net-tools bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

net-tools bug fix and enhancement update

An update is available for net-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...

Moderate: python3 security and bug fix update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

mingw-expat security update

An update for mingw-expat is now available for Rocky Linux 8. Rocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

WordPress < 5.5.2 - Stored XSS in Post Slugs

Description The release notes state: "Thanks to Karim El Ouerghemmi from RIPS who disclosed a method to store XSS in post slugs."...

WordPress < 5.5.2 - Hardening Deserialization Requests

Description The release notes state: "Props to Alex Concha of the WordPress Security Team for their work in hardening deserialization requests." This vulnerability affected the third-party "Requests for PHP" library used by WordPress...

Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs

Impact Due to a sudden upstream breaking change by Bitly, versions of bitlyshortener 0.5.0 can generate an invalid short URL when a vanity domain exists. Patches Upgrading bitlyshortener to 0.5.0 or newer will prevent the generation of any such invalid short URLs. References Release notes...

GHSA-R82C-J4MQ-5XFW Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs

Impact Due to a sudden upstream breaking change by Bitly, versions of bitlyshortener 0.5.0 can generate an invalid short URL when a vanity domain exists. Patches Upgrading bitlyshortener to 0.5.0 or newer will prevent the generation of any such invalid short URLs. References Release notes...

libpng security update

CentOS Errata and Security Advisory CESA-2020:3901 An update for libpng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2020:4060 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2020:3861 An update for glibc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

October 13, 2020—KB4580346 (OS Build 14393.3986) - EXPIRED

None None...

October 13, 2020—KB4577671 (OS Builds 18362.1139 and 18363.1139) - EXPIRED

None None...

October 13, 2020—KB4580347 (Monthly Rollup)

None None...

October 13, 2020—KB4580345 (Monthly Rollup)

None None...

October 13, 2020—KB4580378 (Monthly Rollup)

None None...

Moderate: Red Hat Security Advisory: Red Hat AMQ Interconnect 1.9.0 release and security update

Red Hat AMQ Interconnect 1.9.0 release packages are available for A-MQ Interconnect on RHEL 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

FreeBSD : libexif -- multiple vulnerabilities (cff0b2e2-0716-11eb-9e5d-08002728f74c)

Release notes : Lots of fixes exposed by fuzzers like AFL, ClusterFuzz, OSSFuzz and others : CVE-2016-6328: fixed integer overflow when parsing maker notes CVE-2017-7544: fixed buffer overread CVE-2018-20030: Fix for recursion DoS CVE-2019-9278: replaced integer overflow checks the compiler could...

Moderate: Red Hat Bug Fix Advisory: Red Hat Ceph Storage 4.1 Bug Fix update

An update is now available for Red Hat Ceph Storage 4.1. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services. These updated packages...

Low: Red Hat Bug Fix Advisory: Red Hat OpenShift Service Mesh 3scale-istio-adapter-rhel8-container update

An update for 3scale-istio-adapter-rhel8-container is now available for OpenShift Service Mesh. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. The OpenShift Service...