Security fix for the ALT Linux 8 package oniguruma version 6.9.4-alt1

6.9.4-alt1 built Dec. 4, 2019 Anton Farygin in task 242251 Dec. 2, 2019 Anton Farygin - 6.9.4 - fixes: CVE-2019-19012 Integer overflow related to reg-dmax in searchinrange CVE-2019-19203 heap-buffer-overflow in gb18030mbcenclen CVE-2019-19204 heap-buffer-overflow in fetchintervalquantifier...

Security fix for the ALT Linux 8 package freeipa version 4.3.3-alt20

4.3.3-alt20 built Nov. 28, 2019 Stanislav Levin in task 241733 Nov. 26, 2019 Stanislav Levin - Applied security patches fixes: CVE-2019-14867, CVE-2019-10195...

Oracle Linux 8 : SDL (ELSA-2019-3951)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3951 advisory. - Fix CVE-2019-13616 a heap buffer over-read in BlitNtoN bug 1747237 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Security fix for the ALT Linux 8 package redis version 3.0.7-alt2

3.0.7-alt2 built Nov. 27, 2019 Grigory Ustinov in task 241717 Nov. 26, 2019 Grigory Ustinov - Fixed hyperloglog corruption Fixes: CVE-2019-10192 Closes: 37533...

Security fix for the ALT Linux 8 package clamav version 0.101.5-alt1

Nov. 26, 2019 Sergey Y. Afonin 0.101.5-alt1 - 0.101.5 CVE-2019-15961 - fixed tests for libcheck 0.13.0 clamav-0.101.5-libcheck-0.13.0.patch - updated License tag to SPDX syntax needs revision of exceptions - removed rpm-build-licenses from BuildRequires...

CVE-2019-10214

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launc...

CVE-2019-10214

The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Container Platform, does not enforce TLS connections to the container registry authorization service. An attacker could use this vulnerability to launc...

Oracle Linux 8 : php:7.3 (ELSA-2019-3736)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3736 advisory. php 7.3.5-5 - fix underflow in envpathinfo in fpmmain.c CVE-2019-11043 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : php:7.2 (ELSA-2019-3735)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3735 advisory. php 7.2.11-4 - fix underflow in envpathinfo in fpmmain.c CVE-2019-11043 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 8 : kernel (ELSA-2019-3871)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3871 advisory. 4.18.0-147.0.31.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 8 : kernel (ELSA-2019-3832)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3832 advisory. - drm drm/i915: Lower RM timeout to avoid DSI hard hangs Dave Airlie 1766056 1756805 CVE-2019-0154 - drm drm/i915/gen8+: Add RC6 CTX corruption WA Dave...

Oracle Linux 8 : ghostscript (ELSA-2019-3890)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3890 advisory. 9.25-5.1 - 1769342 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 8 : sudo (ELSA-2019-3694)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-3694 advisory. 1.8.25p1-8 - RHEL-8.1.0 - fixed CVE-2019-14287 Resolves: rhbz1760696 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.5.14-alt0.M80P.1

2.5.14-alt0.M80P.1 built Nov. 22, 2019 Sergey Y. Afonin in task 240906 Nov. 17, 2019 Sergey Y. Afonin - 2.5.14 fixes: CVE-2019-18928 - logging of reached limits the patch from the https://github.com/cyrusimap/cyrus-imapd/issues/2913...

Security fix for the ALT Linux 8 package 389-ds-base version 1.3.9.1-alt1.gitb6ba77876

1.3.9.1-alt1.gitb6ba77876 built Nov. 15, 2019 Stanislav Levin in task 240814 Nov. 14, 2019 Stanislav Levin - 1.3.9.0 - 1.3.9.1. - Applied upstream fixes fixes: CVE-2019-14824...

edk2 security, bug fix, and enhancement update

20190308git89910a39dcfd-6.el8 - edk2-ArmVirtPkg-silence-DEBUGVERBOSE-masking-0x00400000-.patch bz1714446 - edk2-OvmfPkg-QemuRamfbDxe-Do-not-report-DXE-failure-on-Aa.patch bz1714446 - edk2-ArmPkg-DebugPeCoffExtraActionLib-debugger-commands-a.patch bz1714446 - Resolves: bz1714446 edk2-aarch64 silen...

libcacard bug fix and enhancement update

An update is available for libcacard. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libcacard packages contain the Common Access Card CAC emulation library...

php:7.3 security update

An update is available for libzip, php-pear, php-pecl-apcu, php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PHP is an HTML-embedded scripting...

php:7.2 security update

An update is available for libzip, php-pear, php-pecl-apcu, php-pecl-zip. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PHP is an HTML-embedded scripting...

RHEL 8 : python3 (RHSA-2019:3520)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3520 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...