No Image

RHSA-2016:0083-1: Important: qemu-kvm security and bug fix update

2016-01-29 KENNETH 0

Red Hat Enterprise Linux: Updated qemu-kvm packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. CVE-2016-1714 Source: rhn-errata

No Image

RHSA-2016:0082-1: Important: qemu-kvm security update

2016-01-29 KENNETH 0

Red Hat Enterprise Linux: Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. CVE-2016-1714 Source: rhn-errata

No Image

RHSA-2016:0081-1: Important: qemu-kvm-rhev security update

2016-01-29 KENNETH 0

Red Hat Enterprise Linux: Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. CVE-2016-1714 Source: rhn-errata

No Image

USN-2883-1: OpenSSL vulnerability

2016-01-29 KENNETH 0

Ubuntu Security Notice USN-2883-1 28th January, 2016 openssl vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Summary OpenSSL could be made to expose sensitive information over the network. Software description openssl – Secure Socket Layer (SSL) cryptographic library and tools Details Antonio Sanso discovered that OpenSSL reused the same private DH exponentfor the life of a server process when configured with a X9.42 styleparameter file. This could allow a remote attacker to possibly discover theserver's private DH exponent when being used with non-safe primes. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 15.10: libssl1.0.0 1.0.2d-0ubuntu1.3 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need to reboot your computer to makeall the necessary changes. References CVE-2016-0701 Source: ubuntu-usn

No Image

Restricting Connections to Secure Transport

2016-01-29 KENNETH 0

MySQL 5.7 makes secure connections easier with streamlined key generation for both MySQL Community and MySQL Enterprise, improves security by expanding support for TLSv1.1 and TLSv1.2, and helps administrators assess whether clients are connecting securely or not with new visibility into connection types. … Source: mysqlserverteam.com