3201 matches found
RHEL 6 : rubygem-openshift-origin-node (RHSA-2014:0764)
An updated rubygem-openshift-origin-node package that fixes one security issue and several bugs is now available for Red Hat OpenShift Enterprise 2.1.1. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base...
python-paramiko security update
2.1.1-9 - Fix a security flaw CVE-2018-1000805 in Paramiko's server mode does not effect client mode. Backported from 2.1.6 Resolves rhbz1637366...
RHEL 7 : qemu-kvm-rhev (RHSA-2015:1508)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1508 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provid...
RHEL 7 : qemu-kvm-rhev (RHSA-2015:1739)
Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
RHEL 7 : qemu-kvm-rhev (RHSA-2015:1931)
Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
File-Level Restore - FUSE mount is not supported on kernel versions 4.0.0-4.1.33
This issue is related to a known kernel bug and affects any version of Veeam Agent for Linux. Challenge When performing guest file recovery from a backup of a machine running Linux Kernel versions 4.0.0 through 4.1.33, the restore fails to mount with the error: FUSE mount is not supported on kern...
USN-3702-2 php7.2 vulnerability
USN-3702-1 fixed a vulnerability in PHP. PHP 7.2.7 did not actually include the fix for CVE-2018-12882. This update adds a backported patch to correct the issue. We apologize for the inconvenience. Original advisory details: It was discovered that PHP incorrectly handled exif tags in certain...
Mozilla: Backport critical security fixes in Skia
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR 52.8, Thunderbird 52.8, and Firefox ESR 52.8...
Mozilla: Backport critical security fixes in Skia
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR 52.8, Thunderbird 52.8, and Firefox ESR 52.8...
Fedora 26 : qt5-qtwebengine (2018-024afa2d48)
A QtWebEngine security update backporting security fixes from Chromium 65 up to 65.0.3325.146. The backports have been forward-ported from QtWebEngine 5.9.5 LTS. This update fixes the following security issues : - CVE-2017-15429 - CVE-2018-6033 claimed fixed in 5.10.1, but the fix was incomplete...
MGASA-2018-0171 Updated python-pycrypto packages fix security vulnerability
The textbook ElGamal implementation is not secure. PyCrypto and some other implementations use the wrong algorithm, which may lead to some information disclosure simply by looking at the encrypted text. For a full description, see https://github.com/dlitz/pycrypto/issues/253 This update includes ...
Design/Logic Flaw
Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins...
CVE-2017-1000394
Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins...
CVE-2017-1000394
Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-fileupload library with the denial-of-service vulnerability known as CVE-2016-3092. The fix for that vulnerability has been backported to the version of the library bundled with Jenkins...
eBPF 4.9-stable Verifier Bug Backported
eBPF verifier bug backported to 4.9-stable Moving this one to a separate bug report... Commit https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=332270fdc8b6fba07d059a9ad44df9e1a2ad4529 adds functionality that permits performing addition on PTRTOSTACK stack pointer with...
Security fix for the ALT Linux 8 package openssl10 version 1.0.2m-alt0.M80P.1
1.0.2m-alt0.M80P.1 built Nov. 7, 2017 Gleb Fotengauer-Malinovskiy in task 193204 Nov. 4, 2017 Gleb Fotengauer-Malinovskiy - Backported to p8 branch fixes CVE-2017-3735, CVE-2017-3736...
Security fix for the ALT Linux 8 package file version 4.26-alt13
4.26-alt13 built March 28, 2017 Dmitry V. Levin in task 180955 --- March 22, 2017 Dmitry V. Levin - Backported readelf fix by sem@; fixes: CVE-2014-9653. - Backported magic for lrzip, lz4, zstd, and snappy. - Backported -z support for lrzip, lz4, and zstd...
CentOS Update for qemu-guest-agent CESA-2017:0309 centos6
Check the version of qemu-guest-agent SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882666";...
Debian DLA-802-1 : openjdk-7 security update
openjdk-7 7u111-2.6.7-2deb7u1 backported the security fixes from 7u121. openjdk-7 has now been updated to the full 7u121 version, which includes extra bug fixes and other improvements. For Debian 7 'Wheezy', these problems have been fixed in version 7u121-2.6.8-1deb7u1. We recommend that you...
