Red Hat Security Advisory 2019-1455-01

Red Hat Security Advisory 2019-1455-01 - The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat products. Issues addressed include a CPU related vulnerability.

Red Hat Security Advisory 2019-1436-01

Red Hat Security Advisory 2019-1436-01 - HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Issues addressed include denial of service and information leakage vulnerabilities.

Red Hat Security Advisory 2019-1423-01

Red Hat Security Advisory 2019-1423-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. Jenkins is a continuous integration server that monitors executions of repeated jobs, such[…]

Red Hat Security Advisory 2019-1424-01

Red Hat Security Advisory 2019-1424-01 - Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on JBoss Application Server 7. This release of Red Hat JBoss Enterprise Application Platform 7.2.2 serves as a replacement for[…]

Red Hat Security Advisory 2019-1422-01

Red Hat Security Advisory 2019-1422-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. The atomic-openshift-web-console package provides the management console for OpenShift Container Platform. Issues addressed[…]

Security Technologies: FORTIFY_SOURCE

FORTIFY_SOURCE provides lightweight compile and runtime protection to some memory and string functions (original patch to gcc was submitted by Red Hat). It is supposed to have no or a very small runtime overhead and can be enabled for all[…]

Security Technologies: Stack Smashing Protection (StackGuard)

In our previous blog, we saw how arbitrary code execution resulting from stack-buffer overflows can be partly mitigated by marking segments of memory as non-executable, a technology known as Execshield. However stack-buffer overflow exploits can still effectively overwrite the function[…]

How SELinux helps mitigate risk while facilitating compliance

Language EnglishMany of our customers are required to meet a variety of regulatory requirements. Red Hat Enterprise Linux includes security technologies that help meet these requirements. Improving Linux security also benefits our layered products, such as Red Hat OpenShift Container[…]

SPECTRE Variant 1 scanning tool

As part of Red Hat's commitment to product security we have developed a tool internally that can be used to scan for variant 1 SPECTRE vulnerabilities. As part of our commitment to the wider user community, we are introducing this[…]

Red Hat’s disclosure process

Last week, a vulnerability (CVE-2018-10892) that affected CRI-O, Buildah, Podman, and Docker was made public before some affected upstream projects were notified. We regret that this was not handled in a way that lives up to our own standards around[…]

RHBA-2019:0499-1: resource-agents bug fix update

Red Hat Enterprise Linux:Updated resource-agents packages that fix one bug are now available for Red HatEnterprise Linux 7.

RHBA-2019:0497-1: gnome-tweak-tool bug fix update

Red Hat Enterprise Linux:Updated gnome-tweak-tool packages that fix two bugs are now available for RedHat Enterprise Linux 7.

RHBA-2019:0488-1: Red Hat Certification bug fix and enhancement update for RHEL6 and RHEL7

Red Hat Enterprise Linux:An updated redhat-certification package that fixes several bugs and adds variousenhancements is now available for Red Hat Enterprise Linux 6 and Red HatEnterprise Linux 7.

RHSA-2019:0544-1: Important: .NET Core on Red Hat Enterprise Linux security update for March 2019

Red Hat Enterprise Linux:Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore,rh-dotnet21-dotnet, and rh-dotnet22-dotnet are now available for .NET Core onRed Hat Enterprise Linux.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score,[…]

Debian: DSA-4463-1: znc security update

Two vulnerabilities were discovered in the ZNC IRC bouncer which could result in remote code execution (CVE-2019-12816) or denial of service via invalid encoding (CVE-2019-9917).

Debian: DSA-4462-1: dbus security update

Joe Vennix discovered an authentication bypass vulnerability in dbus, an asynchronous inter-process communication system. The implementation of the DBUS_COOKIE_SHA1 authentication mechanism was susceptible to a symbolic link attack. A local attacker could take advantage of this flaw

Debian Security Advisory 4460-1

Debian Linux Security Advisory 4460-1 - Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which may result in authentication bypass, denial of service, cross-site scripting, information disclosure and bypass of anti-spam measures.

Debian: DSA-4460-1: mediawiki security update

Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which may result in authentication bypass, denial of service, cross-site scripting, information disclosure and bypass of anti-spam measures.

Debian Security Advisory 4459-1

Debian Linux Security Advisory 4459-1 - Multiple security issues were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file/stream is processed.

Debian: DSA-4458-1: cyrus-imapd security update

A flaw was discovered in the CalDAV feature in httpd of the Cyrus IMAP server, leading to denial of service or potentially the execution of arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar[…]

Debian: DSA-4457-1: evolution security update

Hanno Böck discovered that Evolution was vulnerable to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted HTML email. This issue was mitigated by moving the security bar with encryption and signature information above the message

Debian: DSA-4454-2: qemu regression update

Vincent Tondellier reported that the qemu update issued as DSA 4454-1 did not correctly backport the support to define the md-clear bit to allow mitigation of the MDS vulnerabilities. Updated qemu packages are now available to correct this issue.

Debian Security Advisory 4455-1

Debian Linux Security Advisory 4455-1 - Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos.

Linux Nested User Namespace idmap Limit Local Privilege Escalation

This Metasploit module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root (CVE-2018-18955). The target system must have unprivileged user[…]

DHCP Client Command Injection (DynoRoot)

This Metasploit module exploits the DynoRoot vulnerability, a flaw in how the NetworkManager integration script included in the DHCP client in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier processes DHCP options. A malicious DHCP server, or[…]

Libuser roothelper Privilege Escalation

This Metasploit module attempts to gain root privileges on Red Hat based Linux systems, including RHEL, Fedora and CentOS, by exploiting a newline injection vulnerability in libuser and userhelper versions prior to 0.56.13-8 and version 0.60 before 0.60-7. This Metasploit[…]

ABRT raceabrt Privilege Escalation

This Metasploit module attempts to gain root privileges on Fedora systems with a vulnerable version of Automatic Bug Reporting Tool (ABRT) configured as the crash handler. A race condition allows local users to change ownership of arbitrary files (CVE-2015-3315). This[…]

Apport / ABRT chroot Privilege Escalation

This Metasploit module attempts to gain root privileges on Linux systems by invoking the default coredump handler inside a namespace ("container"). Apport versions 2.13 through 2.17.x before 2.17.1 on Ubuntu are vulnerable, due to a feature which allows forwarding reports[…]

GraphicsMagick -- multiple vulnerabilities

Vim/NeoVim -- Security vulnerability

mybb -- vulnerabilities

Security update for clamav 13716

Abstract: Moderate: Security update for clamavPatch: slessp3-clamav-13716 CVEs:CVE-2018-0360, CVE-2018-0361 Bugs:1101654, 1101410, 1101412, 1103040Applies to:Package(s): clamavProduct(s):SUSE Linux Enterprise Server 11 SP3 LTSSDownloads: SUSE Linux Enterprise Point of Service 11 SP3 for x86SUSE Linux Enterprise Server 11 SP4 for x86-64SUSE Linux Enterprise[…]

Security update for enigmail 1514

Abstract: Moderate: Security update for enigmailPatch: SUSE-SLE-Product-WE-15-2018-1514 CVEs:CVE-2018-12019, CVE-2018-12020 Bugs:1094781, 1096745, 1097525Applies to:Package(s): enigmailProduct(s):SUSE Linux Enterprise Workstation Extension 15Downloads: SUSE Linux Enterprise Workstation Extension 15 for x86-64

Security update for pidgin 13717

Abstract: Moderate: Security update for pidginPatch: sdksp4-pidgin-13717 CVEs:CVE-2017-2640 Bugs:1028835Applies to:Package(s): finch finch-devel libpurple libpurple-devel libpurple-lang pidgin pidgin-develProduct(s):SUSE Linux Enterprise Software Development Kit 11 SP4Downloads: SUSE Linux Enterprise Software Development Kit 11 SP4 for x86-64SUSE Linux Enterprise Software Development Kit 11[…]

Security update for the Linux Kernel 1504

Abstract: Important: Security update for the Linux KernelPatch: SUSE-SLE-Product-WE-15-2018-1504 CVEs:CVE-2018-5390, CVE-2017-18344 Bugs:1012382, 1037697, 1046299, 1046300, 1046302, 1046303, 1046305, 1046306, 1046307, 1046533, 1046543, 1050242, 1050536, 1050538, 1050540, 1051510, 1054245, 1056651, 1056787, 1058169, 1058659, 1060463, 1068032, 1075087, 1075360, 1077338, 1077761, 1077989, 1085042,[…]

Security update for libsoup 1497

Abstract: Moderate: Security update for libsoupPatch: SUSE-SLE-SDK-12-SP3-2018-1497 CVEs:CVE-2018-12910, CVE-2017-2885 Bugs:1052916, 1100097, 1086036Applies to:Package(s): libsoup-develProduct(s):SUSE Linux Enterprise Software Development Kit 12 SP3Downloads: SUSE Linux Enterprise Desktop 12 SP3 for x86-64SUSE Linux Enterprise Server 12 SP3 for x86-64SUSE Linux Enterprise Server 12[…]