Fedora 29 : kernel / kernel-headers / kernel-tools (2019-41e28660ae)

The 5.3.6 update contains a number of important fixes across the tree This is a rebase to the 5.3 series ---- The 5.2.20 stable kernel update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the...

GitLab: Stored XSS in merge request pages

A stored cross-site scripting XSS vulnerability was discovered in GitLab merge request pages. An attacker could exploit this vulnerability by creating a merge request with a specially crafted branch name and tricking a user with insufficient permissions to view the merge request page. This could...

Fedora 30 : cutter-re / radare2 (2019-b3de19c346)

Rebase radare2 to 3.9.0 - Rebase cutter-re to 1.9.0 - fix CVE-2019-14745 in radare2 on F30 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Fedora 30 : jbig2dec (2019-686ecf43f4)

rebase to 0.16 bz 1741605 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

mariadb security and bug fix update

1:5.5.64-1 - Rebase to 5.5.64 - Resolves: 1490398 - CVEs fixed: 1610986 CVE-2018-3058 CVE-2018-3063 CVE-2018-3066 CVE-2018-3081 - CVEs fixed: 1664043 CVE-2018-3282 CVE-2019-2503 - CVEs fixed: 1701686 CVE-2019-2529...

sssd security, bug fix, and enhancement update

1.16.4-21 - Resolves: rhbz1714952 - sssd RHEL 7.7 Tier 0 Localization - Rebuild japanese gmo file explicitly 1.16.4-20 - Resolves: rhbz1714952 - sssd RHEL 7.7 Tier 0 Localization 1.16.4-19 - Resolves: rhbz1707959 - sssd does not properly check GSS-SPNEGO 1.16.4-18 - Resolves: rhbz1710286 - The...

bind security, bug fix, and enhancement update

32:9.11.4-9.P2 - Fix CVE-2019-6471 32:9.11.4-8.P2 - Fix scriptlet errors when selinux-policy is not installed 1647659 32:9.11.4-7.P2 - Fix inefective limit of TCP clients CVE-2018-5743 32:9.11.4-6.P2 - Use /sbin/nologin again 1676661 32:9.11.4-5.P2 - Make sure selinux-policy is installed soon...

keycloak-httpd-client-install security, bug fix, and enhancement update

0.8-1 - Resolves: rhbz1673716 - Rebase k-h-c-i to version 0.8 - The rebase also includes fixes for: - rhbz1533190 - CVE-2017-15111 keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloakcli.py - rhbz1533202 - CVE-2017-15112 keycloak-httpd-client-install: unsafe use of...

Fedora 30 : cutter-re / radare2 (2019-2a16e1ab93)

Rebase to radare2 3.6.0 and fix CVE-2019-12790, CVE-2019-12802 and CVE-2019-12865 and rebase cutter to 1.8.3. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it...

Oracle Linux 8 : container-tools:rhel8 (ELSA-2019-0975)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0975 advisory. container-selinux 2:2.94-1.git1e99f1d - Resolves: 1690286 - bump to v2.94 - Resolves: 1693806, 1689255 2:2.89-1.git2521d0d - bump to v2.89 runc...

Fedora 30 : kernel / kernel-headers / kernel-tools (2019-7aecfe1c4b)

The 5.2.5 stable kernel update contains a number of important fixes across the tree. This should also fix the black screen issue that several i915 users were hitting with 5.2.4. ---- The 5.2.4 kernel rebase contains new features and hardware support, and a number of important fixes across the tre...

Fedora 29 : mupdf (2019-15af6a9a07)

rebase to 1.15.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc...

Fedora 28 : webkit2gtk3 (2019-432b3dff25)

Rebase to latest stable branch 2.24. For details see 2.23 and 2.24 release notes : - https://www.webkitgtk.org/2018/11/22/webkitgtk2.23.1-released.html - https://www.webkitgtk.org/2019/01/08/webkitgtk2.23.2-released.html - https://www.webkitgtk.org/2019/01/14/webkitgtk2.23.3-released.html -...

Product update: Virtuozzo 7.0 Update 10 (7.0.10-315)

The Update 10 for Virtuozzo 7.0 provides a new feature as well as stability and usability bug fixes. It also introduces a new kernel 3.10.0-957.10.1.vz7.85.17, which is a rebase to the RHEL 7.6 kernel 3.10.0-957.10.1.el7. Vulnerability id: PSBM-91794 Node could crash due to a bug in overlayfs...

Fedora 29 : webkit2gtk3 (2019-b3ad0a302b)

Rebase to latest stable branch 2.24. For details see 2.23 and 2.24 release notes : - https://www.webkitgtk.org/2018/11/22/webkitgtk2.23.1-released.html - https://www.webkitgtk.org/2019/01/08/webkitgtk2.23.2-released.html - https://www.webkitgtk.org/2019/01/14/webkitgtk2.23.3-released.html -...

Fedora 28 : radare2 (2019-d4d8af2c22)

Security fix for CVE-2018-20455 CVE-2018-20456 CVE-2018-20457 CVE-2018-20458 CVE-2018-20459 CVE-2018-20460 CVE-2018-20461 through rebase to 3.2.0 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted ...

Fedora 28 : golang (2019-c424e3bb72)

Rebase to 1.10.7 - Security fix for CVE-2018-16875, CVE-2018-16874 and CVE-2018-16873 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 28 : kernel / kernel-tools (2018-2c6bd93875)

The 4.17.2 kernel rebase contains new drivers, new features, and a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it...

Fedora 29 : ghostscript (2018-81ee973d7c)

This is a security update for CVE-2018-16802. It also fixes a printing problem discovered in one of the previous CVE fixes. NOTE: Please, be advised that there's a separate issue related to printing problems, which is connected to CUPS itself, meaning this update might not completely resolve your...

Fedora 28 : rsyslog (2018-749f2bae28)

rebase to 8.37.0 ---------------------- - few fixes and enhancements handling journal input - now requires librelp at least 1.2.16, adding support for setting address to bind - various other rsyslog core bugfixes and stability fixes Note that Tenable Network Security has extracted the preceding...