Oracle Critical Patch Update Advisory – July 2018
Jul17
on July 17, 2018
at 7:30 pm
Posted In: Uncategorized
Comment
(Jul 16) – Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260
(Jul 14) This is a straightforward update from 2.5.1 to the newly-released 2.5.2. Release notes are here: https://github.com/singularityware/singularity/releases/tag/2.5.2 The most important fix is a security issue in the overlay code. Please look for regressions in your Singularity runtime workflows.
(Jul 16) A timing attack was discovered in the function for CSRF token validation of the “Ruby rack protection” framework. For the stable distribution (stretch), this problem has been fixed in
59 queries. 8.5 mb Memory usage. 0.517 seconds.