Virtuozzo Linux Errata and Security Advisory 2019:0375 Important

Upstream security update. Follow RHSA-2019:0375 for details...

Security update for runc (important)

openSUSE Security Update: Security update for runc Announcement ID: openSUSE-SU-2019:0170-1 Rating: important References: 1095817 1118897 1118898 1118899 1121967 Cross-References: CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 CVE-2019-5736 Affected Products: openSUSE Backports SLE-15 An update tha...

Security update for spice (important)

openSUSE Security Update: Security update for spice Announcement ID: openSUSE-SU-2019:0167-1 Rating: important References: 1109044 1122706 Cross-References: CVE-2019-3813 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available. Description...

Security update for openssl-1_1 (moderate)

openSUSE Security Update: Security update for openssl-11 Announcement ID: openSUSE-SU-2019:0152-1 Rating: moderate References: 1117951 1118913 Cross-References: CVE-2018-0737 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available...

libgudev1, systemd security update

CentOS Errata and Security Advisory CESA-2019:0201 An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

libvncserver security update

CentOS Errata and Security Advisory CESA-2019:0059 An update for libvncserver is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Virtuozzo Linux Errata and Bugfix Advisory 2019:0063

Upstream security update. Follow RHBA-2019:0063 for details...

Unauthorized File Creation

Nagios is vulnerable to symbolic link attack. Due to the flaw in nagios.upgradetov3.sh, it is possible for a local user to create a temporary nagioscfg file with a predictable name in /tmp/.Per: http://rhn.redhat.com/errata/RHSA-2013-1526.html...

ntp, ntpdate security update

CentOS Errata and Security Advisory CESA-2018:3854 An update for ntp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

Sql injection

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is...

CVE-2018-14623

CVE-2018-14623 describes a SQL injection flaw in Katello’s errata-related API. An authenticated remote attacker can craft input to force a malformed SQL query in the backend database, leaking internal IDs. The issue is tied to an incomplete fix for CVE-2016-3072. Affected are Katello versions 3.1...

CVE-2018-14623

A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs...

PT-2018-12622 · Red Hat · Katello

Name of the Vulnerable Software and Affected Versions: katello versions 3.10 and older Description: A SQL injection flaw was found in katello's errata-related API, allowing an authenticated remote attacker to craft input data and force a malformed SQL query to the backend database. This can resul...

Virtuozzo Linux Errata and Bugfix Advisory 2018:3764

Upstream security update. Follow RHBA-2018:3764 for details...

Virtuozzo Linux Errata and Security Advisory 2018:3760 Important

Upstream security update. Follow RHSA-2018:3760 for details...

java security update

CentOS Errata and Security Advisory CESA-2018:3521 An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

spice security update

CentOS Errata and Security Advisory CESA-2018:3522 An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...