Security fix for CVE-2019-8383, CVE-2019-8379
Archive for June, 2019
This fixes several issues with the systemd certificate generation and logrotation.
Update to v1.13.5 (CVE-2019-1002101 – Mishandling of symlinks allows for arbitrary file write via `kubectl cp`)
RedHat: RHSA-2019-1553:01 Important: chromium-browser security update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
Use more restrictive AppArmor policy for Evince binaries.
User “Arminius” discovered a vulnerability in Vim, an enhanced version of the standard UNIX editor Vi (Vi IMproved). The “Common vulnerabilities and exposures project” identifies the following problem:
WordPress 5.2.2 is now available! This maintenance release fixes 13 bugs and adds a little bit of polish to the Site Health feature that made its debut in 5.2. For more info, browse the full list of changes on Trac or check out the Version 5.2.2 documentation page. WordPress 5.2.2 is a short-cycle maintenance release. The next […]
Debian: DSA-4466-1: firefox-esr security update
Samuel Gross discovered a type confusion bug in the JavaScript engine of the Mozilla Firefox web browser, which could result in the execution of arbitrary code when browsing a malicious website.
RedHat: RHSA-2019-1545:01 Important: Red Hat Fuse 7.3.1 security update
A micro version update (from 7.3 to 7.3.1) is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact
RedHat: RHSA-2019-1543:01 Important: Red Hat JBoss Core Services Apache
Red Hat JBoss Core Services Pack Apache Server 2.4.29 Service Pack 2 packages for Microsoft Windows and Oracle Solaris are now available. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
Resolves rhbz#1670364 Fixes CVE-2019-6690
Update to 1.12.16 Fix CVE-2019-12749
Update to 1.1.33 Fix CVE-2016-1841, CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, CVE-2016-4609, CVE-2019-11068, CVE-2016-1684, CVE-2016-1683, CVE-2016-4738.
RedHat: RHSA-2019-1527:01 Moderate: WALinuxAgent security update
An update for WALinuxAgent is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
RedHat: RHSA-2019-1517:01 Moderate: gvfs security update
An update for gvfs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
Update to 2.8.1 bugfix release. Sync up dependencies with upstream. Fix CVE-2019-10156
RedHat: RHSA-2019-1486:01 Important: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
RedHat: RHSA-2019-1480:01 Important: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
glib 2.60.4 release: * Fixes to improved network status detection with NetworkManager * Leak fixes to some `glib-genmarshal` generated code * Further fixes to the Happy Eyeballs (RFC 8305) implementation * File system permissions fix to clamp down permissions in a small time window when copying files (CVE-2019-12450)
Top 8 AWS Developer Tools You Should Know About
The post Top 8 AWS Developer Tools You Should Know About appeared first on Plesk.
In the June 2019 survey we received responses from 1,333,421,275 sites across 236,991,999 unique domain names and 8,840,331 web-facing computers. This reflects gains of 6.76 million sites, 1.98 million domains, and 113,000 computers. nginx has further extended its lead in the hostnames metric, with 52.2 million additional sites pushing its total up to 440 million. […]
Debian: DSA-4464-1: thunderbird security update
Multiple security issues have been found in Thunderbird which may lead to the execution of arbitrary code if malformed email messages are read. For the stable distribution (stretch), these problems have been fixed in
do not install /usr/libexec/crio – conflicts with crio —- Resolves: #1715668 – CVE-2019-10152
Fedora 29: containernetworking-plugins Security Update
Resolves: #1715758 – CVE-2019-9946
https://lists.wikimedia.org/pipermail/mediawiki-announce/2019-June/000230.html
Two vulnerabilities were discovered in the ZNC IRC bouncer which could result in remote code execution (CVE-2019-12816) or denial of service via invalid encoding (CVE-2019-9917).
Fedora 29: php-phpmyadmin-sql-parser Security Update
Upstream announcement: Welcome to **phpMyAdmin 4.9.0.1**, a bugfix release that includes important security fixes. This release fixes two security vulnerabilities: * PMASA-2019-3 is an SQL injection flaw in the Designer feature * PMASA-2019-4 is a CSRF attack that’s possible through the ‘cookie’ login form Upgrading is highly recommended for all users. Using the ‘http’
Fedora 29: js-jquery-jstree Security Update
Update to [3.3.8](https://github.com/vakata/jstree/compare/3.3.5…3.3.8).
Update to 1.1.33 and fix CVE-2019-11068
Security fix for CVE-2019-11459.