Security fix for CVE-2018-20662, CVE-2019-9631, CVE-2019-9200 and CVE-2019-9903.
April 3, 2019
An update that solves one vulnerability and has one errata is now available.
April 2, 2019
An update that fixes three vulnerabilities is now available.
April 2, 2019
An update that fixes one vulnerability is now available.
April 2, 2019
An update that fixes one vulnerability is now available.
April 2, 2019
An update that fixes one vulnerability is now available.
April 2, 2019
An update that fixes three vulnerabilities is now available.
April 2, 2019
An update that solves two vulnerabilities and has three fixes is now available.
April 2, 2019
An update that fixes one vulnerability is now available.
April 2, 2019
An update that fixes one vulnerability is now available.
April 2, 2019
An update that fixes four vulnerabilities is now available.
April 2, 2019
An update that fixes one vulnerability is now available.
April 2, 2019
An update that solves one vulnerability and has one errata is now available.
April 2, 2019
An update that fixes one vulnerability is now available.
April 1, 2019
An update that solves one vulnerability and has one errata is now available.
April 1, 2019
An update that fixes one vulnerability is now available.
April 1, 2019
An update that fixes 6 vulnerabilities is now available.
April 1, 2019
It was discovered that missing input sanitising in the file module of Drupal, a fully-featured content management framework, could result in cross-site scripting.
April 1, 2019
An update that fixes two vulnerabilities is now available.
April 1, 2019
An update that solves 14 vulnerabilities and has 5 fixes is now available.
April 1, 2019
An update that solves 15 vulnerabilities and has 10 fixes is now available.
April 1, 2019
An update that solves two vulnerabilities and has 10 fixes is now available.
April 1, 2019
An update that solves 6 vulnerabilities and has 21 fixes is now available.
April 1, 2019
Dovecot could be made to crash or run programs as an administrator if it opened a specially crafted file.
April 1, 2019
This update includes the changes in tzdata 2019a for the Perl bindings. For the list of changes, see DLA-1744-1. For Debian 8 “Jessie”, this problem has been fixed in version
April 1, 2019
security update
March 31, 2019
Several vulnerabilities have been found in php5, a server-side, HTML-embedded scripting language.
March 31, 2019
security update
March 30, 2019
Update to 3.0. License has changed to ASL 2.0 + exception. See https://github.com/michaelrsweet/mxml/releases/tag/v3.0 for more info.
March 30, 2019
Security fix for CVE-2018-19872
March 30, 2019
A security vulnerability was discovered in gpsd, the Global Positioning System daemon. A stack-based buffer overflow may allow remote attackers to execute arbitrary code via traffic on port 2947/TCP or crafted JSON inputs.
March 30, 2019
Multiple security issues have been found in the Thunderbird mail client, which could lead to the execution of arbitrary code or denial of service. For the stable distribution (stretch), these problems have been fixed in
March 30, 2019
The impact of the GDPR – privacy matters
March 30, 2019
An update that contains security fixes can now be installed.
March 30, 2019
An update that fixes three vulnerabilities is now available.
March 30, 2019
An update that solves two vulnerabilities and has 53 fixes is now available.
March 30, 2019
security update
March 29, 2019
An update that solves four vulnerabilities and has 7 fixes is now available.
March 29, 2019
An update that fixes 11 vulnerabilities is now available.
March 29, 2019
An update that solves 9 vulnerabilities and has one errata is now available.
March 29, 2019
An update that fixes one vulnerability is now available.
March 29, 2019
An update that fixes three vulnerabilities is now available.
March 29, 2019
An update that fixes two vulnerabilities is now available.
March 29, 2019
An update that fixes one vulnerability is now available.
March 29, 2019
An update that solves one vulnerability and has three fixes is now available.
March 29, 2019
An update that fixes four vulnerabilities is now available.
March 29, 2019
An update that solves one vulnerability and has four fixes is now available.
March 29, 2019
An update that fixes two vulnerabilities is now available.
March 29, 2019
Updated pdns packages fix security vulnerability: An issue has been found in PowerDNS Authoritative Server when the HTTP remote backend is used in RESTful mode (without post=1 set), allowing a remote user to cause the HTTP backend to connect to an attacker-specified
March 29, 2019
The updated live, mplayer, vlc packages fix security vulnerabilities: liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that causes the RTSP server to crash (Segmentation
March 29, 2019
This kernel update is based on the upstream 4.14.106 and fixes atleast the following security issue: In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers
March 29, 2019
Updated openjpeg2 packages fix security vulnerability: Division-by-zero vulnerabilities in the functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in lib/openjp3d/pi.c in OpenJPEG through 2.3.0 allow remote attackers to cause a denial of service
March 29, 2019
The updated file packages fix security vulnerabilities: do_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related to file_printable, a different vulnerability than CVE-2018-10360. (CVE-2019-8905)
March 29, 2019
The updated poppler packages fix security vulnerabilities: In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in
March 29, 2019
The package dovecot before version 2.3.5.1-1 is vulnerable to privilege escalation.
March 28, 2019
The package imagemagick before version 7.0.8.35-1 is vulnerable to arbitrary code execution.
March 28, 2019
An update that fixes four vulnerabilities is now available.
March 28, 2019
An update that fixes one vulnerability is now available.
March 28, 2019
An update that solves one vulnerability and has one errata is now available.
March 28, 2019
An update that solves two vulnerabilities and has one errata is now available.
March 28, 2019
An update that fixes 18 vulnerabilities is now available.
March 28, 2019
An update that fixes 8 vulnerabilities is now available.
March 28, 2019
security update
March 26, 2019
An update that fixes two vulnerabilities is now available.
March 26, 2019
An update that solves 8 vulnerabilities and has one errata is now available.
March 26, 2019
An update that fixes four vulnerabilities is now available.
March 26, 2019
An update that fixes two vulnerabilities is now available.
March 26, 2019
An update that fixes 5 vulnerabilities is now available.
March 26, 2019
xmltooling could be made to crash if it opened a specially crafted file.
March 26, 2019
Red Hat Ansible Tower 3.3.5 2. Description: For a list of changes included in this release, please read the Ansible Tower Release Notes:
March 26, 2019
Red Hat Ansible Tower 3.4.3 2. Description: For a list of changes included in this release, please read the Ansible Tower Release Notes:
March 26, 2019
Several vulnerabilities have recently been discovered in libssh2, a client-side C library implementing the SSH2 protocol
March 26, 2019
An update that fixes one vulnerability is now available.
March 26, 2019
openwsman: Disclosure of arbitrary files outside of the registered URIs (CVE-2019-3816) SL7 x86_64 libwsman1-2.6.3-6.git4391e5c.el7_6.i686.rpm libwsman1-2.6.3-6.git4391e5c.el7_6.x86_64.rpm openwsman-client-2.6.3-6.git4391e5c.el7_6.i686.rpm openwsman-client-2.6.3-6.git4391e5c.el7_6.x86_64.rpm openwsman-debuginfo-2.6.3-6.git4391e5c.el7_6.i686.rpm openwsman-debuginfo-2. [More…]
March 26, 2019
An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
March 26, 2019
security update
March 25, 2019
An update that fixes four vulnerabilities is now available.
March 25, 2019
Multiple scp client vulnerabilities have been discovered in OpenSSH, the premier connectivity tool for secure remote shell login and secure file transfer.
March 25, 2019
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
March 25, 2019
Two issues have been fixed in bash, the GNU Bourne-Again Shell: CVE-2016-9401
March 25, 2019
CVE-2018-19364: 9pfs: use-after-free (bz #1651359) CVE-2018-19489: 9pfs: use- after-free renaming files (bz #1653157) CVE-2018-16867: usb-mtp: path traversal issue (bz #1656746) CVE-2018-16872: usb-mtp: path traversal issue (bz #1659150) CVE-2018-20191: pvrdma: uar_read leads to NULL deref (bz #1660315) CVE-2019-6778: slirp: heap buffer overflow (bz #1669072) CVE-2019-3812: Out-of-
March 25, 2019
Security fix for [CVE-2018-1000877 CVE-2018-1000878 CVE-2018-1000879 CVE-2018-1000880] —- Applied various flaws from upsteam
March 25, 2019
Update to 3.0. License has changed to ASL 2.0 + exception. See https://github.com/michaelrsweet/mxml/releases/tag/v3.0 for more info.
March 25, 2019
Trail of Bits used the automated vulnerability discovery tools developed for the DARPA Cyber Grand Challenge to audit zlib. As rsync, a fast, versatile, remote (and local) file-copying tool, uses an embedded copy of
March 24, 2019
security update
March 24, 2019
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
March 24, 2019
It was discovered that Wireshark, a network traffic analyzer, contained several vulnerabilities in the dissectors for 6LoWPAN, P_MUL, RTSE, ISAKMP, TCAP, ASN.1 BER and RPCAP, which could result in denial of service.
March 24, 2019
An arbitrary file read vulnerability was discovered in passenger, a web application server. A local user allowed to deploy an application to passenger, can take advantage of this flaw by creating a symlink from the REVISION file to an arbitrary file on the system and have its
March 24, 2019
The package firefox before version 66.0.1-1 is vulnerable to arbitrary code execution.
March 24, 2019
security update
March 24, 2019
Several issues have been discovered in Apache module auth_mellon, which provides SAML 2.0 authentication. CVE-2019-3877
March 23, 2019
This update addresses various overflow conditions that could result in possible memory read/write out of bounds errors or zero byte allocations when connected to a malicious server.
March 23, 2019
Backport a security fix from PuTTY 0.71 affecting SFTP connections: Fix an integer overflow in the RSA key exchange preceeding host key verification
March 23, 2019
**Version 1.38.2** (2019-03-12) * added TemplateWrapper::getTemplateName() —- **Version 1.38.1** (2019-03-12) * fixed class aliases —- **Version 1.38.0** (2019-03-12) * fixed sandbox security issue (under some circumstances, calling the __toString() method on an object was possible even if not allowed by the security policy) * fixed batch filter clobbers array
March 23, 2019
**Version 2.7.2** (2019-03-12) * added TemplateWrapper::getTemplateName() —- **Version 2.7.1** (2019-03-12) * fixed class aliases —- **Version 2.7.0** (2019-03-12) * fixed sandbox security issue (under some circumstances, calling the __toString() method on an object was possible even if not allowed by the security policy) * fixed batch filter clobbers array keys when fill
March 23, 2019
security update
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019
An update that fixes one vulnerability is now available.
March 22, 2019