Ike.ninja

(Jul 12) Knot Resolver 2.4.0 (2018-07-03) changes ——————– – minimal libknot version is now 2.6.7 to pull in latest fixes (#366) Security ——– – fix a rare case of zones incorrectly dowgraded to insecure status (!576) New features ———— – TLS session resumption (RFC 5077), both server and client (!585, #105) (disabled when

(Jul 12) Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,

The post Increase hosting revenue by offering complementary security services appeared first on Plesk.

(Jul 11) The 4.17.4 stable kernel update contains a number of important updates across the tree.

(Jul 11) libpng could be made to crash if it received a specially crafted file.

(Jul 11) An update for gnupg2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

(Jul 10) Xapian-core could be made to execute arbitrary code if it received a specially crafted file.

(Jul 11) Updates for rh-dotnet20-dotnet, rh-dotnet21-dotnet, rh-dotnetcore10-dotnetcore, and rh-dotnetcore11-dotnetcore are now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact

(Jul 9) Orange Tsai discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker can take advantage of this flaw to read arbitrary files outside an application’s root directory via specially crafted requests, when the Sprockets server is

(Jul 10) An update for rh-git29-git is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Docker’s solution uses containerization technology to save you time and errors when creating a local development environment. Here’s how you do it and why.

The post How to develop a local environment with Docker – and why you should appeared first on Plesk.

(Jul 8) Fix CVE-2018-13054 cinnamon: privilege escalation in cinnamon-settings-users.py GUI

(Jul 7) ## 3.3.17 (2018-05-25) * security #cve-2018-11407 [Ldap] cast to string when checking empty passwords * security #cve-2018-11408 [SecurityBundle] Fail if security.http_utils cannot be configured * security #cve-2018-11406 clear CSRF tokens when the user is logged out * security #cve-2018-11385 migrating session for UsernamePasswordJsonAuthenticationListener * security #cve-2018-11386

(Jul 2) Several security issues were fixed in the Linux kernel.

(Jul 6) Latest upstream release, omits some mounting code found to be insecure and not well tested.