CVE-2017-2623

It was discovered that rpm-ostree and rpm-ostree-client fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is...

Moderate: Red Hat Security Advisory: rpm-ostree and rpm-ostree-client security, bug fix, and enhancement update

An update for rpm-ostree and rpm-ostree-client is now available for Red Hat Enterprise Linux Atomic Host 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

rpm-ostree-client: fails to check gpg package signatures when layering

It was discovered that rpm-ostree and rpm-ostree-client fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is...

Threat Outbreak Alert RuleID28095: Email Messages Distributing Malicious Software on March 2, 2017

Medium Alert ID: 52855 First Published: 2017 March 2 19:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28095 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28101: Email Messages Distributing Malicious Software on March 2, 2017

Medium Alert ID: 52851 First Published: 2017 March 2 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28101 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28093: Email Messages Distributing Malicious Software on March 2, 2017

Medium Alert ID: 52850 First Published: 2017 March 2 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28093 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28090: Email Messages Distributing Malicious Software on March 1, 2017

Medium Alert ID: 52832 First Published: 2017 March 1 19:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28090 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID28079: Email Messages Distributing Malicious Software on February 28, 2017

Medium Alert ID: 52796 First Published: 2017 February 28 14:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28079 may contain the following files: Name |...

Threat Outbreak Alert RuleID28071: Email Messages Distributing Malicious Software on February 28, 2017

Medium Alert ID: 52791 First Published: 2017 February 28 13:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28071 may contain the following files: Name |...

Threat Outbreak Alert RuleID28050: Email Messages Distributing Malicious Software on February 27, 2017

Medium Alert ID: 52785 First Published: 2017 February 28 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28050 may contain the following files: Name |...

Threat Outbreak Alert RuleID28059: Email Messages Distributing Malicious Software on February 27, 2017

Medium Alert ID: 52780 First Published: 2017 February 28 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28059 may contain the following files: Name |...

Threat Outbreak Alert RuleID28044: Email Messages Distributing Malicious Software on February 27, 2017

Medium Alert ID: 52778 First Published: 2017 February 28 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28044 may contain the following files: Name |...

Threat Outbreak Alert RuleID27955: Email Messages Distributing Malicious Software on February 27, 2017

Medium Alert ID: 52775 First Published: 2017 February 28 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27955 may contain the following files: Name |...

Threat Outbreak Alert RuleID28070: Email Messages Distributing Malicious Software on February 28, 2017

Medium Alert ID: 52790 First Published: 2017 February 28 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28070 may contain the following files: Name |...

OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)

It was discovered that the Libraries component of OpenJDK accepted ECDSA signatures using non-canonical DER encoding. This could cause a Java application to accept signature in an incorrect format not accepted by other cryptographic tools...

OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)

It was discovered that the Libraries component of OpenJDK accepted ECDSA signatures using non-canonical DER encoding. This could cause a Java application to accept signature in an incorrect format not accepted by other cryptographic tools...

Threat Outbreak Alert RuleID27996: Email Messages Distributing Malicious Software on February 23, 2017

Medium Alert ID: 52743 First Published: 2017 February 27 21:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27996 may contain the following files: Name |...

Threat Outbreak Alert RuleID27992: Email Messages Distributing Malicious Software on February 23, 2017

Medium Alert ID: 52741 First Published: 2017 February 27 21:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27992 may contain the following files: Name |...

Threat Outbreak Alert RuleID28001: Email Messages Distributing Malicious Software on February 23, 2017

Medium Alert ID: 52749 First Published: 2017 February 27 21:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28001 may contain the following files: Name |...

Threat Outbreak Alert RuleID28019: Email Messages Distributing Malicious Software on February 24, 2017

Medium Alert ID: 52758 First Published: 2017 February 27 17:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28019 may contain the following files: Name |...