SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2019:3091-1)

This update for ucode-intel to version fixes the following issues : Updated to 20191115 official security release bsc1157004 and bsc1155988 Includes security fixes for : - CVE-2019-11135: Added feature allowing to disable TSX RTM bsc1139073 - CVE-2019-11139: A CPU microcode only fix for Voltage...

OPENSUSE-SU-2019:2607-1 Recommended update for openafs

This update for openafs fixes the following issues: Update to security-release 1.8.5, adresses: OPENAFS-SA-2019-001: Skip server OUT args on error OPENAFS-SA-2019-002: Zero all server RPC args OPENAFS-SA-2019-003: ubik: Avoid unlocked ubikcurrentTrans deref update to official version 1.8.4 suppor...

RHEL 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 7 (Important) (RHSA-2019:3933)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3933 advisory. This release adds the new Apache HTTP Server 2.4.37 packages that are part of the JBoss Core Services offering. This release serves as a...

Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release

Red Hat JBoss Core Services Pack Apache Server 2.4.37 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.2 security release

Red Hat JBoss Web Server 5.2.0 zip release for RHEL 6, RHEL 7, RHEL 8 and Microsoft Windows is available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SUSE-SU-2019:2987-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Updated to 20191112 official security release bsc1155988 - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM bsc1139073 - CVE-2019-11139: A CPU microcode only fix for Voltage modulation issues bsc1141...

openSUSE Security Update : ucode-intel (openSUSE-2019-2509)

This update for ucode-intel fixes the following issues : - Updated to 20191112 security release bsc1155988 - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile -...

Security update for ucode-intel (important)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2019:2509-1 Rating: important References: 1139073 1141035 1155988 Cross-References: CVE-2019-11135 CVE-2019-11139 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and has one erra...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:2957-1)

This update for ucode-intel fixes the following issues : Updated to 20191112 security release bsc1155988 - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old-New - ---- new platforms ---------------------------------------- - CML-U62 A0 6-a6-0/80 000000c6 Core Gen10 Mobile - CNL...

FreeBSD : php -- env_path_info underflow in fpm_main.c can lead to RCE (6a7c2ab0-00dd-11ea-83ce-705a0f828759)

The PHP project reports : The PHP development team announces the immediate availability of PHP 7.3.11. This is a security release which also contains several bug fixes. The PHP development team announces the immediate availability of PHP 7.2.24. This is a security release which also contains...

Fedora 30 : varnish (2019-a2110fa094)

New upstream release. A security release, fixing VSV00004. References : - Changelog: https://github.com/varnishcache/varnish-cache/blob/6.3/d oc/changes.rstvarnish-cache-631-2019-10-21 - VSV00004: https://varnish-cache.org/security/VSV00004.html Note that Tenable Network Security has extracted th...

Nokogiri gem, via libxslt, is affected by multiple vulnerabilities

Nokogiri v1.10.5 has been released. This is a security release. It addresses three CVEs in upstream libxml2, for which details are below. If you're using your distro's system libraries, rather than Nokogiri's vendored libraries, there's no security need to upgrade at this time, though you may wan...

Fedora 31 : varnish (2019-20412f5e4c)

New upstream release. A security release, fixing VSV00004. References : - Changelog: https://github.com/varnishcache/varnish-cache/blob/6.3/d oc/changes.rstvarnish-cache-631-2019-10-21 - VSV00004: https://varnish-cache.org/security/VSV00004.html Note that Tenable Network Security has extracted th...

Samba AD DC check password script does not receive

Description Since Samba Version 4.5.0 a Samba AD DC can use a custom command to verify the password complexity. The command can be specified with the "check password script" smb.conf parameter. This command is called when Samba handles a user password change or a new user password is set. The...

User with "get changes" permission can

Description Since Samba 4.0.0 Samba has implemented, in the AD DC, the "dirsync" LDAP control specified in MS-ADTS "3.1.1.3.4.1.3 LDAPSERVERDIRSYNCOID". However, when combined with the ranged results feature specified in MS-ADTS "3.1.1.3.1.3.3 Range Retrieval of Attribute Values" a NULL pointer i...

Fedora 31 : wordpress (2019-f21ad78845)

WordPress 5.2.4 Security Release WordPress versions 5.2.3 and earlier are affected by these bugs, which are fixed in version 5.2.4. Security Updates - Props to Evan Ricafort for finding an issue where stored XSS cross-site scripting could be added via the Customizer. - Props to J.D. Grimes who...

Fedora 29 : wordpress (2019-e70f89fa34)

WordPress 5.2.4 Security Release WordPress versions 5.2.3 and earlier are affected by these bugs, which are fixed in version 5.2.4. Security Updates - Props to Evan Ricafort for finding an issue where stored XSS cross-site scripting could be added via the Customizer. - Props to J.D. Grimes who...

WordPress Multiple Vulnerabilities (Oct 2019) - Linux

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

php -- env_path_info underflow in fpm_main.c can lead to RCE

The PHP project reports: The PHP development team announces the immediate availability of PHP 7.3.11. This is a security release which also contains several bug fixes. The PHP development team announces the immediate availability of PHP 7.2.24. This is a security release which also contains sever...

Fedora 31 : glpi (2019-311441d430)

GLPI version 9.4.4 This is a security release, upgrading is highly recommended Non exhaustive list of changes : - security Prevent account takeover vulnerability , - security Prevent execution of XSS on rich text, - fix cache key lenght issues, - fix user picture removal at login, - several fixes...