Security fix for the ALT Linux 8 package php7 version 7.2.26-alt1

7.2.26-alt1 built Dec. 20, 2019 Anton Farygin in task 243177 Dec. 17, 2019 Anton Farygin - 7.2.26 Fixes: CVE-2019-11046, CVE-2019-11047, CVE-2019-11050, CVE-2019-11045...

Oracle Linux 8 : grub2 (ELSA-2019-4869)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4869 advisory. 2.02-78.0.2 - grub-set-bootflag: fix grubenv update method, fix CVE-2019-14865 Orabug: 30607067 Tenable has extracted the preceding description block directly...

RHEL 8 : container-tools:1.0 (RHSA-2019:4273)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4273 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: HTTP/2:...

Security fix for the ALT Linux 8 package samba version 4.9.17-alt1

4.9.17-alt1 built Dec. 18, 2019 Evgeny Sinelnikov in task 242978 Dec. 13, 2019 Evgeny Sinelnikov - Update to last security winter release - Security fixes: + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server + CVE-2019-14870: DelegationNotAllowed not being...

Security fix for the ALT Linux 8 package samba-DC version 4.9.17-alt1

4.9.17-alt1 built Dec. 18, 2019 Evgeny Sinelnikov in task 242978 Dec. 13, 2019 Evgeny Sinelnikov - Update to last security winter release - Security fixes: + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server + CVE-2019-14870: DelegationNotAllowed not being...

Important: Red Hat Bug Fix Advisory: idm:DL1 bug fix update

An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8. Bug Fixes: IPA upgrade fails for latest ipa package when adtrust is installed BZ1773516...

Moderate: Red Hat Enhancement Advisory: webkit2gtk3 enhancement update

An updated webkit2gtk3 package that adds one enhancement is now available for Red Hat Enterprise Linux 8. This update adds the following enhancement: Update WebKitGTK to 2.24.4 BZ1755824. Users of webkit2gtk3 are advised to upgrade to this updated package, which adds this enhancement...

12 bug fix update

An update is available for nodejs-nodemon, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The following packages have been upgraded to a later...

rhel bug fix update

An update is available for libiscsi, netcf, sgabios. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: Rocky Linux8.1 Snapshot3 - Passthrough PCI card...

container-tools:1.0 security update

An update is available for fuse-overlayfs, oci-umount, runc, skopeo, oci-systemd-hook, containernetworking-plugins. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...

container-tools:rhel8 security and bug fix update

An update is available for oci-umount, oci-systemd-hook. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The container-tools module contains tools for working wi...

DL1 bug fix update

An update is available for python-jwcrypto, custodia, python-qrcode, python-yubico, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: IPA upgrade...

0.92.3 bug fix update

An update is available for python-scour. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: New inkscape rpm is actually older than current BZ1773655...

Important: Red Hat Security Advisory: Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container

Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container Added a command to generate a new SECRETKEY and rekey the database Removed the guest user from the optionally-configured RabbitMQ admin interface CVE-2019-19340 Fixed slow queries for /api/v2/instances and /api/v2/instancegroups when smart inventori...

Security fix for the ALT Linux 8 package git version 2.24.1-alt1

2.24.1-alt1 built Dec. 12, 2019 Dmitry V. Levin in task 242633 Dec. 8, 2019 Dmitry V. Levin - 2.24.0 - 2.24.1 fixes: CVE-2019-1348, CVE-2019-1387, CVE-2019-19604; this update also addresses a few Windows and/or NTFS issues fixes: CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352,...

Oracle Linux 8 : thunderbird (ELSA-2019-4195)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4195 advisory. 68.3.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.3.0-2 - Update to 68.3.0 build2 68.2.0-2 - Adde...

Oracle Linux 8 : nss (ELSA-2019-4114)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4114 advisory. 3.44.0-9 - Fix out-of-bounds write in NSCEncryptUpdate 1775912 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : firefox (ELSA-2019-4111)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4111 advisory. 68.3.0-1.0.1 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat...

Openssl CVE-2019-1551 Integer Overflow Vulnerability

Description Openssl is prone to an integer-overflow vulnerability. An attacker can exploit this issue to perform unauthorized actions; this may aid in launching further attacks. OpenSSL versions 1.1.1 and 1.0.2 are vulnerable. Technologies Affected OpenSSL Project OpenSSL 1.0.2 OpenSSL Project...

CESNET libyang Multiple Stack Based Buffer Overflow Vulnerabilities

Description CESNET libyang is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. An attacker can exploit these issues to execute arbitrary code in the context of a...