This update is based on upstream 5.4.6 and fixes various potential security issues related to buffer overflows, double frees, NUll pointer dereferences, improper / missing input validations and so on. It also adds other bugfixes all over the kernel.
Type: Vulnerability. Trend Micro Apex Central is prone to a cross-site scripting vulnerability; fixes are available.
Type: Vulnerability. TYPO3 is prone to a remote code-execution vulnerability; fixes are available.
Type: Vulnerability. IBM Spectrum Scale is prone to a local privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Samba is prone to a privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Linux kernel is prone to a denial-of-service vulnerability.
Type: Vulnerability. Redis is prone to a buffer overflow vulnerability; fixes are available.
Type: Vulnerability. Multiple Trend Micro Products are prone to a local security-bypass vulnerability; fixes are available.
Type: Vulnerability. Apple iOS/iPadOS/watchOS/macOS are prone to a security vulnerability; fixes are available.
Type: Vulnerability. Wecon PLC Editor is prone to multiple stack-based buffer-overflow vulnerabilities.
Type: Vulnerability. Multiple Moxa Products are prone to a remote denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Broadcom CA Client Automation is prone to a local privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Sudo is prone to multiple security-bypass vulnerabilities; fixes are available.
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4107
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4148
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4240
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4326
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4190
Upstream details at : https://access.redhat.com/errata/RHSA-2019:4190
Type: Vulnerability. RedHat Ceph is prone to a remote denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Redis is prone to a remote denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Kubernetes API Server is prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Apache Log4j is prone to remote code-execution vulnerability; fixes are available.
Type: Vulnerability. Multiple VMware products are prone to a local privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Kubernetes is prone to an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Equinox Control Expert is prone to an SQL-injection vulnerability.
Type: Vulnerability. Philips Veradius Unity, Pulsera, and Endura are prone to a denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Cloud Foundry Cloud Controller API is prone to a security-bypass vulnerability; fixes are available.
A change introduced in libssh 0.6.3-4+deb8u4 (which got released as DLA 2038-1) has broken x2goclient’s way of scp’ing session setup files from client to server, resulting in an error message shown in a GUI error dialog box during session startup (and session resuming).
An update that fixes two vulnerabilities is now available.
What are some of the key things you should do with your shiny new device as soon as you unbox it? The post How to secure your digital Christmas presents appeared first on WeLiveSecurity
An update for fribidi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
An update for libyang is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
An issue has been found in cups, the Common UNIX Printing System(tm). An incorrect bounds check could lead to a possible out-of-bounds read and
An update that fixes 7 vulnerabilities is now available.
security update
Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC server/viewer application for Windows and Unix.
An update that solves 26 vulnerabilities and has 14 fixes is now available.
security update
New tigervnc packages are available for Slackware 14.2 and -current to fix security issues.
New openssl packages are available for Slackware 14.2 and -current to fix a security issue.
– Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
– Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
Type: Vulnerability. Palo Alto Networks PAN-OS is prone to a privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Telos AMHS is prone to multiple cross-site scripting vulnerabilities and an information-disclosure vulnerability; fixes are available.
Type: Vulnerability. Multiple Apple Products are prone to an arbitrary code execution vulnerability; fixes are available.
Type: Vulnerability. Atlassian Confluence Server and Data Center are prone to a security-bypass vulnerability; fixes are available.
Type: Vulnerability. Django is prone to a security-bypass vulnerability; fixes are available.
Type: Vulnerability. D-Link DIR-615 is prone to a privilege-escalation vulnerability.
Type: Vulnerability. ABB PB610 Panel Builder 600 is prone to multiple security vulnerabilities; fixes are available.
Type: Vulnerability. TYPO3 is prone to a cross-site scripting vulnerability; fixes are available.
Type: Vulnerability. Multiple Dell products are prone to multiple security vulnerabilities; fixes are available.
Type: Vulnerability. Drupal Core is prone to a remote denial-of-service vulnerability; fixes are available.
Type: Vulnerability. Apache Xerces-C is prone to a remote code-execution vulnerability.
Type: Vulnerability. Sysstat is prone to a memory-corruption vulnerability; fixes are available.
Type: Vulnerability. Apache Tomcat is prone to a session-fixation vulnerability; fixes are available.
Type: Vulnerability. Drupal is prone to multiple security vulnerabilities; fixes are available.
Type: Vulnerability. Apache Tomcat is prone to local privilege-escalation vulnerability; fixes are available.
Type: Vulnerability. Drupal is prone to an access-bypass vulnerability; fixes are available.
Reading Time: ~ 2 min. Honda Customer Database Exposed Officials have been working over the past work to secure a database containing highly sensitive information belonging to more than 26,000 North American customers of the Honda motor company. The database in question was originally created in October and was only discovered on December 11. While […]
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 10.0 (Newton). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
There has been an out-of-bounds write in Cyrus SASL leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash was ultimately caused by an off-by-one error
An ongoing phishing scam uncovered by ESET researchers seeks to wreak havoc on your money and digital life in one fell swoop The post Ambitious scam wants far more than just PayPal logins appeared first on WeLiveSecurity
An update that fixes 7 vulnerabilities is now available.