Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2021-23192)

Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method that could allow a remote attacker to bypass security restrictions and gain unauthorized access to files. Vulnerability Details CVEID: CVE-2021-23192 DESCRIPTION: Samba could allow a remote attacker to bypass...

kexec-tools security, bug fix, and enhancement update

2.0.20-57.0.3 - Merge 8.4 extra patches for SB boot environment Orabug: 33512440 2.0.20-57.0.2 - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 Orabug: 33471981 2.0.20-57.0.1 - makedumpfile: Add support for newer kernels up to v5.12 Orabug: 33250117 2.0.20-57 - kdumpctl: enable secure boot on...

Security fix for the ALT Linux 10 package firefox-esr version 78.9.0-alt1

March 23, 2021 Andrey Cherepanov 78.9.0-alt1 - New version 78.9.0. - Security fixes: + CVE-2021-23981 Texture upload into an unbound backing buffer resulted in an out-of-bound read + CVE-2021-23982 Internal network hosts could have been probed by a malicious webpage + CVE-2021-23984 Malicious...

Security Bulletin: Information disclosure in WebSphere Application Server Liberty bundled with IBM Operations Analytics - Log Analysis (CVE-2019-4305)

Summary Cookie created without secure flag in WAS Liberty Vulnerability Details CVEID: CVE-2019-4305 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie. IBM X-Force ID: 160951. CVSS Base...

SUSE SLED12 / SLES12 Security Update : ncurses (SUSE-SU-2019:3094-1)

This update for ncurses fixes the following issues : Security issue fixed : CVE-2018-10754: Fixed a denial of service caused by a NULL pointer Dereference in the ncparseentry bsc1131830. CVE-2019-17594: Fixed a heap-based buffer over-read in ncfindentry function in tinfo/comphash.c bsc1154036...

Important: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

ALBA-2019:0986 rhn-tools:1.0 bug fix update

AlmaLinux Network Tools provide programs and libraries that allow your system to use provisioning, monitoring, and configuration management capabilities provided by AlmaLinux Network and AlmaLinux Network Satellite. The spacewalk-remote-utils package contains the spacewalk-create-channel utility...

PT-2019-1001

Name of the Vulnerable Software and Affected Versions: AlmaLinux Network Tools affected versions not specified Description: The issue is related to the provisioning of PPC64LE AlmaLinux8 hosts. A problem occurs with the grubby-bls utility, where the option "--yaboot" has been deprecated. This...

openssl security update

1.0.2k-16.0.1.el76.1 - Bump release for rebuild. 1.0.2k-16.1 - use SHA-256 in FIPS RSA pairwise key check - fix CVE-2018-5407 - EC signature local timing side-channel key extraction 1.0.2k-16 - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA - fix incorrect error message on...

Security fix for the ALT Linux 10 package golang version 1.11.5-alt1

Jan. 24, 2019 Alexey Shabalin 1.11.5-alt1 - 1.11.5 - fixed CPU DoS vulnerability affecting P-521 and P-384 Fixes: CVE-2019-6486 - add ppc64le to goarches...

openSUSE Security Update : go1.10 (openSUSE-2018-1593)

This update for go1.10 fixes the following issues : Security vulnerabilities fixed : - CVE-2018-16873 bsc1118897: cmd/go: remote command execution during 'go get -u'. - CVE-2018-16874 bsc1118898: cmd/go: directory traversal in 'go get' via curly braces in import paths - CVE-2018-16875 bsc1118899:...

openssl security, bug fix, and enhancement update

1.0.2k-16.0.1 - sha256 is used for the RSA pairwise consistency test instead of sha1 1.0.2k-16 - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA - fix incorrect error message on FIPS DSA parameter generation 1603597 1.0.2k-14 - ppc64le is not multilib architecture 1585004...

Fedora 27 : botan (2017-523f6a613d)

Version 1.10.17, 2017-10-02 - Address a side channel affecting modular exponentiation. An attacker capable of a local or cross-VM cache analysis attack may be able to recover bits of secret exponents as used in RSA, DH, etc. CVE-2017-14737 - Workaround a miscompilation bug in GCC 7 on x86-32...

SUSE-SU-2017:3225-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000405: A bug in the THP CoW support could be used by local attackers to corrupt memory of other processes and cause them to crash bnc1069496. -...

openSUSE Security Update : gcc48 (openSUSE-2017-1223)

This update for gcc48 fixes the following issues : Security issues fixed : - A new option -fstack-clash-protection is now offered, which mitigates the stack clash type of attacks. bnc1039513 Future maintenance releases of packages will be built with this option. - CVE-2017-11671: Fixed...

BSA-2017-431

Security Advisory ID : BSA-2017-431 Component : Kernel Revision : 3.0: Interim A stack buffer overflow flaw was found in the way the Bluetooth subsystem of the Linux kernel processed pending L2CAP configuration responses from a client. On systems with the stack protection feature enabled in the...

SUSE SLED12 / SLES12 Security Update : gcc48 (SUSE-SU-2017:2526-1)

This update for gcc48 fixes the following issues: Security issues fixed : - A new option -fstack-clash-protection is now offered, which mitigates the stack clash type of attacks. bnc1039513 Future maintenance releases of packages will be built with this option. - CVE-2017-11671: Fixed rdrand/rdse...

kernel: stack buffer overflow in the native Bluetooth stack

A stack buffer overflow flaw was found in the way the Bluetooth subsystem of the Linux kernel processed pending L2CAP configuration responses from a client. On systems with the stack protection feature enabled in the kernel CONFIGCCSTACKPROTECTOR=y, which is enabled on all architectures other tha...

SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2017:0367-1)

This update for ceph fixes the following issues : - CVE-2016-5009: moncommand with empty prefix could crash monitor bsc987144 - Invalid commandd in SOC7 with ceph bsc1008894 - Performance fix was missing in SES4 bsc1005179 - ceph build problems on ppc64le bsc982141 - ceph make build unit test...

openSUSE Security Update : ceph (openSUSE-2016-1500)

ceph was updated to version 10.2.4 and fixes the following issues : - A moncommand with empty prefix could crash the monitor boo987144, CVE-2016-5009 - Detect crc32 extension support from assembler on AArch64 boo999688 - Failing file operations on kernel based cephfs mount point could leave...