Security fix for CVE-2015-20107
Comment
Archive for July, 2022
157 results.
USN-5479-1 was incomplete and didn’t properly fix one of the addressed issues.
Several security issues were fixed in NSS.
Ubuntu 5505-1: Linux kernel vulnerabilities
Jul07
on July 7, 2022
at 4:09 am
Posted In: Uncategorized
Several security issues were fixed in the Linux kernel.
Fix for CVE-2022-34903 (#2103242)
This is the June 2022 monthly update for .NET Core 3.1. It updates the SDK to version 3.1.420 and Runtime to 3.1.26 It includes fixes for CVE-2022-30184 Upstream release notes for .NET Core 3.1.26: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.26/3.1.26.md
OpenSSL could be made to crash or run programs when the c_rehash script is used.
With WordPress 6.1 already in the works, a lot of updates happened during June. Here’s a summary to catch up on the ones you may have missed. WordPress 6.1 is Slated for Release on October 25, 2022 Planning for WordPress 6.1 kicked off a few weeks ago with a proposed schedule and a call for […]
Debian: DSA-5178-1: intel-microcode security update
Jul06
on July 6, 2022
at 9:15 am
Posted In: Uncategorized
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities. CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21166
“` * Thu Jun 30 2022 Clemens Lang
Update to 91.11.0
Debian: DSA-5177-1: ldap-account-manager security update
Jul05
on July 5, 2022
at 2:52 pm
Posted In: Uncategorized
Arseniy Sharoglazov discovered multiple security issues in LDAP Account Manager (LAM), a web frontend for managing accounts in an LDAP directory, which could result in information disclosure or unauthenticated remote code execution.
RedHat: RHSA-2022-5498:01 Moderate: Satellite 6.11 Release
Jul05
on July 5, 2022
at 2:35 pm
Posted In: Uncategorized
An update is now available for Red Hat Satellite 6.11 2. Relevant releases/architectures: Red Hat Satellite 6.11 for RHEL 7 – noarch, x86_64 Red Hat Satellite 6.11 for RHEL 8 – noarch, x86_64
GnuPG could allow forged signatures.
OpenSSL could be made to expose sensitive information over the network.
Debian: DSA-5176-1: blender security update
Jul04
on July 4, 2022
at 3:56 pm
Posted In: Uncategorized
Multiple vulnerabilities have been discovered in various image parsers in Blender, a 3D modeller/ renderer, which may result in denial of service of the execution of arbitrary code if a malformed file is opened.
Debian: DSA-5175-1: thunderbird security update
Jul04
on July 4, 2022
at 3:52 pm
Posted In: Uncategorized
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribution (buster), these problems have been fixed
Several security issues were fixed in PHP.
RedHat: RHSA-2022-5491:01 Important: rh-php73-php security and bug fix
Jul04
on July 4, 2022
at 8:35 am
Posted In: Uncategorized
An update for rh-php73-php is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,
Django could be made to expose sensitive information if it received a specially crafted input.
Fedora 36: golang-github-intel-goresctrl 2022-fae3ecee19
Jul03
on July 3, 2022
at 10:19 pm
Posted In: Uncategorized
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). —- Update to 1.1.0 —- Disable package_note on arm too —- update to 0.44.1 rhbz#2007854 —- Add missing archive —- Update to 0.0.31 – Close: rhbz#1963535 —- Rebuilt for CVE-2022-1996,
Fedora 36: golang-github-spf13-cobra 2022-fae3ecee19
Jul03
on July 3, 2022
at 10:18 pm
Posted In: Uncategorized
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). —- Update to 1.1.0 —- Disable package_note on arm too —- update to 0.44.1 rhbz#2007854 —- Add missing archive —- Update to 0.0.31 – Close: rhbz#1963535 —- Rebuilt for CVE-2022-1996,
Fedora 36: golang-github-etcd-io-gofail 2022-fae3ecee19
Jul03
on July 3, 2022
at 10:08 pm
Posted In: Uncategorized
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). —- Update to 1.1.0 —- Disable package_note on arm too —- update to 0.44.1 rhbz#2007854 —- Add missing archive —- Update to 0.0.31 – Close: rhbz#1963535 —- Rebuilt for CVE-2022-1996,
Fedora 36: golang-k8s-pod-security-admission 2022-fae3ecee19
Jul03
on July 3, 2022
at 10:05 pm
Posted In: Uncategorized
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). —- Update to 1.1.0 —- Disable package_note on arm too —- update to 0.44.1 rhbz#2007854 —- Add missing archive —- Update to 0.0.31 – Close: rhbz#1963535 —- Rebuilt for CVE-2022-1996,
Debian: DSA-5174-1: gnupg2 security update
Jul03
on July 3, 2022
at 4:29 pm
Posted In: Uncategorized
Demi Marie Obenour discovered a flaw in GnuPG, allowing for signature spoofing via arbitrary injection into the status line. An attacker who controls the secret part of any signing-capable key or subkey in the victim’s keyring, can take advantage of this flaw to provide a
Debian: DSA-5173-1: linux security update
Jul03
on July 3, 2022
at 12:33 pm
Posted In: Uncategorized
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Ubuntu 5500-1: Linux kernel vulnerabilities
Jul01
on July 1, 2022
at 3:03 pm
Posted In: Uncategorized
Several security issues were fixed in the Linux kernel.
Ubuntu 5493-2: Linux kernel (HWE) vulnerability
Jul01
on July 1, 2022
at 2:34 pm
Posted In: Uncategorized
The system could be made to crash under certain conditions.
Ubuntu 5485-2: Linux kernel (OEM) vulnerabilities
Jul01
on July 1, 2022
at 2:34 pm
Posted In: Uncategorized
Several security issues were mitigated in the Linux kernel.
RedHat: RHSA-2022-5483:01 Moderate: Migration Toolkit for Containers (MTC)
Jul01
on July 1, 2022
at 8:35 am
Posted In: Uncategorized
The Migration Toolkit for Containers (MTC) 1.7.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from