(Jul 14) This update fixes several vulnerabilities in Imagemagick, a graphical software suite. Various memory handling problems or incomplete input sanitising could result in denial of service or the execution of arbitrary code.
Archive for Other
(Jul 15) Security fix for CVE-2018-8009 —- Version update to 2.7.6. Fixes many open CVEs and bugs.
(Jul 15) Update to 4.9.7 security release. https://wordpress.org/news/2018/07/wordpress-4-9-7-security-and-maintenance- release/
(Jul 11) An update for ceph is now available for Red Hat Ceph Storage for Ubuntu 16.04. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
(Jul 11) An update for ceph is now available for Red Hat Ceph Storage 3.0 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
(Jul 13) add upstream patch to fix SQL injection
(Jul 13) Update to 1.4.6, Security fix for CVE-2018-0499, fix for notmuch (Email indexer)
(Jul 13) Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails.
(Jul 12) Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
(Jul 12) An update is now available for CloudForms Management Engine 5.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
(Jul 12) Resolves: #1598581, #1598583 – CVE-2018-10892
(Jul 12) Knot Resolver 2.4.0 (2018-07-03) changes ——————– – minimal libknot version is now 2.6.7 to pull in latest fixes (#366) Security ——– – fix a rare case of zones incorrectly dowgraded to insecure status (!576) New features ———— – TLS session resumption (RFC 5077), both server and client (!585, #105) (disabled when
(Jul 12) Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
(Jul 12) Red Hat JBoss Core Services Pack Apache Server 2.4.29 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score,
(Jul 11) Several vulnerabilities were discovered in CUPS, the Common UNIX Printing System. These issues have been identified with the following CVE ids: CVE-2017-15400
(Jul 11) Cloud technology and Linux-based cloud services are becoming increasingly popular due to the various benefits they offer in regard to security, efficiency, flexibility and convenience. …
(Jul 11) The 4.17.4 stable kernel update contains a number of important updates across the tree.
(Jul 11) libpng could be made to crash if it received a specially crafted file.
(Jul 11) Several security issues were fixed in libpng.
(Jul 11) An update for gnupg2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
(Jul 11) An update for gnupg2 is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
(Jul 10) Xapian-core could be made to execute arbitrary code if it received a specially crafted file.
(Jul 10) libjpeg-turbo could be made to crash or run programs as your login if it opened a specially crafted file.
(Jul 11) Updates for rh-dotnet20-dotnet, rh-dotnet21-dotnet, rh-dotnetcore10-dotnetcore, and rh-dotnetcore11-dotnetcore are now available for .NET Core on Red Hat Enterprise Linux. Red Hat Product Security has rated this update as having a security impact
(Jul 10) An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
(Jul 5) – New upstream v1.4.23 (#1589802,#1589620,#1589624) – Remove patches included in upstream release – Note that this includes the fix for [CVE-2018-12020] —- – doc Remove documentation for future option faked sys – build Don’t use dev srandom on OpenBSD – Do not use C99 feature – g10 Fix regexp sanitization – g10 Push compress filter only if compressed – gpg Sanitize diagnostic with the
(Jul 9) Orange Tsai discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker can take advantage of this flaw to read arbitrary files outside an application’s root directory via specially crafted requests, when the Sprockets server is
(Jul 5) Update to 0.26.4 (CVE-2018-11235)
(Jul 10) An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from
(Jul 10) An update for rh-git29-git is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,