RHBA-2015:2635-1: lvm2 bug fix update
Red Hat Enterprise Linux: Updated lvm2 packages that fix one bug are now available for Red Hat Enterprise Linux 6. Source: rhn-errata
SECURITY
RHBA-2015:2638-1: logrotate bug fix update
Red Hat Enterprise Linux: Updated logrotate packages that fix one bug are now available for Red Hat Enterprise Linux 6. Source: rhn-errata
RHEA-2015:2624-1: virtio-win enhancement update
Red Hat Enterprise Linux: An updated virtio-win package that adds one enhancement is now available for Red Hat Enterprise Linux 6. Source: rhn-errata
RHSA-2015:2623-1: Moderate: grub2 security and bug fix update
Red Hat Enterprise Linux: Updated grub2 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. CVE-2015-8370 Source: rhn-errata
USN-2834-1: libxml2 vulnerabilities
Ubuntu Security Notice USN-2834-1 14th December, 2015 libxml2 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Ubuntu 15.04 Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary libxml2 could be made to crash if it opened a specially crafted file. Software description libxml2 – GNOME XML library Details Kostya Serebryany discovered that libxml2 incorrectly handled certainmalformed documents. If a user or automated system were tricked intoopening a specially crafted document, an attacker could possibly causelibxml2 to crash, resulting in a denial of service. (CVE-2015-5312,CVE-2015-7497, CVE-2015-7498, CVE-2015-7499,CVE-2015-7500) Hugh Davenport discovered that libxml2 incorrectly handled certainmalformed documents. If a user or automated system were tricked intoopening a specially crafted document, an attacker could possibly causelibxml2 to crash, resulting in a denial of service. (CVE-2015-8241,CVE-2015-8242) Hanno Boeck discovered that libxml2 incorrectly handled certainmalformed documents. If a user or automated [ more… ]