Fedora 29 : php-phpmyadmin-sql-parser / phpMyAdmin (2019-33649e2e64)

Upstream announcement : Welcome to phpMyAdmin 4.9.0.1, a bugfix release that includes important security fixes. This release fixes two security vulnerabilities : - PMASA-2019-3 is a SQL injection flaw in the Designer feature - PMASA-2019-4 is a CSRF attack that's possible through the 'cookie' log...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.3.2 security update

A security update is now available for Red Hat Single Sign-On 7.3 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: CloudForms 4.7.5 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

UPDATE: OWASP Dependency-Check 5.0.0

PenTestIT RSS Feed My first post about this open source OWASP project was about an older version. About 18 hours ago, a new version was released. This post discusses the changes made to the open source software composition analysis utility in the latest release yesterday. This is the OWASP...

SUSE SLED12 Security Update : LibreOffice (SUSE-SU-2019:1448-1)

This update for libreoffice and libraries fixes the following issues : LibreOffice was updated to 6.2.3.2 fate327121 bsc1128845 bsc1123455, bringing lots of bug and stability fixes. Additional bugfixes : If there is no firebird engine we still need java to run hsqldb bsc1135189 PPTX: Rectangle...

SUSE-SU-2019:1448-1 Security update for LibreOffice

This update for libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.2.3.2 fate327121 bsc1128845 bsc1123455, bringing lots of bug and stability fixes. Additional bugfixes: - If there is no firebird engine we still need java to run hsqldb bsc1135189 - PPTX: Rectangle...

openSUSE Security Update : cronie (openSUSE-2019-1520)

This update for cronie fixes the following issues : Security issues fixed : - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerabili...

Ubuntu 18.04 LTS : MariaDB vulnerabilities (USN-3957-3)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3957-3 advisory. USN-3957-1 fixed multiple vulnerabilities in MySQL. This update provides the corresponding fixes for CVE-2019-2614 and CVE-2019-2627 in MariaDB 10.1...

Moderate: Red Hat Security Advisory: qpid-proton security update

An update for qpid-proton is now available for Red Hat OpenStack Platform 14 Rocky. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: qpid-proton security update

An update for qpid-proton is now available for Red Hat OpenStack Platform 13 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: qpid-proton security update

An update for qpid-proton is now available for Red Hat OpenStack Platform 14 Rocky. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

OPENSUSE-SU-2019:1520-1 Security update for cronie

This update for cronie fixes the following issues: Security issues fixed: - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerability...

openSUSE: Security Advisory for java-1_7_0-openjdk (openSUSE-SU-2019:1500-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1499-1 Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability bsc1121967. - CVE-2019-6486: go security release, fixing crypto/elliptic CPU...

SUSE SLED12 / SLES12 Security Update : java-1_7_0-openjdk (SUSE-SU-2019:1392-1)

This update for java-170-openjdk fixes the following issues : Update to 2.6.18 - OpenJDK 7u221 April 2019 CPU Security issues fixed : CVE-2019-2602: Fixed flaw inside BigDecimal implementation Component: Libraries bsc1132728. CVE-2019-2684: Fixed flaw inside the RMI registry implementation...

SUSE-SU-2019:1392-1 Security update for java-1_7_0-openjdk

This update for java-170-openjdk fixes the following issues: Update to 2.6.18 - OpenJDK 7u221 April 2019 CPU Security issues fixed: - CVE-2019-2602: Fixed flaw inside BigDecimal implementation Component: Libraries bsc1132728. - CVE-2019-2684: Fixed flaw inside the RMI registry implementation...

SUSE-SU-2019:1389-1 Security update for cronie

This update for cronie fixes the following issues: Security issues fixed: - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerability...

OPENSUSE-SU-2019:1479-1 Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-7191: In the tun subsystem devgetvalidname xwas not called before registernetdevice. This allowed local users to cause a denial of service NULL pointer dereferenc...

SUSE-SU-2019:14068-1 Security update for mailman

This update for mailman fixes the following issues: Security issue fixed: - CVE-2016-6893: Fixed a Cross-site request forgery vulnerability in the admin web interface bsc997205. Following bug was fixed: - Allow CSRF check to pass in mailman web frontend if the list name contains a '+' bsc1102416...

(RHSA-2019:1301) Low: Red Hat Enterprise Linux 7.2 E4S and TUS Support 6 month Retirement Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Update Services for SAP Solutions E4S and Telecommunications Update Service TUS for Red Hat Enterprise Linux 7.2 will retire as of November 30, 2019, and active support will no longer be provided. Accordingly, Red Hat will no...