Product update: Virtuozzo 7.0 Update 7 Hotfix 1 (7.0.7-445)

The Hotfix 1 for Virtuozzo 7.0 Update 7 provides stability and usability bug fixes. Vulnerability id: PSBM-82558 Container migration could sometimes fail due to a CRIU issue. Vulnerability id: PSBM-82711 'prlctl qemu-update' could fail due to unnamed dirty bitmaps. This could result in backups no...

Important: Red Hat Enhancement Advisory: microcode_ctl bug fix and enhancement update

An update for microcodectl is now available for Red Hat Enterprise Linux 7. The microcodectl packages provide microcode updates for Intel and AMD processors. For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section...

Important: Red Hat Enhancement Advisory: linux-firmware bug fix and enhancement update

An update for linux-firmware is now available for Red Hat Enterprise Linux 7. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes link...

UPDATE: OWASP Dependency-Check 3.1.2

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP Dependency-Check 3.1.2! Most importantly NVD urls were...

MGASA-2018-0195 Updated ntp packages fix security vulnerabilities

This release addresses five security issues in ntpd for Mageia 6: LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU961909: Sybil vulnerability: ephemeral association attack While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. Reported by Matt Van Gundy of...

SUSE SLED12 / SLES12 Security Update : postgresql94 (SUSE-SU-2018:0876-1)

This update for postgresql94 fixes the following issues: Security issues fixed : - CVE-2018-1058: Fixed uncontrolled search path element in pgdump and other client applications bsc1081925. Bug fixes : - See release notes for details : - https://www.postgresql.org/docs/9.4/static/release-9-4-17.ht...

SUSE-SU-2018:0876-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: Security issues fixed: - CVE-2018-1058: Fixed uncontrolled search path element in pgdump and other client applications bsc1081925. Bug fixes: - See release notes for details: https://www.postgresql.org/docs/9.4/static/release-9-4-17.html...

UPDATE: Sysdig Falco v0.9.0

PenTestIT RSS Feed My last post from a almost nice months ago, was about an open source behavorial activity monitor which has container support. It was updated and we now have update – the Sysdig Falco v0.9.0! This release fixes a couple of driver and OSX build incompatibility issues. What is...

SUSE-SU-2018:0865-1 Security update for docker-distribution

This update for docker-distribution fixes the following issues: Security issues fixed: - CVE-2017-11468: Fixed a denial of service memory consumption via the manifest endpoint bsc1049850. Bug fixes: - bsc1083474: docker-distirbution-registry overwrites configuration file with update. - bsc1033172...

Fedora 26 : 3:mariadb (2018-02c0e3725e)

MariaDB 10.1.32 Release notes : https://mariadb.com/kb/en/library/mariadb-10131-release-notes/ https://mariadb.com/kb/en/library/mariadb-10132-release-notes/ Bugs solved : Jemalloc issue on aarch64 solved in jemalloc package https://bugzilla.redhat.com/showbug.cgi?id=1545539 CVEs fixed :...

openSUSE Security Update : cacti / cacti-spine (openSUSE-2018-321)

This update for cacti, cacti-spine fixes the following issues Security issues fixed : - bsc1086792: Path-Based Cross-Site Scripting XSS issues This update also contains a number of upstream bug fixes and improvements in the 1.1.37 version. The minimum required php version is 5.4, in openSUSE Leap...

SUSE-SU-2018:0848-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-1068: Fixed flaw in the implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range ...

SUSE-SU-2018:0841-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of...

Moderate: Red Hat Bug Fix Advisory: Red Hat OpenShift Container Platform 3.9 RPM Release Advisory

Red Hat OpenShift Container Platform 3.9, which fixes several bugs and includes various enhancements, is now available. Red Hat OpenShift Container Platform is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. The OpenShift...

OPENSUSE-SU-2018:0819-1 Security update for Mozilla Thunderbird

This update for Mozilla Thunderbird to version 52.7 fixes multiple issues. The following bugs were fixed: - Searching message bodies of messages in local folders, including filter and quick filter operations, did not find content in message attachments - Better error handling for Yahoo accounts T...

OPENSUSE-SU-2018:0818-1 Security update for Mozilla Thunderbird

This update for Mozilla Thunderbird to version 52.7 fixes multiple issues. The following bugs were fixed: - Searching message bodies of messages in local folders, including filter and quick filter operations, did not find content in message attachments - Better error handling for Yahoo accounts T...

SUSE-SU-2018:0808-1 Security update for ntp

This update for ntp fixes the following issues: Security issues fixed: - CVE-2016-1549: Significant additional protections against CVE-2016-1549 that was fixed in ntp-4.2.8p7 bsc1082210. - CVE-2018-7170: Ephemeral association time spoofing additional protection bsc1083424. - CVE-2018-7182: Buffer...

SUSE-SU-2018:0785-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.120 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the v4l2 video driver was fixed. bnc1072865. - CVE-2017-15951: The KEYS subsystem did not...

SUSE SLES11 Security Update : postgresql94 (SUSE-SU-2018:0755-1)

This update for postgresql94 fixes the following issues: Security issues fixed : - CVE-2018-1058: Fixed uncontrolled search path element in pgdump and other client applications bsc1081925. Bug fixes : - See release notes for details : - https://www.postgresql.org/docs/9.4/static/release-9-4-17.ht...

SUSE-SU-2018:0755-1 Security update for postgresql94

This update for postgresql94 fixes the following issues: Security issues fixed: - CVE-2018-1058: Fixed uncontrolled search path element in pgdump and other client applications bsc1081925. Bug fixes: - See release notes for details: https://www.postgresql.org/docs/9.4/static/release-9-4-17.html...