, 2019
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which
May 16, 2019
An update for rh-python35-python-jinja2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 16, 2019
This update provides the Intel 20190514 microcode release that adds the microcode side mitigations for the Microarchitectural Data Sampling (MDS, also called ZombieLoad attack) vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU.
May 16, 2019
security update
May 15, 2019
security update
May 15, 2019
security update
May 15, 2019
security update
May 15, 2019
An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 15, 2019
A deeper look at the MDS vulnerability
May 15, 2019
Modern IT security: Sometimes caring is NOT sharing
May 15, 2019
security update
May 15, 2019
The update for ghostscript released as DSA 4442-1 uncovered an issue in cups-filters which was using the undocumented Ghostscript internal “pdfdict” now hidden in the ghostscript update. Updated cups-filters packages are now available to correct this issue.
May 14, 2019
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 14, 2019
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 14, 2019
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 14, 2019
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 14, 2019
VCFTools could be made to crash if it received specially crafted input.
May 14, 2019
An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 14, 2019
An update is now available for Satellite Tools 6.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 14, 2019
Red Hat Satellite 6.5 for RHEL 7 is now available containing security fixes, bug fixes, and enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
May 14, 2019
Isaac Boukris and Andrew Bartlett discovered that the S4U2Self Kerberos extension used in Samba’s Active Directory support was susceptible to man-in-the-middle attacks caused by incomplete checksum validation.
May 14, 2019
Multiple issues have been addressed in Qt4. CVE-2018-15518
May 14, 2019
security update
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes two vulnerabilities is now available.
May 13, 2019
An update that fixes 16 vulnerabilities is now available.
May 13, 2019
An update that fixes three vulnerabilities is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
An update that fixes 7 vulnerabilities is now available.
May 13, 2019
An update that fixes one vulnerability is now available.
May 13, 2019
May 13, 2019
An update that fixes 9 vulnerabilities is now available.
May 13, 2019
The PostgreSQL project has release a new minor release of the 9.4 branch. For Debian 8 “Jessie”, this has been uploaded as version
May 13, 2019
An update for python-jinja2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
May 13, 2019
The updated packages fix security vulnerabilities: A vulnerability in the Portable Document Format (PDF) scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and prior could allow an unauthenticated, remote attacker to cause a denial of service (DoS)
May 12, 2019
Updated mxml packages fix security vulnerabilities: An issue has been found in Mini-XML (aka mxml) 2.12. It is a stack-based buffer overflow in mxml_write_node in mxml-file.c via vectors involving a double-precision floating point number and the ”
May 12, 2019
A vulnerability was found in the svgsalamander library. If the library is being used in a web application for processing user supplied SVG files then the app is vulnerable to SSRF (CVE-2017-5617). References:
May 12, 2019
Updated tcpreplay package fixes security vulnerabilities: An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function get_layer4_v6() located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary.
May 12, 2019
Updated cronie packages fix security vulnerabilities: Cronie before 1.5.3 allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked (CVE-2019-9704).
May 12, 2019
Updated openssh packages fix security vulnerabilities: Due to missing character encoding in the progress display, the object name can be used to manipulate the client output, for example to employ ANSI codes to hide additional files being transferred (CVE-2019-6109).
May 12, 2019
Updated sysstat package fix security vulnerabilities: Out-of-bounds read during a memmove call inside the remap_struct function (CVE-2018-19416).
May 12, 2019
Updated python packages fix security vulnerability: A ‘file:’ blacklist bypass in URIs by using the ‘local-file:’ scheme instead (CVE-2019-9948).
May 12, 2019
Updated openexr package fixes security vulnerabilities: It was discovered that makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other impact (CVE-2018-18444).
May 12, 2019
pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers (CVE-2019-9923). References:
May 12, 2019
Updated bash package fixes security vulnerability: A vulnerability in which shell did not prevent user BASH_CMDS, allowing the user to execute any command with the permissions of the shell (CVE-2019-9924).
May 12, 2019
Updated qt4 packages fix security vulnerability: A malformed PPM image causes a division by zero and a crash in qppmhandler.cpp (CVE-2018-19872).
May 12, 2019
Update to April 2019 CPU. See: http://mail.openjdk.java.net/pipermail/jdk- updates-dev/2019-April/000951.html
May 10, 2019
security update
May 10, 2019
security update
May 10, 2019
An update that solves one vulnerability and has one errata is now available.
May 10, 2019
An update that contains security fixes can now be installed.
May 10, 2019
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, information disclosure or the execution of arbitrary code.
May 10, 2019
Multiple vulnerabilities were discovered in the Symfony PHP framework which could lead to cache bypass, authentication bypass, information disclosure, open redirect, cross-site request forgery, deletion of arbitrary files, or arbitrary code execution.
May 10, 2019
security update
May 10, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
Security, Performance updates, fiexes blocker with crashing httpd BZ 1708248
May 9, 2019
The 5.0.13 update contains a number of important fixes across the tree. There is no kernel-headers build this time. The tools version is 5.0.12 because originally it was built with the 5.0.12 kernel version but 5.0.13 was built before 5.0.12 could be filed in bodhi.
May 9, 2019
The 5.0.13 update contains a number of important fixes across the tree. There is no kernel-headers build this time. The tools version is 5.0.12 because originally it was built with the 5.0.12 kernel version but 5.0.13 was built before 5.0.12 could be filed in bodhi.
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
Update Ruby on Rails to 5.2.3. Fixes CVE-2019-5418 CVE-2019-5419 CVE-2019-5420.
May 9, 2019
An update that fixes 6 vulnerabilities is now available.
May 9, 2019
An update for freeradius is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
May 9, 2019
An update that fixes 6 vulnerabilities is now available.
May 9, 2019
An update that fixes 6 vulnerabilities is now available.
May 9, 2019
An update that solves 16 vulnerabilities and has 5 fixes is now available.
May 9, 2019
* https://www.drupal.org/project/drupal/releases/7.66 * https://www.drupal.org/SA-CORE-2019-006
May 8, 2019