Red Hat Security Advisory 2019-2781-01

Red Hat Security Advisory 2019-2781-01 - Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs[…]

Red Hat Security Advisory 2019-2782-01

Red Hat Security Advisory 2019-2782-01 - Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs[…]

Red Hat Security Advisory 2019-2789-01

Red Hat Security Advisory 2019-2789-01 - Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Issues addressed include a cross site request forgery vulnerability.

Red Hat Security Advisory 2019-2828-01

Red Hat Security Advisory 2019-2828-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a buffer overflow vulnerability.

Red Hat Security Advisory 2019-2830-01

Red Hat Security Advisory 2019-2830-01 - The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Issues addressed include a buffer overflow vulnerability.

Security Technologies: FORTIFY_SOURCE

FORTIFY_SOURCE provides lightweight compile and runtime protection to some memory and string functions (original patch to gcc was submitted by Red Hat). It is supposed to have no or a very small runtime overhead and can be enabled for all[…]

Security Technologies: Stack Smashing Protection (StackGuard)

In our previous blog, we saw how arbitrary code execution resulting from stack-buffer overflows can be partly mitigated by marking segments of memory as non-executable, a technology known as Execshield. However stack-buffer overflow exploits can still effectively overwrite the function[…]

How SELinux helps mitigate risk while facilitating compliance

Language EnglishMany of our customers are required to meet a variety of regulatory requirements. Red Hat Enterprise Linux includes security technologies that help meet these requirements. Improving Linux security also benefits our layered products, such as Red Hat OpenShift Container[…]

SPECTRE Variant 1 scanning tool

As part of Red Hat's commitment to product security we have developed a tool internally that can be used to scan for variant 1 SPECTRE vulnerabilities. As part of our commitment to the wider user community, we are introducing this[…]

Red Hat’s disclosure process

Last week, a vulnerability (CVE-2018-10892) that affected CRI-O, Buildah, Podman, and Docker was made public before some affected upstream projects were notified. We regret that this was not handled in a way that lives up to our own standards around[…]

RHBA-2019:0499-1: resource-agents bug fix update

Red Hat Enterprise Linux:Updated resource-agents packages that fix one bug are now available for Red HatEnterprise Linux 7.

RHBA-2019:0497-1: gnome-tweak-tool bug fix update

Red Hat Enterprise Linux:Updated gnome-tweak-tool packages that fix two bugs are now available for RedHat Enterprise Linux 7.

RHBA-2019:0488-1: Red Hat Certification bug fix and enhancement update for RHEL6 and RHEL7

Red Hat Enterprise Linux:An updated redhat-certification package that fixes several bugs and adds variousenhancements is now available for Red Hat Enterprise Linux 6 and Red HatEnterprise Linux 7.

RHSA-2019:0544-1: Important: .NET Core on Red Hat Enterprise Linux security update for March 2019

Red Hat Enterprise Linux:Updates for rh-dotnetcore10-dotnetcore, rh-dotnetcore11-dotnetcore,rh-dotnet21-dotnet, and rh-dotnet22-dotnet are now available for .NET Core onRed Hat Enterprise Linux.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score,[…]

Debian Security Advisory 4527-1

Debian Linux Security Advisory 4527-1 - Multiple security issues were found in PHP, a widely-used open source extension and the iconv_mime_decode_headers() function could result in information disclosure or denial of service.

Debian: DSA-4529-1: php7.0 security update

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: Missing sanitising in the EXIF extension and the iconv_mime_decode_headers() function could result in information disclosure or denial of service.

Debian: DSA-4527-1: php7.3 security update

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language: Missing sanitising in the EXIF extension and the iconv_mime_decode_headers() function could result in information disclosure or denial of service.

Debian: DSA-4526-1: opendmarc security update

It was discovered that OpenDMARC, a milter implementation of DMARC, is prone to a signature-bypass vulnerability with multiple From: addresses. For the oldstable distribution (stretch), this problem has been fixed

Debian Security Advisory 4524-1

Debian Linux Security Advisory 4524-1 - Multiple vulnerabilities have been discovered in the Dino XMPP client, which could allow spoofing message, manipulation of a user's roster (contact list) and unauthorised sending of message carbons.

Debian Security Advisory 4522-1

Debian Linux Security Advisory 4522-1 - Multiple vulnerabilities have been discovered in faad2, the Freeware Advanced Audio Coder. These vulnerabilities might allow remote attackers to cause denial-of-service, or potentially execute arbitrary code if crafted MPEG AAC files are processed.

Debian: DSA-4523-1: thunderbird security update

Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, information disclosure and a covert content attack on S/MIME encryption using a crafted multipart/alternative message.

Debian Security Advisory 4521-1

Debian Linux Security Advisory 4521-1 - Three security vulnerabilities have been discovered in the Docker could result in execution of code with root privileges, sensitive data could be logged in debug mode and there was a command injection vulnerability in[…]

Debian Security Advisory 4519-1

Debian Linux Security Advisory 4519-1 - It was discovered that the code fixes for LibreOffice to address CVE-2019-9852 were not complete.

Linux Nested User Namespace idmap Limit Local Privilege Escalation

This Metasploit module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root (CVE-2018-18955). The target system must have unprivileged user[…]

DHCP Client Command Injection (DynoRoot)

This Metasploit module exploits the DynoRoot vulnerability, a flaw in how the NetworkManager integration script included in the DHCP client in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier processes DHCP options. A malicious DHCP server, or[…]

Libuser roothelper Privilege Escalation

This Metasploit module attempts to gain root privileges on Red Hat based Linux systems, including RHEL, Fedora and CentOS, by exploiting a newline injection vulnerability in libuser and userhelper versions prior to 0.56.13-8 and version 0.60 before 0.60-7. This Metasploit[…]

ABRT raceabrt Privilege Escalation

This Metasploit module attempts to gain root privileges on Fedora systems with a vulnerable version of Automatic Bug Reporting Tool (ABRT) configured as the crash handler. A race condition allows local users to change ownership of arbitrary files (CVE-2015-3315). This[…]

Apport / ABRT chroot Privilege Escalation

This Metasploit module attempts to gain root privileges on Linux systems by invoking the default coredump handler inside a namespace ("container"). Apport versions 2.13 through 2.17.x before 2.17.1 on Ubuntu are vulnerable, due to a feature which allows forwarding reports[…]

Mbed TLS -- Side channel attack on deterministic ECDSA

bro -- invalid memory access or heap buffer over-read

curl -- multiple vulnerabilities

Security update for clamav 13716

Abstract: Moderate: Security update for clamavPatch: slessp3-clamav-13716 CVEs:CVE-2018-0360, CVE-2018-0361 Bugs:1101654, 1101410, 1101412, 1103040Applies to:Package(s): clamavProduct(s):SUSE Linux Enterprise Server 11 SP3 LTSSDownloads: SUSE Linux Enterprise Point of Service 11 SP3 for x86SUSE Linux Enterprise Server 11 SP4 for x86-64SUSE Linux Enterprise[…]

Security update for enigmail 1514

Abstract: Moderate: Security update for enigmailPatch: SUSE-SLE-Product-WE-15-2018-1514 CVEs:CVE-2018-12019, CVE-2018-12020 Bugs:1094781, 1096745, 1097525Applies to:Package(s): enigmailProduct(s):SUSE Linux Enterprise Workstation Extension 15Downloads: SUSE Linux Enterprise Workstation Extension 15 for x86-64

Security update for pidgin 13717

Abstract: Moderate: Security update for pidginPatch: sdksp4-pidgin-13717 CVEs:CVE-2017-2640 Bugs:1028835Applies to:Package(s): finch finch-devel libpurple libpurple-devel libpurple-lang pidgin pidgin-develProduct(s):SUSE Linux Enterprise Software Development Kit 11 SP4Downloads: SUSE Linux Enterprise Software Development Kit 11 SP4 for x86-64SUSE Linux Enterprise Software Development Kit 11[…]

Security update for the Linux Kernel 1504

Abstract: Important: Security update for the Linux KernelPatch: SUSE-SLE-Product-WE-15-2018-1504 CVEs:CVE-2018-5390, CVE-2017-18344 Bugs:1012382, 1037697, 1046299, 1046300, 1046302, 1046303, 1046305, 1046306, 1046307, 1046533, 1046543, 1050242, 1050536, 1050538, 1050540, 1051510, 1054245, 1056651, 1056787, 1058169, 1058659, 1060463, 1068032, 1075087, 1075360, 1077338, 1077761, 1077989, 1085042,[…]

Security update for libsoup 1497

Abstract: Moderate: Security update for libsoupPatch: SUSE-SLE-SDK-12-SP3-2018-1497 CVEs:CVE-2018-12910, CVE-2017-2885 Bugs:1052916, 1100097, 1086036Applies to:Package(s): libsoup-develProduct(s):SUSE Linux Enterprise Software Development Kit 12 SP3Downloads: SUSE Linux Enterprise Desktop 12 SP3 for x86-64SUSE Linux Enterprise Server 12 SP3 for x86-64SUSE Linux Enterprise Server 12[…]