Ike.ninja

Security fix for CVE-2019-1010238

Rebuilt with newer nghttp2 —- This update includes the latest upstream release of `mod_http2`, version **1.15.3**. Upstream changes include: * fixes Timeout vs. KeepAliveTimeout behaviour, see PR 63534. * Fixes stream cleanup when connection throttling is in place. * Counts stream resets by client on streams initiated by client as cause for connection throttling. * Header length

New version 3.0.3, Security fix for CVE-2019-13619

Update to 2.6.7

When someone is looking for a mechanic, it can be hard to know whom you can trust to do the work using the best practices available for a fair price. Finding a System Administrator often carries some similar challenges. Certifications are one way to show that a Sysadmin is up to date on the best way to secure data and administer servers. cPanel is now offering SafeAdmin certification as a way to appraise a technician’s existing set of skills, representing …

An update for pango is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Ghostscript could be made to access arbitrary files if it opened a specially crafted file.

USN-4110-1 introduced a regression in Dovecot.

Several security issues were fixed in the kernel.

An update for pango is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

Dovecot could be made to crash or execute arbitrary code if it received a specially crafted data.

Nick Roessler and Rafi Rubin discovered that the IMAP and ManageSieve protocol parsers in the Dovecot email server do not properly validate input (both pre- and post-login). A remote attacker can take advantage of this flaw to trigger out of bounds heap memory writes, leading to

– update to the latest upstream release (fixes CVE-2019-9511 and CVE-2019-9513)

Security fix for CVE-2019-13509

An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,