RHEL 8 : kernel (RHSA-2019:1479)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1479 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An integer overflow flaw was found in...

RHEL 7 : kernel (RHSA-2019:1485)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1485 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An integer overflow flaw was found in...

CentOS 7.6 - ptrace_scope Privilege Escalation

CentOS 7.6 - ptracescope Privilege Escalation !/usr/bin/env bash 'ptracescope' misconfiguration Local Privilege Escalation Affected operating systems TESTED: Parrot Home/Workstation 4.6 Latest Version Parrot Security 4.6 Latest Version CentOS / RedHat 7.6 Latest Version Kali Linux 2018.4 Latest...

RHEL 8 : Advanced Virtualization (RHSA-2019:1455)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1455 advisory. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Re...

Internet Bug Bounty: Industry-Wide MITM Vulnerability Impacting the JVM Ecosystem

I've been exploring the industry-wide scope of the use of HTTP to resolve dependencies in build infrastructure across the industry. What I unearthed was that some of the most popular libraries and two compilers were impacted by this vulnerability. Vulnerability CWE-829: Inclusion of Functionality...

Security Bulletin: IBM MQ Advanced Cloud Pak may print out plain text credentials in logs. (CVE-2019-4239)

Summary An issue was found within the IBM MQ Advanced Cloud Pak that would cause plain text passwords to be printed in the container logs. If these logs were mirrored to an external logging service, such as the logging service in IBM Cloud Private, then they would be visible there. Vulnerability...

RHEL 6 : java-1.8.0-ibm (RHSA-2019:1325)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1325 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

RHEL 7 : kernel-alt (RHSA-2019:1350)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1350 advisory. The kernel-alt packages provide the Linux kernel version 4.x. Security Fixes: kernel: NULL pointer dereference in fs/xfs/libxfs/xfsinodebuf.c...

RHEL 7 : thunderbird (RHSA-2019:1309)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1309 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.7.0. Security Fixes: Mozilla:...

RHEL 6 : thunderbird (RHSA-2019:1310)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1310 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.7.0. Security Fixes: Mozilla:...

RHEL 8 : thunderbird (RHSA-2019:1308)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1308 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.7.0. Security Fixes: Mozilla:...

Denial Of Service (DoS)

Redhat Enterprise Linux Bind server is vulnerable denial of serviceDoS attacks. This is because it fails to perform adequate boundary checks on user-supplied data. An attackers could exploit this issue to cause application crash...

Information Disclosure

redhat-certification is vulnerable to information disclosure attacks. This is because redhat-certification does not properly restrict files that could be download through the download page. A remote attacker may download any file accessible by the user running httpd...

freeradius security update

CentOS Errata and Security Advisory CESA-2019:1131 An update for freeradius is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Virtuozzo Linux Errata and Security Advisory 2019:1017 Important

Upstream security update. Follow RHSA-2019:1017 for details...

Security Bulletin: IBM MQ Advanced Cloud Pak is vulnerable to a buffer overflow in the curl command (CVE-2018-16842)

Summary A vulnerability was identified in cURL that could allow a remote attacker to obtain sensitive information. cURL is included in the IBM MQ Advanced CloudPak for IBM Cloud Private on RedHat OpenShift. Vulnerability Details CVEID: CVE-2018-16842 DESCRIPTION: cURL could allow a remote attacke...

CVE-2019-3900

An infinite loop issue was found in the vhostnet kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handlerx. It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stal...

RHEL 6 : java-1.7.0-openjdk (RHSA-2019:0790)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0790 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Security...

java security update

CentOS Errata and Security Advisory CESA-2019:0790 An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

java security update

CentOS Errata and Security Advisory CESA-2019:0778 An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...