Red Hat Security Advisory 2019-2512-01

Red Hat Security Advisory 2019-2512-01 - Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Issues addressed[…]

Red Hat Security Advisory 2019-2511-01

Red Hat Security Advisory 2019-2511-01 - MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. As usual, Oracle refuses to give details on the vulnerabilities.

Red Hat Security Advisory 2019-2506-01

Red Hat Security Advisory 2019-2506-01 - Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data[…]

Red Hat Security Advisory 2019-2503-01

Red Hat Security Advisory 2019-2503-01 - Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron. Issues addressed include a cross site request forgery vulnerability.

Red Hat Security Advisory 2019-2504-01

Red Hat Security Advisory 2019-2504-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. An access issue was addressed.

The Product Security Blog has moved!

Red Hat Product Security has joined forces with other security teams inside Red Hat to publish our content in a common venue using the Security channel of the Red Hat Blog.This move provides a wider variety of important Security topics,[…]

New Red Hat Product Security OpenPGP key

Red Hat Product Security has transitioned from using its old 1024-bit DSA OpenPGP key to a new 4096-bit RSA OpenPGP key.This was done to improve the long-term security of our communications with our customers and also to meet current key[…]

Managing risk in the modern world

Things can be pretty scary out there today. There are a lot of things that could occur that make even the calmest amongst us take pause. Everything we do is a series of risk-based decisions that we hope leads to[…]

Security Technologies: ExecShield

The world of computer security has changed dramatically in the last few years. Keeping your operating system updated with the latest security patches is no longer sufficient. Operating system providers need to be more proactive in combating security problems. A[…]

Insights Security Hardening Rules

Many users of Red Hat Insights are familiar with the security rules we create to alert them about security vulnerabilities on their system, especially concerning high-profile issues such as Spectre/Meltdown or Heartbleed. In this post, I'd like to talk about[…]

RHBA-2019:0500-1: nss-pem bug fix update

Red Hat Enterprise Linux:Updated nss-pem packages that fix one bug are now available for Red HatEnterprise Linux 7.6.

RHBA-2019:0498-1: rear bug fix update

Red Hat Enterprise Linux:Updated rear packages that fix several bugs are now available for Red HatEnterprise Linux 7.

RHBA-2019:0496-1: tuned bug fix update

Red Hat Enterprise Linux:Updated tuned packages that fix two bugs are now available for Red HatEnterprise Linux 7.

RHBA-2019:0484-1: dpdk bug fix update

Red Hat Enterprise Linux:Updated dpdk packages that fix one bug are now available in the Extras channelof Red Hat Enterprise Linux 7.

RHEA-2019:0543-1: new packages: rh-jmc

Red Hat Enterprise Linux:New rh-jmc packages are now available as a part of Red Hat Software Collections3.2 for Red Hat Enterprise Linux 7.

Debian: DSA-4503-1: golang-1.11 security update

Three vulnerabilities have been discovered in the Go programming language; "net/url" accepted some invalid hosts in URLs which could result in authorisation bypass in some applications and the HTTP/2 implementation was susceptible to denial of service.

Debian: DSA-4502-1: ffmpeg security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.

Debian: DSA-4501-1: libreoffice security update

It was discovered that the code fixes to address CVE-2018-16858 and CVE-2019-9848 were not complete. For the oldstable distribution (stretch), these problems have been fixed

Debian Security Advisory 4497-1

Debian Linux Security Advisory 4497-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

Debian: DSA-4497-1: linux security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

Debian Security Advisory 4494-1

Debian Linux Security Advisory 4494-1 - Dominik Penner discovered that KConfig, the KDE configuration settings framework, supported a feature to define shell command execution in .desktop files. If a user is provided with a malformed .desktop file (e.g. if it's[…]

Debian Security Advisory 4496-1

Debian Linux Security Advisory 4496-1 - Benno Fuenfstueck discovered that Pango, a library for layout and rendering of text with an emphasis on internationalization, is prone to a heap-based buffer overflow flaw in the pango_log2vis_get_embedding_levels function. An attacker can take[…]

Debian: DSA-4499-1: ghostscript security update

Netanel reported that the .buildfont1 procedure in Ghostscript, the GPL PostScript/PDF interpreter, does not properly restrict privileged calls, which could result in bypass of file system restrictions of the dSAFER sandbox.

Debian: DSA-4496-1: pango1.0 security update

Benno Fuenfstueck discovered that Pango, a library for layout and rendering of text with an emphasis on internationalization, is prone to a heap-based buffer overflow flaw in the pango_log2vis_get_embedding_levels function. An attacker can take advantage of this flaw for denial[…]

Debian: DSA-4494-1: kconfig security update

Dominik Penner discovered that KConfig, the KDE configuration settings framework, supported a feature to define shell command execution in .desktop files. If a user is provided with a malformed .desktop file (e.g. if it's embedded into a downloaded archive and[…]

SystemTap 1.3 MODPROBE_OPTIONS Privilege Escalation

This Metasploit module attempts to gain root privileges by exploiting a vulnerability in the staprun executable included with SystemTap version 1.3. The staprun executable does not clear environment variables prior to executing modprobe, allowing an arbitrary configuration file to be[…]

Linux Kernel Local Privilege Escalation

Linux kernels prior to version 4.13.9 (Ubuntu 16.04/Fedora 27) local privilege escalation exploit.

Reliable Datagram Sockets (RDS) Privilege Escalation

This Metasploit module exploits a vulnerability in the rds_page_copy_user function in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This Metasploit module has been tested successfully on Fedora 13 (i686) with kernel version[…]

MagniComp SysInfo mcsiwrapper Privilege Escalation

This Metasploit module attempts to gain root privileges on systems running MagniComp SysInfo versions prior to 10-H64. The .mcsiwrapper suid executable allows loading a config file using the '--configfile' argument. The 'ExecPath' config directive is used to set the executable[…]

glibc '$ORIGIN' Expansion Privilege Escalation

This Metasploit module attempts to gain root privileges on Linux systems by abusing a vulnerability in the GNU C Library (glibc) dynamic linker. glibc ld.so in versions before 2.11.3, and 2.12.x before 2.12.2 does not properly restrict use of the[…]

xdm -- remote denial of service

Apache -- Multiple vulnerabilities

CUPS -- multiple vulnerabilities

NGINX -- Multiple vulnerabilities

Gitlab -- Multiple Vulnerabilities

Security update for clamav 1509

Abstract: Moderate: Security update for clamavPatch: SUSE-SLE-Module-Basesystem-15-2018-1509 CVEs:CVE-2018-0360, CVE-2018-0361 Bugs:1101654, 1101410, 1101412, 1103040Applies to:Package(s): clamav clamav-devel libclamav7 libclammspack0Product(s):SUSE Linux Enterprise Server 15Downloads: SUSE Linux Enterprise Server 15 for x86-64SUSE Linux Enterprise Server 15 for s390xSUSE Linux Enterprise Server 15 for[…]

Security update for libcdio 1512

Abstract: Security update for libcdioPatch: SUSE-SLE-Module-Desktop-Applications-15-2018-1512 CVEs:CVE-2017-18199, CVE-2017-18201 Bugs:1082821, 1082877Applies to:Package(s): libcdio++0 libcdio-devel libcdio16 libiso9660-10 libudf0Product(s):SUSE Linux Enterprise Server 15Downloads: SUSE Linux Enterprise Desktop 15 for x86-64SUSE Linux Enterprise Server 15 for s390xSUSE Linux Enterprise Server 15 for ppc64leSUSE Linux[…]

Security update for cups 13718

Abstract: Moderate: Security update for cupsPatch: sdksp4-cups-13718 CVEs:CVE-2018-4182, CVE-2018-4183, CVE-2018-4180, CVE-2018-4181 Bugs:1096408, 1096405, 1096407, 1096406Applies to:Package(s): cups-develProduct(s):SUSE Linux Enterprise Software Development Kit 11 SP4Downloads: SUSE Linux Enterprise Server 11 SP4 for x86-64SUSE Linux Enterprise Server 11 SP4 for x86SUSE Linux[…]

Security update for rubygem-sprockets-2_12 1500

Abstract: Moderate: Security update for rubygem-sprockets-2_12Patch: SUSE-OpenStack-Cloud-7-2018-1500 CVEs:CVE-2018-3760 Bugs:1098369Applies to:Package(s): ruby2.1-rubygem-sprockets-2_12Product(s):SUSE OpenStack Cloud 7Downloads: SUSE OpenStack Cloud 7 for x86-64

Security update for openssl 13713

Abstract: Moderate: Security update for opensslPatch: slestso13-openssl-13713 CVEs:CVE-2018-0732 Bugs:1097158, 1097624, 1098592Applies to:Package(s): libopenssl-develProduct(s):SUSE Studio Onsite 1.3Downloads: SUSE Linux Enterprise Point of Service 11 SP3 for x86SUSE Linux Enterprise Server 11 SP4 for x86-64SUSE Linux Enterprise Server 11 SP4 for x86SUSE[…]