RHEL 7 : kernel-alt (RHSA-2019:1350)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1350 advisory. The kernel-alt packages provide the Linux kernel version 4.x. Security Fixes: kernel: NULL pointer dereference in fs/xfs/libxfs/xfsinodebuf.c...

Security fix for the ALT Linux 8 package php7 version 7.2.19-alt1

7.2.19-alt1 built June 5, 2019 Anton Farygin in task 231277 June 1, 2019 Anton Farygin - 7.2.19 fixes: CVE-2019-11040 - fixed build on mipsel by iv@...

Low: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Security fix for the ALT Linux 9 package SPICE version 0.14.2-alt1

0.14.2-alt1 built June 4, 2019 Alexey Shabalin in task 231442 --- May 31, 2019 Alexey Shabalin - 0.14.2 fixes: CVE-2019-3813 - build with gstreamer support...

Security fix for the ALT Linux 9 package php7 version 7.2.19-alt1

7.2.19-alt1 built June 2, 2019 Anton Farygin in task 231278 June 1, 2019 Anton Farygin - 7.2.19 fixes: CVE-2019-11040 - fixed build on mipsel by iv@...

Security fix for the ALT Linux 10 package php8.0 version 7.2.19-alt1

June 1, 2019 Anton Farygin 7.2.19-alt1 - 7.2.19 fixes: CVE-2019-11040 - fixed build on mipsel by iv@...

Security fix for the ALT Linux 10 package php8.1 version 7.2.19-alt1

June 1, 2019 Anton Farygin 7.2.19-alt1 - 7.2.19 fixes: CVE-2019-11040 - fixed build on mipsel by iv@...

Security fix for the ALT Linux 9 package wireshark version 3.0.2-alt1

May 31, 2019 Anton Farygin 3.0.2-alt1 - 3.0.2 - fixes: Wireshark dissection engine crash. CVE-2019-12295...

Security fix for the ALT Linux 10 package samba version 4.10.3-alt1

May 27, 2019 Evgeny Sinelnikov 4.10.3-alt1 - Update to latest security release - Security fixes: + CVE-2018-16860 Samba AD DC S4U2Self/S4U2Proxy unkeyed checksum...

Security fix for the ALT Linux 8 package curl version 7.65.0-alt1

7.65.0-alt1 built May 24, 2019 Anton Farygin in task 229802 May 22, 2019 Anton Farygin - 7.65.0 - fixes: CVE-2019-5435: Integer overflows in curlurlset CVE-2019-5436: tftp: use the current blksize for recvfrom...

Security fix for the ALT Linux 9 package libxml2 version 1:2.9.9.0.52.f824-alt1

May 22, 2019 Alexey Shabalin 1:2.9.9.0.52.f824-alt1 - v2.9.4-12-ge905f08 - v2.9.9-52-gf824a4bd fixes: CVE-2017-9047, CVE-2017-9048, CVE-2017-9049, CVE-2017-9050, CVE-2017-5969, CVE-2018-14404, CVE-2018-9251, CVE-2018-14567...

Security fix for the ALT Linux 10 package libxml2 version 1:2.9.9.0.52.f824-alt1

May 22, 2019 Alexey Shabalin 1:2.9.9.0.52.f824-alt1 - v2.9.4-12-ge905f08 - v2.9.9-52-gf824a4bd fixes: CVE-2017-9047, CVE-2017-9048, CVE-2017-9049, CVE-2017-9050, CVE-2017-5969, CVE-2018-14404, CVE-2018-9251, CVE-2018-14567...

Security fix for the ALT Linux 10 package firefox-esr version 60.7.0-alt1

May 21, 2019 Andrey Cherepanov 60.7.0-alt1 - New ESR version 60.7.0. - Fixed: + CVE-2019-9815 Disable hyperthreading on content JavaScript threads on macOS + CVE-2019-9816 Type confusion with object groups and UnboxedObjects + CVE-2019-9817 Stealing of cross-domain images using canvas +...

Security fix for the ALT Linux 10 package thunderbird version 60.7.0-alt1

May 20, 2019 Andrey Cherepanov 60.7.0-alt1 - New version 60.7.0. - Fixed: + CVE-2019-9815 Disable hyperthreading on content JavaScript threads on macOS + CVE-2019-9816 Type confusion with object groups and UnboxedObjects + CVE-2019-9817 Stealing of cross-domain images using canvas + CVE-2019-9818...

CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE aka current keyboard mode check is mishandled...

CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE aka current keyboard mode check is mishandled...

Security fix for the ALT Linux 8 package dotnet-bootstrap version 2.1.9-alt1

2.1.9-alt1 built May 16, 2019 Aleksei Nikiforov in task 229347 March 13, 2019 Vitaly Lipatov - new version 2.1.9 with rpmrb script - includes .NET Core 2.1.9, ASP.NET Core 2.1.9 and .NET Core SDK 2.1.505 - CVE-2019-0657: .NET Core NuGet Tampering Vulnerability...

Security fix for the ALT Linux 8 package dhcpcd version 1:6.11.7-alt1

1:6.11.7-alt1 built May 15, 2019 Mikhail Efremov in task 229367 May 14, 2019 Mikhail Efremov - Fix crash on lease renewals closes: 36730. - Updated to 6.11.7 fixes: CVE-2019-11766...

Security fix for the ALT Linux 9 package mariadb version 10.3.15-alt1

10.3.15-alt1 built May 15, 2019 Alexey Shabalin in task 229424 May 15, 2019 Alexey Shabalin - 10.3.15 - Fixes for the following security vulnerabilities: + CVE-2019-2614 + CVE-2019-2627 + CVE-2019-2628...

Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.13-alt0.M80P.1

9.6.13-alt0.M80P.1 built May 14, 2019 Alexei Takaseev in task 229145 May 9, 2019 Alexei Takaseev - 9.6.13 - Fixes CVE-2019-10130...