CVE-2017-1000394

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins...

eBPF 4.9-stable Verifier Bug Backported

eBPF verifier bug backported to 4.9-stable Moving this one to a separate bug report... Commit https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=332270fdc8b6fba07d059a9ad44df9e1a2ad4529 adds functionality that permits performing addition on PTRTOSTACK stack pointer with...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2m-alt0.M80P.1

1.0.2m-alt0.M80P.1 built Nov. 7, 2017 Gleb Fotengauer-Malinovskiy in task 193204 Nov. 4, 2017 Gleb Fotengauer-Malinovskiy - Backported to p8 branch fixes CVE-2017-3735, CVE-2017-3736...

Security fix for the ALT Linux 8 package file version 4.26-alt13

4.26-alt13 built March 28, 2017 Dmitry V. Levin in task 180955 --- March 22, 2017 Dmitry V. Levin - Backported readelf fix by sem@; fixes: CVE-2014-9653. - Backported magic for lrzip, lz4, zstd, and snappy. - Backported -z support for lrzip, lz4, and zstd...

CentOS Update for qemu-guest-agent CESA-2017:0309 centos6

Check the version of qemu-guest-agent SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882666";...

Debian DLA-802-1 : openjdk-7 security update

openjdk-7 7u111-2.6.7-2deb7u1 backported the security fixes from 7u121. openjdk-7 has now been updated to the full 7u121 version, which includes extra bug fixes and other improvements. For Debian 7 'Wheezy', these problems have been fixed in version 7u121-2.6.8-1deb7u1. We recommend that you...

This update of rpm fixes several security issues

All of those fixes were already backported in Mageia but for : - Fix out-of-bounds read on signature checking of malformed package RhBug:1373107...

Moderate: Red Hat Security Advisory: ceph security update

An updated ceph package that fixes one security issue is now available for Red Hat Ceph Storage 1.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Moderate: Red Hat Security Advisory: nodejs010-node-gyp and nodejs010-nodejs-qs security and bug fix update

An update for nodejs010-node-gyp and nodejs010-nodejs-qs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 7 : kernel (RHSA-2016:1277)

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Security fix for the ALT Linux 9 package glibc version 6:2.23-alt3

June 9, 2016 Gleb Fotengauer-Malinovskiy 6:2.23-alt3 - Backported upstream fixes for sw bugs: 19648 19703 19861 20005 20010 20012 20111 20112 including fix for CVE-2016-4429. - Backported upstream implementation of group merging NSS...

Moderate: Red Hat Security Advisory: openshift security update

Updated openshift packages that fix one security issue are now available for Red Hat OpenShift Enterprise 3.1. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Security fix for the ALT Linux 9 package glibc version 6:2.23-alt2

May 10, 2016 Gleb Fotengauer-Malinovskiy 6:2.23-alt2 - Backported upstream fixes for sw bugs: 19679, 19758, 19759, 19762, 19791, 19792, 19822, 19879 including fixes for CVE-2016-1234, CVE-2016-3075, CVE-2016-3706...

OpenSSH < 7.0 Multiple Vulnerabilities

Binary data 9309.prm...

Important: Red Hat Security Advisory: openvswitch security update

Updated openvswitch packages that fix one security issue are now available for Red Hat OpenShift Enterprise 3.1. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RedHat Update for git RHSA-2016:0496-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : foomatic (CESA-2016:0491)

An updated foomatic package that fixes three security issues is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...

Important: Red Hat Security Advisory: git security update

Updated git packages that fix two security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...

RedHat Update for krb5 RHSA-2016:0493-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : tomcat6 (RHSA-2016:0492)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0492 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was found that the expression language resolver...