Security fix for the ALT Linux 8 package samba-DC version 4.9.17-alt1

4.9.17-alt1 built Dec. 18, 2019 Evgeny Sinelnikov in task 242978 Dec. 13, 2019 Evgeny Sinelnikov - Update to last security winter release - Security fixes: + CVE-2019-14861: Samba AD DC zone-named record Denial of Service in DNS management server + CVE-2019-14870: DelegationNotAllowed not being...

RHEL 8 : container-tools:1.0 (RHSA-2019:4273)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4273 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: HTTP/2:...

Important: Red Hat Bug Fix Advisory: idm:DL1 bug fix update

An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8. Bug Fixes: IPA upgrade fails for latest ipa package when adtrust is installed BZ1773516...

Moderate: Red Hat Enhancement Advisory: webkit2gtk3 enhancement update

An updated webkit2gtk3 package that adds one enhancement is now available for Red Hat Enterprise Linux 8. This update adds the following enhancement: Update WebKitGTK to 2.24.4 BZ1755824. Users of webkit2gtk3 are advised to upgrade to this updated package, which adds this enhancement...

12 bug fix update

An update is available for nodejs-nodemon, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The following packages have been upgraded to a later...

rhel bug fix update

An update is available for libiscsi, netcf, sgabios. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: Rocky Linux8.1 Snapshot3 - Passthrough PCI card...

container-tools:1.0 security update

An update is available for fuse-overlayfs, oci-umount, runc, skopeo, oci-systemd-hook, containernetworking-plugins. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...

container-tools:rhel8 security and bug fix update

An update is available for oci-umount, oci-systemd-hook. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The container-tools module contains tools for working wi...

DL1 bug fix update

An update is available for python-jwcrypto, custodia, python-qrcode, python-yubico, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: IPA upgrade...

0.92.3 bug fix update

An update is available for python-scour. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Bug Fixes: New inkscape rpm is actually older than current BZ1773655...

Important: Red Hat Security Advisory: Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container

Red Hat Ansible Tower 3.6.2-1 - RHEL7 Container Added a command to generate a new SECRETKEY and rekey the database Removed the guest user from the optionally-configured RabbitMQ admin interface CVE-2019-19340 Fixed slow queries for /api/v2/instances and /api/v2/instancegroups when smart inventori...

Oracle Linux 8 : thunderbird (ELSA-2019-4195)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4195 advisory. 68.3.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 68.3.0-2 - Update to 68.3.0 build2 68.2.0-2 - Adde...

Security fix for the ALT Linux 8 package git version 2.24.1-alt1

2.24.1-alt1 built Dec. 12, 2019 Dmitry V. Levin in task 242633 Dec. 8, 2019 Dmitry V. Levin - 2.24.0 - 2.24.1 fixes: CVE-2019-1348, CVE-2019-1387, CVE-2019-19604; this update also addresses a few Windows and/or NTFS issues fixes: CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, CVE-2019-1352,...

Oracle Linux 8 : nss (ELSA-2019-4114)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4114 advisory. 3.44.0-9 - Fix out-of-bounds write in NSCEncryptUpdate 1775912 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 8 : firefox (ELSA-2019-4111)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4111 advisory. 68.3.0-1.0.1 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat...

Openssl CVE-2019-1551 Integer Overflow Vulnerability

Description Openssl is prone to an integer-overflow vulnerability. An attacker can exploit this issue to perform unauthorized actions; this may aid in launching further attacks. OpenSSL versions 1.1.1 and 1.0.2 are vulnerable. Technologies Affected OpenSSL Project OpenSSL 1.0.2 OpenSSL Project...

CESNET libyang Multiple Stack Based Buffer Overflow Vulnerabilities

Description CESNET libyang is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. An attacker can exploit these issues to execute arbitrary code in the context of a...

Security fix for the ALT Linux 8 package oniguruma version 6.9.4-alt1

6.9.4-alt1 built Dec. 4, 2019 Anton Farygin in task 242251 Dec. 2, 2019 Anton Farygin - 6.9.4 - fixes: CVE-2019-19012 Integer overflow related to reg-dmax in searchinrange CVE-2019-19203 heap-buffer-overflow in gb18030mbcenclen CVE-2019-19204 heap-buffer-overflow in fetchintervalquantifier...

Security fix for the ALT Linux 8 package freeipa version 4.3.3-alt20

4.3.3-alt20 built Nov. 28, 2019 Stanislav Levin in task 241733 Nov. 26, 2019 Stanislav Levin - Applied security patches fixes: CVE-2019-14867, CVE-2019-10195...

Security fix for the ALT Linux 8 package redis version 3.0.7-alt2

3.0.7-alt2 built Nov. 27, 2019 Grigory Ustinov in task 241717 Nov. 26, 2019 Grigory Ustinov - Fixed hyperloglog corruption Fixes: CVE-2019-10192 Closes: 37533...