Month: junio 2018

Red Hat Enterprise Linux: An update for qemu-kvm-rhev is now available for Red Hat Virtualization 4 forRed Hat Enterprise Linux 7.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2018-3639 More info: http://rhn.redhat.com/errata/RHSA-2018-2060.html

OpenSSH vulnerability CVE-2008-3259. Security Advisory. Security Advisory Description. OpenSSH before 5.1 sets the SO_REUSEADDR ... More info: https://support.f5.com/csp/article/K14382

SSL Forward Proxy vulnerability CVE-2018-5527. Security Advisory. Security Advisory Description. A remote attacker using ... More info: https://support.f5.com/csp/article/K20134942

Several security issues have been found in the Mozilla Firefox webbrowser: Multiple memory safety errors and other implementation errors maylead to the execution of arbitrary code, denial of service, cross-siterequest forgery or information disclosure. More info: https://www.debian.org/security/2018/dsa-4235

Linux kernel vulnerability CVE-2012-6701. Security Advisory. Security Advisory Description. Integer overflow in fs/aio.c in ... More info: https://support.f5.com/csp/article/K13213573

TMM vulnerability CVE-2018-5528. Security Advisory. Security Advisory Description. ** RESERVED ** This candidate has ... More info: https://support.f5.com/csp/article/K27044729

TMM vulnerability CVE-2018-5528. Security Advisory. Security Advisory Description. ** RESERVED ** This candidate has ... More info: https://support.f5.com/csp/article/K27044729

TMM vulnerability CVE-2018-5528. Security Advisory. Security Advisory Description. ** RESERVED ** This candidate has ... More info: https://support.f5.com/csp/article/K27044729

Project: Drupal coreDate: 2018-April-25Security risk: Highly critical 20∕25 AC:Basic/A:User/CI:All/II:All/E:Exploit/TD:DefaultVulnerability: Remote Code ExecutionCVE IDs: CVE-2018-7602Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical More info: https://www.drupal.org/sa-core-2018-004

Project: Drupal coreDate: 2018-March-28Security risk: Highly critical 24∕25 AC:None/A:None/CI:All/II:All/E:Exploit/TD:DefaultVulnerability: Remote Code Execution CVE IDs: CVE-2018-7600Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised.The security team has written an FAQ about this More info: https://www.drupal.org/sa-core-2018-002