openSUSE Security Update : systemd (openSUSE-2019-909)

This update for systemd fixes the following issues : Security issues fixed : - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in...

openSUSE Security Update : java-11-openjdk (openSUSE-2019-818)

This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.1+13 Oracle October 2018 CPU Security fixes : - S8202936, CVE-2018-3183, bsc1112148: Improve script engine support - S8199226, CVE-2018-3169, bsc1112146: Improve field accesses - S8199177, CVE-2018-3149,...

openSUSE Security Update : Mozilla Firefox (openSUSE-2019-855)

This update for Mozilla Firefox to version 60.3.0esr fixes security issues and stability bugs. The following security issues were fixed MFSA 2018-27, boo1112852 : - CVE-2018-12392: Crash with nested event loops - CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript ...

March 26, 2019—KB4490481 (OS Build 17763.402)

None None...

OPENSUSE-SU-2019:0325-1 Security update for freerdp

This update for freerdp to version 2.0.0rc4 fixes the following issues: Security issues fixed: - CVE-2018-0886: Fix a remote code execution vulnerability CredSSP bsc1085416, bsc1087240, bsc1104918 - CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication...

OPENSUSE-SU-2019:0048-1 Security update for irssi

This update for irssi fixes the following issues: - CVE-2019-5882: Use after free when hidden lines were expired from the scroll buffer boo1121396 This update to the 1.1.2 version also fixes a number of stability issues and bugs...

Product update: Virtuozzo 7.0 Update 9 Hotfix 2 (7.0.9-547)

The Hotfix 2 for for Virtuozzo 7.0.9 provides stability and usability bug fixes. Vulnerability id: PSBM-91577 Migration of a container from a Virtuozzo 7 Update 8 host to a Virtuozzo 7 Update 9 host initiated from Virtuozzo Automator could lead to a crash of vzmigrate. Vulnerability id: PSBM-9186...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 7 (VA MN: 7.0.2-617, VA Agent: 7.0.2-329)

The hotfix for Virtuozzo Automator 7.0.2 provides stability fixes. Vulnerability id: PVA-36493, PVA-37325 Backups created with CLI were not listed in the web-based control panel. Vulnerability id: PVA-37287 Fixed behavior when alerts could be triggered before set limit was exceeded. Vulnerability...

openSUSE Security Update : freerdp (openSUSE-2019-325)

This update for freerdp to version 2.0.0rc4 fixes the following issues : Security issues fixed : - CVE-2018-0886: Fix a remote code execution vulnerability CredSSP bsc1085416, bsc1087240, bsc1104918 - CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication...

Product update: Virtuozzo Infrastructure Platform 2.5 Update 4 (2.5.0-1614)

This update provides stability and usability fixes. Vulnerability id: VSTOR-14144, VSTOR-20526 Blink button in the admin panel was not working in some cases. Vulnerability id: VSTOR-20197 Unable to create network bonds. Vulnerability id: VSTOR-20232 Disk replacement occasionally does not allow to...

Security update for freerdp (important)

openSUSE Security Update: Security update for freerdp Announcement ID: openSUSE-SU-2019:0325-1 Rating: important References: 1085416 1087240 1103557 1104918 1112028 1116708 1117963 1117964 1117965 1117966 1117967 1120507 Cross-References: CVE-2018-0886 CVE-2018-1000852 CVE-2018-8784 CVE-2018-8785...

Product update: Virtuozzo 6.0 Update 12 Hotfix 38 (6.0.12-3737)

This update provides a stability fix. Vulnerability id: PSBM-91776 If shamand-monitor had been killed for some reason, there was no way to manage orphaned shaman-monitor with standard tools...

Kernel update: Virtuozzo ReadyKernel patch 74.0 for all supported Virtuozzo kernels and that of Virtuozzo Infrastructure Platform 2.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported Virtuozzo kernels and that of Virtuozzo Infrastructure Platform 2.5. Vulnerability id: PSBM-91566 It was found that unpacking a large tarball with a lot of small files could fail inside...

Product update: Virtuozzo 7.0 Update 9 (7.0.9-534)

The Update 9 for Virtuozzo 7.0 provides new features as well as security, stability, and usability bug fixes. Vulnerability id: CVE-2018-14634, PSBM-88914 An integer overflow flaw was found in createelftables. An unprivileged local user with access to SUID or otherwise privileged binary could use...

SUSE SLED15 / SLES15 Security Update : freerdp (SUSE-SU-2019:0539-1)

This update for freerdp to version 2.0.0rc4 fixes the following issues : Security issues fixed : CVE-2018-0886: Fix a remote code execution vulnerability CredSSP bsc1085416, bsc1087240, bsc1104918 CVE-2018-8789: Fix several denial of service vulnerabilities in the in the NTLM Authentication modul...

Kernel update: New kernel 2.6.32-042stab136.1; Virtuozzo 6.0 Update 12 Hotfix 37 (6.0.12-3736)

This update provides a new kernel 2.6.32-042stab136.1 for Virtuozzo 6.0 based on the RHEL 6.10 kernel 2.6.32-754.11.1.el6. The new kernel introduces stability fixes. Vulnerability id: PSBM-90794 Under certain circumstances, pcompact could crash the host in plooprelocblksioc. Vulnerability id:...

Kernel update: New kernel 2.6.32-042stab136.1 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0

This update provides a new kernel 2.6.32-042stab136.1 for Virtuozzo Containers for Linux 4.7 and Server Bare Metal 5.0 based on the RHEL 6.10 kernel 2.6.32-754.11.1.el6. The new kernel introduces stability fixes. Vulnerability id: PSBM-90794 Under certain circumstances, pcompact could crash the...

Product update: Virtuozzo Infrastructure Platform 2.5 Update 3 (2.5.0-1605)

This update provides stability and usability fixes. Vulnerability id: VSTOR-19098 With erasure coding, write operations are blocked after two or more nodes fail, even if the cluster has enough disks available. Vulnerability id: VSTOR-19326 Unable to list buckets via CLI after bucket removal via...

SUSE-SU-2019:0470-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-18249: Fixed tracking on allocated nid in the addfreenid function fs/f2fs/node.c, which previously allowed local users to cause a denial of service...

Scalable Fuzzing Infrastructure: ClusterFuzz

ClusterFuzz is a scalable fuzzing infrastructure which finds security and stability issues in software. It is used by Google for fuzzing the Chrome Browser, and serves as the fuzzing backend for OSS-Fuzz . ClusterFuzz provides many features which help seamlessly integrate fuzzing into a software...