Photon OS 2.0 : ceph / linux-esx / rsync / linux / linux-secure / linux-aws (PhotonOS-PHSA-2018-2.0-0041) (deprecated)

An update of 'ceph', 'linux-esx', 'rsync', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory...

Photon OS 2.0 : glibc / linux / rsync / curl (PhotonOS-PHSA-2018-2.0-0009) (deprecated)

An update of 'glibc', 'linux', 'rsync', 'curl' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0009. The text itself is...

Leaky Backup Spills 157 GB of Automaker Secrets

An insecure backup protocol used by robotics firm Level One is to blame for leaking 157 gigabytes of sensitive data belonging major automakers, including Ford, Tesla and Toyota. The data included 10 years of assembly-line schematics and control settings for robotics used to build the cars, along...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/curl-7.61.0-i586-1slack14.2.txz: Upgraded. This update fixes a buffer overflow in SMTP send. For more information, see:...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix bugs and security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-52.9.1-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements...

Important: Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for RHEL-7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whic...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.35-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

[slackware-security] wget

New wget packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wget-1.19.5-i586-1slack14.2.txz: Upgraded. Fixed a security issue where a malicious web server could...

GLSA-201805-04 : rsync: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-201805-04 rsync: Arbitrary command execution A vulnerability was discovered in rsyncs parsearguments function in options.c. Impact : Remote attackers could possibly execute arbitrary commands with the privilege of the process...

rsync: Arbitrary command execution

Background File transfer program to keep remote files into sync. Description A vulnerability was discovered in rsync’s parsearguments function in options.c. Impact Remote attackers could possibly execute arbitrary commands with the privilege of the process. Workaround There is no known workaround...

Important Photon OS Security Update - PHSA-2018-0041

Updates of 'linux-aws', 'linux-secure', 'rsync', 'linux-esx', 'linux', 'ceph' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2018-0132

Updates of 'rsync', 'linux', 'linux-esx' packages of Photon OS have been released...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.7.4esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] gd

New gd packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: This update fixes two security issues: Double-free in gdImagePngPtr denial of service. Buffer over-read into uninitialized memory information leak. For mor...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.7.3esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-52.7.0esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...

Solaris 10 (sparc) : 152248-01

SunOS 5.10: rsync Patch. Date this patch was last updated by Sun : Dec/17/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 152250-01

SunOS 5.10: rsync Source Patch. Date this patch was last updated by Sun : Dec/17/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

openSUSE Security Update : rsync (openSUSE-2018-237)

This update for rsync fixes one issues. This security issue was fixed : - CVE-2018-5764: The parsearguments function in options.c did not prevent multiple --protect-args uses, which allowed remote attackers to bypass an argument-sanitization protection mechanism bsc1076503. This update was import...

[slackware-security] openssh

New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and 14.2 to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openssh-7.4p1-i586-2slack14.2.txz: Rebuilt. sftp-server: in read-only mode, sftp-server was incorrectly...