Several vulnerabilities were discovered in net-snmp, a suite of Simple Network Management Protocol applications, which could lead to privilege escalation.
August 15, 2020
security update
August 15, 2020
Update to latest upstream stable version.
August 14, 2020
An update that fixes two vulnerabilities is now available.
August 14, 2020
An update that fixes two vulnerabilities is now available.
August 14, 2020
Several security issues were fixed in Salt.
August 14, 2020
An update that solves one vulnerability and has four fixes is now available.
August 14, 2020
An update that fixes one vulnerability is now available.
August 14, 2020
An update that fixes one vulnerability is now available.
August 14, 2020
Patch for CVE-2020-17353
August 13, 2020
Security fix for CVE-2019-20907, CVE-2020-14422. Provide a versioned pathfix3.7.py command.
August 13, 2020
security update
August 13, 2020
An update that contains security fixes can now be installed.
August 13, 2020
An update that solves one vulnerability and has three fixes is now available.
August 13, 2020
An update that solves two vulnerabilities and has 6 fixes is now available.
August 13, 2020
An update that fixes 5 vulnerabilities is now available.
August 13, 2020
Several security issues were fixed in Apache HTTP Server.
August 13, 2020
An update that fixes 6 vulnerabilities is now available.
August 13, 2020
An update that solves two vulnerabilities and has 6 fixes is now available.
August 12, 2020
An update that fixes two vulnerabilities is now available.
August 12, 2020
An update that contains security fixes can now be installed.
August 12, 2020
An update that solves one vulnerability and has one errata is now available.
August 12, 2020
An update that fixes 8 vulnerabilities is now available.
August 12, 2020
An update that fixes three vulnerabilities is now available.
August 12, 2020
security update
August 12, 2020
security update
August 11, 2020
An update that solves two vulnerabilities and has two fixes is now available.
August 11, 2020
An update that fixes one vulnerability is now available.
August 11, 2020
An update that fixes one vulnerability is now available.
August 11, 2020
An update that fixes 7 vulnerabilities is now available.
August 11, 2020
An update that fixes 6 vulnerabilities is now available.
August 11, 2020
An update that fixes 6 vulnerabilities is now available.
August 11, 2020
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 10, 2020
An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 10, 2020
An update that fixes four vulnerabilities is now available.
August 10, 2020
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 10, 2020
Samba could be made to crash if it received specially crafted network traffic.
August 10, 2020
An update for libvncserver is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
August 10, 2020
xrdp-sesman service in xrdp can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. This will allow them
August 9, 2020
ruby-kramdown processes the template option inside Kramdown documents by default, which allows unintended read access (such as template=”/etc/passwd”) or unintended embedded Ruby code execution (such as a string that begins with template=”string://
August 9, 2020
An update that fixes 26 vulnerabilities is now available.
August 9, 2020
Security update for CVE-2020-16116, https://kde.org/info/security/advisory-20200730-1.txt
August 8, 2020
# rpki-client 6.7p1 * Security fix: Incorrect use of `EVP_PKEY_cmp` allowed an authentication bypass
August 8, 2020
The following CVE(s) have been reported against src:wpa. CVE-2019-10064
August 8, 2020
An update that fixes 7 vulnerabilities is now available.
August 8, 2020
An update that fixes 7 vulnerabilities is now available.
August 8, 2020
An update that fixes one vulnerability is now available.
August 8, 2020
A use-after-free was found in iproute2, possibly allowing a Denial of Service condition.
August 8, 2020
A buffer overflow in gThumb might allow remote attacker(s) to execute arbitrary code.
August 8, 2020
Multiple vulnerabilities have been found in Apache, the worst of which could result in the arbitrary execution of code.
August 8, 2020
security update
August 7, 2020
An update that contains security fixes can now be installed.
August 7, 2020
An update that fixes 12 vulnerabilities is now available.
August 7, 2020
An update that fixes 6 vulnerabilities is now available.
August 7, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:3253
August 7, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:3344
August 7, 2020
Upstream details at : https://access.redhat.com/errata/RHSA-2020:3233
August 7, 2020
security update
August 6, 2020
Yunus ‘ad±rc± found an issue in the SUBSCRIBE method of UPnP, a network protocol for devices to automatically discover and communicate with each other. Insuficient checks on this method allowed attackers to use vulnerable UPnP services for DoS attacks or possibly to bypass
August 6, 2020
An update that solves one vulnerability and has two fixes is now available.
August 6, 2020
An update that fixes 10 vulnerabilities is now available.
August 6, 2020
An update that solves 19 vulnerabilities and has 92 fixes is now available.
August 6, 2020
ppp could be made to load arbitrary kernel modules and possibly run programs.
August 6, 2020
An update that solves one vulnerability and has one errata is now available.
August 6, 2020
An update that fixes 10 vulnerabilities is now available.
August 5, 2020
An update that fixes 26 vulnerabilities is now available.
August 5, 2020
An update that fixes one vulnerability is now available.
August 5, 2020
Red Hat Ansible Tower 3.7.2-1 – RHEL7 Container 2. Description: * Updated Named URLs to allow for testing the presence or absence of objects (CVE-2020-14337)
August 5, 2020
Red Hat Ansible Tower 3.6.5-1 – RHEL7 Container 2. Description: * Removed reports option for Satellite inventory script * Fixed Tower Server Side Request Forgery on Credentials (CVE-2020-14327)
August 5, 2020
USN-4441-1 introduced a regression in MySQL
August 5, 2020
security update
August 4, 2020
An update that fixes one vulnerability is now available.
August 4, 2020
An update that fixes one vulnerability is now available.
August 4, 2020
libssh could be made to crash if it received a specially crafted request.
August 4, 2020
postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692) SL6 noarch postgresql-jdbc-8.4.704-4.el6_10.noarch.rpm – Scientific Linux Development Team
August 4, 2020
Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 4, 2020
postgresql-jdbc: XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692) SL7 noarch postgresql-jdbc-9.2.1002-8.el7_8.noarch.rpm postgresql-jdbc-javadoc-9.2.1002-8.el7_8.noarch.rpm – Scientific Linux Development Team
August 4, 2020
security update
August 3, 2020
An update that fixes one vulnerability is now available.
August 3, 2020
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 3, 2020
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 3, 2020
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 3, 2020
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
August 3, 2020
libvncserver: websocket decoding buffer overflow (CVE-2017-18922) SL7 x86_64 libvncserver-0.9.9-14.el7_8.1.i686.rpm libvncserver-0.9.9-14.el7_8.1.x86_64.rpm libvncserver-debuginfo-0.9.9-14.el7_8.1.i686.rpm libvncserver-debuginfo-0.9.9-14.el7_8.1.x86_64.rpm libvncserver-devel-0.9.9-14.el7_8.1.i686.rpm libvncserver-devel-0.9.9-14.el7_8.1.x86_64.rpm – Scientific Linux [More…]
August 3, 2020
An update that fixes one vulnerability is now available.
August 2, 2020
Multiple security issues have been found in Thunderbird which could result in denial of service or potentially the execution of arbitrary code.
August 2, 2020
It was discovered that there was an escaping issue in libphp-phpmailer, an email generation utility class for the PHP programming language.
August 2, 2020
Multiple vulnerabilities have been found in Python, the worst of which could result in a Denial of Service condition.
August 2, 2020
In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in
August 2, 2020
Security fix for CVE-2020-15917 (STARTTLS protocol violation).
August 1, 2020
security update
August 1, 2020
Fix insufficient output escaping bug in file attachment names (CVE-2020-13625). References: – https://bugs.mageia.org/show_bug.cgi?id=26760
August 1, 2020
An integer overflow in the getnum function in lua_struct.c CVE-2020-14147 References: – https://bugs.mageia.org/show_bug.cgi?id=26978
July 31, 2020
Multiple security vulnerabilites in virtualbox allow unauthorized access to critical data or takeover of Oracle VM VirtualBox. See CVE references for details. References:
July 31, 2020
Updated dnsmasq package fix insecure default configuration potentially making it an open resolver (CVE-2020-14312). In its default configuration, dnsmasq listen and answer query from any address even outside of the local subnet. Thus, it may inadvertently
July 31, 2020
Bypass of boundary checks in nio.Buffer via concurrent access. (CVE-2020-14583) Incomplete bounds checks in Affine Transformations. (CVE-2020-14593)
July 31, 2020
The CBC padding operations were not constant time and as a result would leak the length of the plaintext values which were being padded to an attacker running a side channel attack via shared resources such as cache or branch predictor. No information about the contents was leaked, but the length alone might be used […]
July 31, 2020
An update that fixes 10 vulnerabilities is now available.
July 31, 2020