Low: Red Hat Security Advisory: docker security and bug fix update

An update for docker is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Security update for obs-service-tar_scm (important)

openSUSE Security Update: Security update for obs-service-tarscm Announcement ID: openSUSE-SU-2019:0326-1 Rating: important References: 1076410 1082696 1105361 1107507 1107944 Cross-References: CVE-2018-12473 CVE-2018-12474 CVE-2018-12476 Affected Products: openSUSE Leap 15.0 An update that solve...

Debian DLA-1708-1 : zabbix security update

Several security vulnerabilities were discovered in Zabbix, a server/client network monitoring solution. CVE-2016-10742 Zabbix allowed remote attackers to redirect to external links by misusing the request parameter. CVE-2017-2826 An information disclosure vulnerability exists in the iConfig prox...

SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2019:0582-1)

This update for qemu fixes the following issues : Security vulnerabilities addressed : CVE-2019-6778: Fixed an out-of-bounds access in slirp bsc1123156 CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp bsc1119493 CVE-2018-19489: Fixed a Denial-of-Service ...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 73 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 73.0.3683.75 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

SUSE-SU-2019:0582-1 Security update for qemu

This update for qemu fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6778: Fixed an out-of-bounds access in slirp bsc1123156 - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks in usb-mtp bsc1119493 - CVE-2018-19489: Fixed a...

openSUSE Security Update : gdm (openSUSE-2019-310)

This update for gdm fixes the following issues : Security issue fixed : - CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled bsc1124628. Other issues fixed : - GLX applications do not work well when the proprietary nvidia driver is used with a wayland session. Because of that...

openSUSE Security Update : openssh (openSUSE-2019-307)

This update for openssh fixes the following issues : Security vulnerabilities addressed : - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers bsc1121816 -...

Security update for openssh (moderate)

openSUSE Security Update: Security update for openssh Announcement ID: openSUSE-SU-2019:0307-1 Rating: moderate References: 1121816 1121821 1125687 Cross-References: CVE-2019-6109 CVE-2019-6111 Affected Products: openSUSE Leap 15.0 An update that solves two vulnerabilities and has one errata is n...

Security update for webkit2gtk3 (moderate)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:0308-1 Rating: moderate References: 1119553 1119554 1119555 1119556 1119557 1119558 1124937 Cross-References: CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 CVE-2019-62...

SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2019:0556-1)

This update for sssd fixes the following issues : Security vulnerabilities addressed : Fix fallbackhomedir returning '/' for empty home directories CVE-2019-3811 bsc1121759 Create sockets with right permissions bsc1098377, CVE-2018-10852 Other bug fixes and changes: Install logrotate configuratio...

SUSE SLES12 Security Update : sssd (SUSE-SU-2019:0552-1)

This update for sssd fixes the following issues : Security vulnerability fixed : CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: Skip sdapsavegrpmem if ignoregroupmembers is set. bsc1082568 Only search for primary group if it is...

Low: Red Hat Bug Fix Advisory: CloudForms 4.7.1 bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.10. Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller M...

SUSE-SU-2019:0552-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerability fixed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: - Skip sdapsavegrpmem if ignoregroupmembers is set. bsc1082568 - Only search for primary group if it...

RHEL 7 : ansible (RHSA-2019:0432)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0432 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...

SUSE-SU-2019:0542-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerability addresed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: - Install logrotate configuration bsc1004220 - Align systemd service file with upstream, run...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 72.0.3626.122 Platform version: 11316.165.0 for most Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here, including a fix for CVE-2019-5786. If you find new issues, plea...

(RHSA-2019:0442) Low: Red Hat Enterprise Linux 6.4 Advanced Mission Critical (AMC) Final Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Advanced Mission Critical for Red Hat Enterprise Linux 6.4 will be retired as of February 28, 2019, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including Critica...

openSUSE: Security Advisory for systemd (openSUSE-SU-2019:0268-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Moderate: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...