Important product update: Virtuozzo PowerPanel RTM Hotfix 3 (7.0.1-415)

The new packages for Virtuozzo PowerPanel introducing new features as well as security and usability fixes. Vulnerability id: CVE-2014-3566, PP-427 Disabled SSLv3 access to the management panel to protect against the POODLE SSLv3 vulnerability...

SUSE-SU-2017:2525-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-5243: The tipcnlcompatlinkdump function in net/tipc/netlinkcompat.c in the Linux kernel did not properly copy a certain string, which allowed local...

Fedora 26 : 1:emacs / ImageMagick / WindowMaker / autotrace / converseen / etc (2017-8f27031c8f)

Many security fixes, bug fixes, and other changes from the previous version 6.9.3.0. See the 6.9 branch ChangeLog. Dependent packages are mostly straight rebuilds, a couple also include bugfix version updates. Note that Tenable Network Security has extracted the preceding description block direct...

[slackware-security] ruby

New ruby packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ruby-2.2.8-i586-1slack14.2.txz: Upgraded. This release includes several security fixes. For more information, see:...

Important: Red Hat Security Advisory: Red Hat Mobile Application Platform security update

An update is now available for Red Hat Mobile Application Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

openSUSE Security Update : libreoffice (openSUSE-2017-1048)

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements : Writer : - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc : - New...

Fedora 25 : chromium (2017-c708c044e3)

Update to 60.0.3112.113. Added support for aarch64 except on EPEL7. ---- Update to 60.0.3112.101. Apply upstream fix for cameras reporting 0x0 resolution formats. ---- Chromium 60. Security fix for CVE-2017-5091, CVE-2017-5092, CVE-2017-5093, CVE-2017-5094, CVE-2017-5095, CVE-2017-5096,...

Fedora 26 : libzip (2017-840db88351)

Version 1.3.0 It contains fixes for two possible security problems. The problems were identified by Brian 'geeknik' Carpenter and Agostino Sarubbo using AFL. The changes are : - Support bzip2 compressed zip archives - Improve file progress callback code - Fix zipfdopen - CVE-2017-12858: Fix doubl...

Fedora 25 : gd (2017-a69b0bb52d)

Version 2.2.5 - 2017-08-30 - Security - Double-free in gdImagePngPtr. CVE-2017-6362 - Buffer over-read into uninitialized memory. CVE-2017-7890 - Fixed - Fix 109: XBM reading fails with printed error - Fix 338: Fatal and normal libjpeg/ibpng errors not distinguishable - Fix 357: 2.2.4: Segfault i...

FreeBSD : chromium -- multiple vulnerabilities (e1100e63-92f7-11e7-bd95-e8e0b747a45a)

Google Chrome releases reports : 22 security fixes in this release, including : - 737023 High CVE-2017-5111: Use after free in PDFium. Reported by Luat Nguyen on KeenLab, Tencent on 2017-06-27 - 740603 High CVE-2017-5112: Heap buffer overflow in WebGL. Reported by Tobias Klein on 2017-07-10 -...

Important: Red Hat Security Advisory: jboss-ec2-eap security, bug fix, and enhancement update

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 5

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.17 update on RHEL 7

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.17 update

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 61 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 61.0.3163.79 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

RHEL 7 : poppler (RHSA-2017:2551)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2551 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: A stack-based buffer...

SUSE-SU-2017:2342-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2014-9922: The eCryptfs subsystem in the Linux kernel allowed local users to gain privileges via a large filesystem stack that includes an overlayfs layer...

Important kernel security update: CVE-2017-7542 and other; new kernel 2.6.32-042stab124.2, Virtuozzo 6.0 Update 12 Hotfix 14 (6.0.12-3683)

This update provides a new kernel 2.6.32-042stab124.2 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0 and is a rebase to the Red Hat Enterprise Linux 6.9 kernel 2.6.32-696.10.1.el6. It inherits fixes from the original RHEL kernel and provides internal security and stability fixes...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2017:2315-1)

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer : - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc : - New...

SUSE SLES12 Security Update : xen (SUSE-SU-2017:2319-1)

This update for xen fixes several issues. These security issues were fixed : - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information XSA-226, bsc1051787. - CVE-2017-12137: Incorrectly-aligned updates...