LinuxSecurity.com: The package python-mysql-connector before version 8.0.15-1 is vulnerable to authentication bypass.
February 25, 2019
Setting up a Django application on RHEL 8 Beta
February 23, 2019
security update
February 20, 2019
security update
February 19, 2019
security update
February 19, 2019
security update
February 19, 2019
Consistent security by crypto policies in Red Hat Enterprise Linux 8
February 19, 2019
Hardening ELF binaries using Relocation Read-Only (RELRO)
February 19, 2019
What data privacy means and how to guard it in 2019
February 19, 2019
Preparing for Identity Management in Red Hat Enterprise Linux 8
February 19, 2019
Security embargoes at Red Hat
February 19, 2019
security update
February 17, 2019
security update
February 15, 2019
security update
February 13, 2019
The package python2-django before version 1.11.19-1 is vulnerable to denial of service.
February 13, 2019
The package python-django before version 2.1.6-1 is vulnerable to denial of service.
February 13, 2019
The package lib32-curl before version 7.64.0-1 is vulnerable to arbitrary code execution.
February 12, 2019
The package lib32-libcurl-compat before version 7.64.0-1 is vulnerable to arbitrary code execution.
February 12, 2019
The package lib32-libcurl-gnutls before version 7.64.0-1 is vulnerable to arbitrary code execution.
February 12, 2019
The package libcurl-gnutls before version 7.64.0-1 is vulnerable to arbitrary code execution.
February 12, 2019
The package curl before version 7.64.0-1 is vulnerable to arbitrary code execution.
February 12, 2019
security update
February 12, 2019
The package aubio before version 0.4.9-1 is vulnerable to denial of service.
February 12, 2019
The package libu2f-host before version 1.1.7-1 is vulnerable to arbitrary code execution.
February 12, 2019
The package spice before version 0.14.0-3 is vulnerable to arbitrary code execution.
February 12, 2019
The package chromium before version 72.0.3626.81-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, content spoofing and insufficient validation.
February 12, 2019
security update
February 11, 2019
The package firefox before version 65.0-1 is vulnerable to multiple issues including arbitrary code execution, privilege escalation and access restriction bypass.
February 11, 2019
The package dovecot before version 2.3.4.1-1 is vulnerable to authentication bypass.
February 11, 2019
security update
February 10, 2019
EU Parliament Clears a Path to Give Snowden Asylum
February 9, 2019
Teen Who Hacked CIA Director
February 9, 2019
Vint Cerf and 260 experts give FCC a plan to secure Wi-Fi routers
February 9, 2019
Journalist convicted of helping Anonymous hack the LA Times
February 9, 2019
Security awareness is our shared responsibility
February 9, 2019
10 cutting-edge security threats
February 9, 2019
CSOs could see 7% raise next year
February 9, 2019
security update
February 7, 2019
security update
February 6, 2019
security update
February 5, 2019
security update
February 4, 2019
security update
February 3, 2019
security update
February 3, 2019
security update
February 2, 2019
security update
February 2, 2019
LinuxSecurity.com: A remote code execution vulnerability exists in PHP’s built-in phar stream wrapper when performing file operations on an untrusted phar:// URI. Some Drupal code (core, contrib, and custom) may be performing file operations on insufficiently validated user input, thereby being
February 2, 2019
LinuxSecurity.com: Bug fixes for binutils including one that is preventing Yocot/oe-core from building properly
February 2, 2019
LinuxSecurity.com: New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues.
February 2, 2019
LinuxSecurity.com: Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.38. Please see the MariaDB 10.0 Release Notes for further details:
February 1, 2019
LinuxSecurity.com: The 4.20.5 stable kernel update contains a number of important fixes across the tree.
February 1, 2019
security update
January 31, 2019
security update
January 31, 2019
security update
January 31, 2019
LinuxSecurity.com: Several security issues were fixed in Avahi.
January 31, 2019
LinuxSecurity.com: The package ghostscript before version 9.26-2 is vulnerable to sandbox escape.
January 31, 2019
security update
January 30, 2019
LinuxSecurity.com: New mozilla-firefox packages are available for 14.2 and -current to fix security issues.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Update to mingw-qt5-*-5.11.3, see http://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/ for details. Update to mingw-sip-4.19.13, see https://www.riverbankcomputing.com/static/Downloads/sip/ChangeLog for details.
January 30, 2019
LinuxSecurity.com: Security fix for CVE-2019-6706.
January 30, 2019
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
January 29, 2019
LinuxSecurity.com: Several security issues were fixed in the Linux kernel.
January 29, 2019
LinuxSecurity.com: Several issues in wireshark, a network traffic analyzer, have been found. Dissectors of – ISAKMP, a Internet Security Association and Key Management Protocol
January 28, 2019
LinuxSecurity.com: Several issues were discovered in qtbase-opensource-src, a cross-platform C++ application framework, which could lead to denial-of-service via application crash. Additionally, this update fixes a problem affecting vlc, where it would start without a GUI.
January 28, 2019
LinuxSecurity.com: Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. CVE-2018-4056
January 28, 2019
security update
January 28, 2019
security update
January 28, 2019
LinuxSecurity.com: Tavis Ormandy discovered a vulnerability in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER sandbox being enabled).
January 27, 2019
LinuxSecurity.com: The package nasm before version 2.14.02-1 is vulnerable to denial of service.
January 27, 2019
LinuxSecurity.com: The package haproxy before version 1.9.0-1 is vulnerable to denial of service.
January 27, 2019
LinuxSecurity.com: The package matrix-synapse before version 0.34.1.1-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: The package powerdns-recursor before version 4.1.9-1 is vulnerable to multiple issues including insufficient validation and access restriction bypass.
January 27, 2019
LinuxSecurity.com: The package apache before version 2.4.38-1 is vulnerable to multiple issues including denial of service and insufficient validation.
January 27, 2019
LinuxSecurity.com: The package go before version 2:1.11.5-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: The package go before version 2:1.11.5-1 is vulnerable to private key recovery.
January 27, 2019
LinuxSecurity.com: New version 2.6.6. Security fix for CVE-2019-5716, CVE-2019-5717, CVE-2019-5718, CVE-2019-5719
January 26, 2019
security update
January 26, 2019
LinuxSecurity.com: krb5, a MIT Kerberos implementation, had several flaws in LDAP DN checking, which could be used to circumvent a DN containership check by supplying special parameters to some calls.
January 25, 2019
LinuxSecurity.com: The PostgreSQL project has release a new minor release of the 9.4 branch. For Debian 8 “Jessie”, this has been uploaded as version
January 25, 2019
LinuxSecurity.com: New Version
January 25, 2019
LinuxSecurity.com: Ghostscript could be made to crash, access files, or run programs if it opened a specially crafted file.
January 24, 2019
LinuxSecurity.com: Several security issues were fixed in MySQL.
January 24, 2019
LinuxSecurity.com: A vulnerability in the HTML_QuickForm package has been found which potentially allows remote code execution. References: – https://bugs.mageia.org/show_bug.cgi?id=24185
January 24, 2019
LinuxSecurity.com: It was discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service (CVE-2018-20544). It was discovered that libcaca incorrectly handled certain images. An
January 24, 2019
LinuxSecurity.com: An issue has been found in PowerDNS Recursor where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua (CVE-2019-3806).
January 24, 2019