Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 6 articles for you...
98
security advisoryRed HatupdateRed Hat Enterprise Linux 8 RHSA-2020-4689-01 Security Update: openwsman DoS
An update for openwsman is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openwsman security update Advisory ID: RHSA-2020:4689-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:4689 Issue date: 2020-11-03 CVE Names: CVE-2019-3833 ==================================================================== 1. Summary: An update for openwsman is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects. Security Fix(es): * openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. AdditionalChanges: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1674478 - CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: openwsman-2.6.5-7.el8.src.rpm aarch64: libwsman1-2.6.5-7.el8.aarch64.rpm libwsman1-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-client-2.6.5-7.el8.aarch64.rpm openwsman-client-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-debugsource-2.6.5-7.el8.aarch64.rpm openwsman-perl-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-python3-2.6.5-7.el8.aarch64.rpm openwsman-python3-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-server-2.6.5-7.el8.aarch64.rpm openwsman-server-debuginfo-2.6.5-7.el8.aarch64.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.aarch64.rpm ppc64le: libwsman1-2.6.5-7.el8.ppc64le.rpm libwsman1-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-client-2.6.5-7.el8.ppc64le.rpm openwsman-client-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-debugsource-2.6.5-7.el8.ppc64le.rpm openwsman-perl-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-python3-2.6.5-7.el8.ppc64le.rpm openwsman-python3-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-server-2.6.5-7.el8.ppc64le.rpm openwsman-server-debuginfo-2.6.5-7.el8.ppc64le.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.ppc64le.rpm s390x: libwsman1-2.6.5-7.el8.s390x.rpm libwsman1-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-client-2.6.5-7.el8.s390x.rpm openwsman-client-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-debugsource-2.6.5-7.el8.s390x.rpm openwsman-perl-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-python3-2.6.5-7.el8.s390x.rpm openwsman-python3-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-server-2.6.5-7.el8.s390x.rpm openwsman-server-debuginfo-2.6.5-7.el8.s390x.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.s390x.rpm x86_64: libwsman1-2.6.5-7.el8.i686.rpm libwsman1-2.6.5-7.el8.x86_64.rpm libwsman1-debuginfo-2.6.5-7.el8.i686.rpm libwsman1-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-client-2.6.5-7.el8.i686.rpm openwsman-client-2.6.5-7.el8.x86_64.rpm openwsman-client-debuginfo-2.6.5-7.el8.i686.rpm openwsman-client-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-debuginfo-2.6.5-7.el8.i686.rpm openwsman-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-debugsource-2.6.5-7.el8.i686.rpm openwsman-debugsource-2.6.5-7.el8.x86_64.rpm openwsman-perl-debuginfo-2.6.5-7.el8.i686.rpm openwsman-perl-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-python3-2.6.5-7.el8.x86_64.rpm openwsman-python3-debuginfo-2.6.5-7.el8.i686.rpm openwsman-python3-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-server-2.6.5-7.el8.i686.rpm openwsman-server-2.6.5-7.el8.x86_64.rpm openwsman-server-debuginfo-2.6.5-7.el8.i686.rpm openwsman-server-debuginfo-2.6.5-7.el8.x86_64.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.i686.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.x86_64.rpm Red Hat CodeReady Linux Builder (v.8): aarch64: libwsman-devel-2.6.5-7.el8.aarch64.rpm libwsman1-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-client-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-debugsource-2.6.5-7.el8.aarch64.rpm openwsman-perl-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-python3-debuginfo-2.6.5-7.el8.aarch64.rpm openwsman-server-debuginfo-2.6.5-7.el8.aarch64.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.aarch64.rpm ppc64le: libwsman-devel-2.6.5-7.el8.ppc64le.rpm libwsman1-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-client-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-debugsource-2.6.5-7.el8.ppc64le.rpm openwsman-perl-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-python3-debuginfo-2.6.5-7.el8.ppc64le.rpm openwsman-server-debuginfo-2.6.5-7.el8.ppc64le.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.ppc64le.rpm s390x: libwsman-devel-2.6.5-7.el8.s390x.rpm libwsman1-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-client-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-debugsource-2.6.5-7.el8.s390x.rpm openwsman-perl-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-python3-debuginfo-2.6.5-7.el8.s390x.rpm openwsman-server-debuginfo-2.6.5-7.el8.s390x.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.s390x.rpm x86_64: libwsman-devel-2.6.5-7.el8.i686.rpm libwsman-devel-2.6.5-7.el8.x86_64.rpm libwsman1-debuginfo-2.6.5-7.el8.i686.rpm libwsman1-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-client-debuginfo-2.6.5-7.el8.i686.rpm openwsman-client-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-debuginfo-2.6.5-7.el8.i686.rpm openwsman-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-debugsource-2.6.5-7.el8.i686.rpm openwsman-debugsource-2.6.5-7.el8.x86_64.rpm openwsman-perl-debuginfo-2.6.5-7.el8.i686.rpm openwsman-perl-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-python3-debuginfo-2.6.5-7.el8.i686.rpm openwsman-python3-debuginfo-2.6.5-7.el8.x86_64.rpm openwsman-server-debuginfo-2.6.5-7.el8.i686.rpm openwsman-server-debuginfo-2.6.5-7.el8.x86_64.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.i686.rpm rubygem-openwsman-debuginfo-2.6.5-7.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-3833 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX6I1GNzjgjWX9erEAQjIiw//QyTCehdnTiLzMzagNZ9M+4YID2adWXCT GF7AQApTdlNaIiniPd013VJbFeEQR8WxSx29a3ed8ahzg+6PYeO2zajgRQvh87rN UwmvT1gkRb7pnk2hX9Z0MCNPSohwFjHBRl8JfplQxRG0E41OYXlNsN7S8uNPHvpJ m+7GCZXjXkMPzv5uo1fp3bcjaqPcQkfeGqr8mJZd4mrT7JrcaxjPe1T5Jz2tzT7O MEQbbcOqi+mAZ2Qvx/j5YHrKvvBQqKZlJ6kF1466cSeY7bCstlUJjUpTCZBQkSDX NCJTnR4HmnCMC2vCvHaRwVUCEPyPvpzcLlIFurCtsL4oyIwfL/WR4Z1R7dRl6Wgo RVSR7VHTxtHZcgJMmAy0tZDvJHxaNutfpWMKi7eb5NQf8kou5G8rC/yJP8EnzKWY g89F10Oq6dey4zTeHjEiXNi2FfE/t4zGcwmr4pRcnDVZr1gKW3ES98zC5jOzwP2W zmT6+5DgecBbStLXmXkCgtL8Gl4b3xOCPpmdEFwAIDN9cX7qgVilgu2GlaRlmS1h wEnEcyQWbGnh+S5B84FDoV365DEghvnoNuKuValTwysFu9A7bEAhI7uCMSDhVtSt AITjwqjiEHeKg2UKF3Rs7Qo2trmpm/7hAJ3ltCCPH/r3N9JAktUL0SwDuwgrhn1S iV08h/iXe+8=Q30g -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 03, 2020
Red Hat
98
security advisorymoderatedenial of serviceRedHat: RHSA-2020-3940-01 Moderate: openwsman Denial Of Service
An update for openwsman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openwsman security update Advisory ID: RHSA-2020:3940-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:3940 Issue date: 2020-09-29 CVE Names: CVE-2019-3833 ==================================================================== 1. Summary: An update for openwsman is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover allsystem management aspects. Security Fix(es): * openwsman: Infinite loop in process_connection() allows denial of service (CVE-2019-3833) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1674478 - CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: openwsman-2.6.3-7.git4391e5c.el7.src.rpm x86_64: libwsman1-2.6.3-7.git4391e5c.el7.i686.rpm libwsman1-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-client-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-client-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-server-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-server-2.6.3-7.git4391e5c.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: libwsman-devel-2.6.3-7.git4391e5c.el7.i686.rpm libwsman-devel-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-perl-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-python-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-ruby-2.6.3-7.git4391e5c.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v.7): Source: openwsman-2.6.3-7.git4391e5c.el7.src.rpm x86_64: libwsman1-2.6.3-7.git4391e5c.el7.i686.rpm libwsman1-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-client-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-client-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-python-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-server-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-server-2.6.3-7.git4391e5c.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: libwsman-devel-2.6.3-7.git4391e5c.el7.i686.rpm libwsman-devel-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-perl-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-ruby-2.6.3-7.git4391e5c.el7.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: openwsman-2.6.3-7.git4391e5c.el7.src.rpm ppc64: libwsman1-2.6.3-7.git4391e5c.el7.ppc.rpm libwsman1-2.6.3-7.git4391e5c.el7.ppc64.rpm openwsman-client-2.6.3-7.git4391e5c.el7.ppc.rpm openwsman-client-2.6.3-7.git4391e5c.el7.ppc64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.ppc.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.ppc64.rpm openwsman-python-2.6.3-7.git4391e5c.el7.ppc64.rpm openwsman-server-2.6.3-7.git4391e5c.el7.ppc.rpm openwsman-server-2.6.3-7.git4391e5c.el7.ppc64.rpm ppc64le: libwsman1-2.6.3-7.git4391e5c.el7.ppc64le.rpm openwsman-client-2.6.3-7.git4391e5c.el7.ppc64le.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.ppc64le.rpm openwsman-python-2.6.3-7.git4391e5c.el7.ppc64le.rpm openwsman-server-2.6.3-7.git4391e5c.el7.ppc64le.rpm s390x: libwsman1-2.6.3-7.git4391e5c.el7.s390.rpm libwsman1-2.6.3-7.git4391e5c.el7.s390x.rpm openwsman-client-2.6.3-7.git4391e5c.el7.s390.rpm openwsman-client-2.6.3-7.git4391e5c.el7.s390x.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.s390.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.s390x.rpm openwsman-python-2.6.3-7.git4391e5c.el7.s390x.rpm openwsman-server-2.6.3-7.git4391e5c.el7.s390.rpm openwsman-server-2.6.3-7.git4391e5c.el7.s390x.rpm x86_64: libwsman1-2.6.3-7.git4391e5c.el7.i686.rpm libwsman1-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-client-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-client-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-python-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-server-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-server-2.6.3-7.git4391e5c.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.7): ppc64: libwsman-devel-2.6.3-7.git4391e5c.el7.ppc.rpm libwsman-devel-2.6.3-7.git4391e5c.el7.ppc64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.ppc.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.ppc64.rpm openwsman-perl-2.6.3-7.git4391e5c.el7.ppc64.rpm openwsman-ruby-2.6.3-7.git4391e5c.el7.ppc64.rpm ppc64le: libwsman-devel-2.6.3-7.git4391e5c.el7.ppc64le.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.ppc64le.rpm openwsman-perl-2.6.3-7.git4391e5c.el7.ppc64le.rpm openwsman-ruby-2.6.3-7.git4391e5c.el7.ppc64le.rpm s390x: libwsman-devel-2.6.3-7.git4391e5c.el7.s390.rpm libwsman-devel-2.6.3-7.git4391e5c.el7.s390x.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.s390.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.s390x.rpm openwsman-perl-2.6.3-7.git4391e5c.el7.s390x.rpm openwsman-ruby-2.6.3-7.git4391e5c.el7.s390x.rpm x86_64: libwsman-devel-2.6.3-7.git4391e5c.el7.i686.rpm libwsman-devel-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-perl-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-ruby-2.6.3-7.git4391e5c.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: openwsman-2.6.3-7.git4391e5c.el7.src.rpm x86_64: libwsman1-2.6.3-7.git4391e5c.el7.i686.rpm libwsman1-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-client-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-client-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-python-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-server-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-server-2.6.3-7.git4391e5c.el7.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.7): x86_64: libwsman-devel-2.6.3-7.git4391e5c.el7.i686.rpm libwsman-devel-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.i686.rpm openwsman-debuginfo-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-perl-2.6.3-7.git4391e5c.el7.x86_64.rpm openwsman-ruby-2.6.3-7.git4391e5c.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-3833 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX3OkatzjgjWX9erEAQjr8w/7B16lQGqUrYIh0188A0kNhYDGkHO1GL8X Wui+PtEP1UeDxUPtLMerWdjc6StapCUU97kEm/YgiLo2WP6gBLGZW8K6KejG/s9Q ZT45uTV1itlMPt3U1N1exL9XxfzKcPxUUH8Upm3EKXEx1K0KONl7a3T8Qqlxk0Ia +ufuQ6mi1Ntfn96voL289xMZfTyu/tREKOJPakIeYxwyqc2qUGcAeeheZkyqLoSj neVH5DkwSkllMknIA+M80aHSjdLzpwg72hOhVrW6h2y3nzTOUfRB9tTw8B8GR54t 9pBSVINBi2wxWOCFihOdZhxMSU8WcGnwiM5d5HItJqIB7UnohwBdc3qulOsq6vPF LP3TaOfW3RTYr27yiaBTcm0IUCfanGo2oB6GrTljKoE7042FrMrBaIog1q+5W12P alPy/jgK6TMHolSQhhf2Mrlv4xw07q7fmn49DutztktQrOm/JxA7Q0yTbUK5fF5F 2F6ijumj38kwH2NdixflZv4okFcjq/Vt6BrYdPLte5Zk9qdZhsbvgyt0gPikVFW+ bnHJLwnMo1+nmfId/vCilFLZo/XdAhlLjWE4pxkzvSgjtKs7J+8PsdhJLi/kv7xt QhJx7vfbBP6M/2gBk73kwmYtCAr8Ncqpc6N1qaf/x0fDKTfirHwe4g8SwWoXKaYe 0yK9igEdn3E=98P3 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 29, 2020
•Important
Red Hat
98
security advisorysecurity updateimportantRedHat Enterprise Linux 8 RHSA-2019-0972-01 Important Openwsman Update
An update for openwsman is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: openwsman security update Advisory ID: RHSA-2019:0972-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:0972 Issue date: 2019-05-07 CVE Names: CVE-2019-3816 ==================================================================== 1. Summary: An update for openwsman is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: Openwsman is a project intended to provide an open source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that cover all system management aspects. Security Fix(es): * openwsman: Disclosure of arbitrary files outside of the registered URIs (CVE-2019-3816) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4.Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1667070 - CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: openwsman-2.6.5-5.el8.src.rpm aarch64: libwsman1-2.6.5-5.el8.aarch64.rpm libwsman1-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-client-2.6.5-5.el8.aarch64.rpm openwsman-client-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-debugsource-2.6.5-5.el8.aarch64.rpm openwsman-perl-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-python3-2.6.5-5.el8.aarch64.rpm openwsman-python3-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-server-2.6.5-5.el8.aarch64.rpm openwsman-server-debuginfo-2.6.5-5.el8.aarch64.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.aarch64.rpm ppc64le: libwsman1-2.6.5-5.el8.ppc64le.rpm libwsman1-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-client-2.6.5-5.el8.ppc64le.rpm openwsman-client-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-debugsource-2.6.5-5.el8.ppc64le.rpm openwsman-perl-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-python3-2.6.5-5.el8.ppc64le.rpm openwsman-python3-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-server-2.6.5-5.el8.ppc64le.rpm openwsman-server-debuginfo-2.6.5-5.el8.ppc64le.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.ppc64le.rpm s390x: libwsman1-2.6.5-5.el8.s390x.rpm libwsman1-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-client-2.6.5-5.el8.s390x.rpm openwsman-client-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-debugsource-2.6.5-5.el8.s390x.rpm openwsman-perl-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-python3-2.6.5-5.el8.s390x.rpm openwsman-python3-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-server-2.6.5-5.el8.s390x.rpm openwsman-server-debuginfo-2.6.5-5.el8.s390x.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.s390x.rpm x86_64: libwsman1-2.6.5-5.el8.i686.rpm libwsman1-2.6.5-5.el8.x86_64.rpm libwsman1-debuginfo-2.6.5-5.el8.i686.rpm libwsman1-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-client-2.6.5-5.el8.i686.rpm openwsman-client-2.6.5-5.el8.x86_64.rpm openwsman-client-debuginfo-2.6.5-5.el8.i686.rpm openwsman-client-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-debuginfo-2.6.5-5.el8.i686.rpm openwsman-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-debugsource-2.6.5-5.el8.i686.rpm openwsman-debugsource-2.6.5-5.el8.x86_64.rpm openwsman-perl-debuginfo-2.6.5-5.el8.i686.rpm openwsman-perl-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-python3-2.6.5-5.el8.x86_64.rpm openwsman-python3-debuginfo-2.6.5-5.el8.i686.rpm openwsman-python3-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-server-2.6.5-5.el8.i686.rpm openwsman-server-2.6.5-5.el8.x86_64.rpm openwsman-server-debuginfo-2.6.5-5.el8.i686.rpm openwsman-server-debuginfo-2.6.5-5.el8.x86_64.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.i686.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.x86_64.rpm Red Hat CodeReady Linux Builder (v.8): aarch64: libwsman-devel-2.6.5-5.el8.aarch64.rpm libwsman1-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-client-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-debugsource-2.6.5-5.el8.aarch64.rpm openwsman-perl-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-python3-debuginfo-2.6.5-5.el8.aarch64.rpm openwsman-server-debuginfo-2.6.5-5.el8.aarch64.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.aarch64.rpm ppc64le: libwsman-devel-2.6.5-5.el8.ppc64le.rpm libwsman1-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-client-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-debugsource-2.6.5-5.el8.ppc64le.rpm openwsman-perl-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-python3-debuginfo-2.6.5-5.el8.ppc64le.rpm openwsman-server-debuginfo-2.6.5-5.el8.ppc64le.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.ppc64le.rpm s390x: libwsman-devel-2.6.5-5.el8.s390x.rpm libwsman1-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-client-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-debugsource-2.6.5-5.el8.s390x.rpm openwsman-perl-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-python3-debuginfo-2.6.5-5.el8.s390x.rpm openwsman-server-debuginfo-2.6.5-5.el8.s390x.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.s390x.rpm x86_64: libwsman-devel-2.6.5-5.el8.i686.rpm libwsman-devel-2.6.5-5.el8.x86_64.rpm libwsman1-debuginfo-2.6.5-5.el8.i686.rpm libwsman1-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-client-debuginfo-2.6.5-5.el8.i686.rpm openwsman-client-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-debuginfo-2.6.5-5.el8.i686.rpm openwsman-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-debugsource-2.6.5-5.el8.i686.rpm openwsman-debugsource-2.6.5-5.el8.x86_64.rpm openwsman-perl-debuginfo-2.6.5-5.el8.i686.rpm openwsman-perl-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-python3-debuginfo-2.6.5-5.el8.i686.rpm openwsman-python3-debuginfo-2.6.5-5.el8.x86_64.rpm openwsman-server-debuginfo-2.6.5-5.el8.i686.rpm openwsman-server-debuginfo-2.6.5-5.el8.x86_64.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.i686.rpm rubygem-openwsman-debuginfo-2.6.5-5.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-3816 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXNEIjdzjgjWX9erEAQib6w/5AXCVf4Y75GemIS38JR0XBpqrW2hrpNRt 504nGH/z2TdcxHHszSACn+mbfwtQJtlWyCWTMi/x39EJ0bCOy5SxBQgznNbYj6gc ypotiGW7veNhBJX0wHUIFvF03wicjEjrL2U1aVlVDRg3mXKNoweojETmNyatYqFe J2NArBp6lU7C2FX+9CXd8HPQSl2HTy/SrjG740xvdO/ZUJLe22XqtHCnCJh6h2iu xAOJ+VW6FGPgxVP+m7cVHwWSca1mvQDAsbMpDuV1tYyWVSIdWDensPC/uAVknXlv CGtfZMZj/a+n6DrfUDY7mqdkpVtV61SaJFyZ/a8XIYlgiFob8Sr9m2qDhCwkf+7C Ztz1j4Ql989UYxxzGXMzXvx1+R0VLyDi7Q1nNcpZaEBeyWujToC1moSnRmyEvyrw KcSJKotEdtPdKulcpM8t+8QnIDoOF9Tji3b85PaVCOW2QsaP54X5cAQAnHJnssXC eb66pYITQEBuvVSSDrleKy2EYBkSXewSb2b7a55qUzt6o4h8LCzXr5sd/gbJH4vX LTBLECJb7DJsBXVZn7fk5zTCQVA4nM+soQIXMX3z+NqnVm2E0RsbDfWGFpfGnWWa KhCh/8UrCNVKhWyGYS/RustFDChrrWEZNNdaKRvfSqbJDYkuGkamPltmse4SsGB7 UXxwJ6buaFY=jISB -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 07, 2019
•Important
Red Hat
199
security advisorysecurity issuecritical threatCentOS 7: CESA-2019-0638 Critical: Openwsman Security Issues Update
Upstream details at : https://access.redhat.com/errata/RHSA-2019:0638. CentOS Errata and Security Advisory 2019:0638 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:0638 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 33f8ea7f389485fb3997848c47e5fb01a19939e8fa13fa35b1330a1f9193cda1 libwsman1-2.6.3-6.git4391e5c.el7_6.i686.rpm 52772584a6c4b25710350bba42b8539386c7eebd1dc10a1937afc810e189479c libwsman1-2.6.3-6.git4391e5c.el7_6.x86_64.rpm 38f0b77b51a6779dfdbaea4ec56edd1a44b0dd4b08bf825b223cdee7890ea6f3 libwsman-devel-2.6.3-6.git4391e5c.el7_6.i686.rpm 44e029ac26748d1ef9d89ae5529b6f6ef3b705e9cf2f8a7af61a297847e02077 libwsman-devel-2.6.3-6.git4391e5c.el7_6.x86_64.rpm 594f646e9625dff7ce7a3cd10141688b70e97465b34db41acd97c78a12b94dda openwsman-client-2.6.3-6.git4391e5c.el7_6.i686.rpm c20714bf096f8f1fb437387d829ee070da4b7ec6c71f9777b232277f8936b0cb openwsman-client-2.6.3-6.git4391e5c.el7_6.x86_64.rpm 3e5dc73de9658058f09939c7f37bc8142e497e5608c5f40c0f729a79431b2875 openwsman-perl-2.6.3-6.git4391e5c.el7_6.x86_64.rpm d35a655954338813b2bf8c555c08532a028116233e301c73112ec4d024343e94 openwsman-python-2.6.3-6.git4391e5c.el7_6.x86_64.rpm f2c27cc2bb522cea6b1a6fcfb9466a47a1cce7e9d9270b4ecca2613166ae4523 openwsman-ruby-2.6.3-6.git4391e5c.el7_6.x86_64.rpm d178342b37039a400282f362206ad06b78719fd0fe4a31ee0c38fa895f9536ce openwsman-server-2.6.3-6.git4391e5c.el7_6.i686.rpm c21b0800b68655241bab770df8729ee434b9139ecb6c86ca75d594e11daaab26 openwsman-server-2.6.3-6.git4391e5c.el7_6.x86_64.rpm Source: 634cb9f7b2b4aee668a06c8d14b51a4e3681a24a7796f25c06b6910be16eff58 openwsman-2.6.3-6.git4391e5c.el7_6.src.rpm -- Johnny Hughes CentOS Project { https://www.centos.org/ } irc: hughesjr, #
Apr 30, 2019
•Critical
CentOS
202
security advisorysecurity updateDoSopenSUSE Leap 42.3: 2019:1217-1 Important: openwsman DoS and Disclosure
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for openwsman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1217-1 Rating: important References: #1092206 #1122623 Cross-References: CVE-2019-3816 CVE-2019-3833 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openwsman fixes the following issues: Security issues fixed: - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection() which could allow an attacker to trigger an infinite loop which leads to Denial of Service (bsc#1122623). Other issues addressed: - Directory listing without authentication fixed (bsc#1092206). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1217=1 Package List: - openSUSE Leap 42.3 (x86_64): libwsman-devel-2.6.7-4.3.1 libwsman3-2.6.7-4.3.1 libwsman3-debuginfo-2.6.7-4.3.1 libwsman_clientpp-devel-2.6.7-4.3.1 libwsman_clientpp1-2.6.7-4.3.1 libwsman_clientpp1-debuginfo-2.6.7-4.3.1 openwsman-debugsource-2.6.7-4.3.1 openwsman-java-2.6.7-4.3.1 openwsman-perl-2.6.7-4.3.1 openwsman-perl-debuginfo-2.6.7-4.3.1 openwsman-python-2.6.7-4.3.1 openwsman-python-debuginfo-2.6.7-4.3.1 openwsman-ruby-2.6.7-4.3.1 openwsman-ruby-debuginfo-2.6.7-4.3.1 openwsman-ruby-docs-2.6.7-4.3.1 openwsman-server-2.6.7-4.3.1 openwsman-server-debuginfo-2.6.7-4.3.1 openwsman-server-plugin-ruby-2.6.7-4.3.1 openwsman-server-plugin-ruby-debuginfo-2.6.7-4.3.1 winrs-2.6.7-4.3.1 References: https://www.suse.com/security/cve/CVE-2019-3816.html https://www.suse.com/security/cve/CVE-2019-3833.html https://bugzilla.suse.com/1092206 https://bugzilla.suse.com/1122623 -- . A vital security patch for openwsman addresses two significant vulnerabilities in openSUSE Leap 42.3, complete with essential guidelines for implementation.. openSUSE Update, Openwsman Security, Important Security Fixes, Denial of Service, Arbitrary File Disclosure. . Severity: Important. LinuxSecurity.com Team
Apr 16, 2019
•Important
OpenSUSE
202
security advisorydenial of servicecritical severityopenSUSE 15.0: 2019:1111-1 Important: Openwsman DoS Issues
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for openwsman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1111-1 Rating: important References: #1092206 #1122623 Cross-References: CVE-2019-3816 CVE-2019-3833 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openwsman fixes the following issues: Security issues fixed: - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection() which could allow an attacker to trigger an infinite loop which leads to Denial of Service (bsc#1122623). Other issues addressed: - Added OpenSSL 1.1 compatibility - Compilation in debug mode fixed - Directory listing without authentication fixed (bsc#1092206). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1111=1 Package List: - openSUSE Leap 15.0 (x86_64): libwsman-devel-2.6.7-lp150.2.3.1 libwsman3-2.6.7-lp150.2.3.1 libwsman3-debuginfo-2.6.7-lp150.2.3.1 libwsman_clientpp-devel-2.6.7-lp150.2.3.1 libwsman_clientpp1-2.6.7-lp150.2.3.1 libwsman_clientpp1-debuginfo-2.6.7-lp150.2.3.1 openwsman-debuginfo-2.6.7-lp150.2.3.1 openwsman-debugsource-2.6.7-lp150.2.3.1 openwsman-java-2.6.7-lp150.2.3.1 openwsman-perl-2.6.7-lp150.2.3.1 openwsman-perl-debuginfo-2.6.7-lp150.2.3.1 openwsman-ruby-2.6.7-lp150.2.3.1 openwsman-ruby-debuginfo-2.6.7-lp150.2.3.1 openwsman-ruby-docs-2.6.7-lp150.2.3.1 openwsman-server-2.6.7-lp150.2.3.1 openwsman-server-debuginfo-2.6.7-lp150.2.3.1 openwsman-server-plugin-ruby-2.6.7-lp150.2.3.1 openwsman-server-plugin-ruby-debuginfo-2.6.7-lp150.2.3.1 python3-openwsman-2.6.7-lp150.2.3.1 python3-openwsman-debuginfo-2.6.7-lp150.2.3.1 winrs-2.6.7-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-3816.html https://www.suse.com/security/cve/CVE-2019-3833.html https://bugzilla.suse.com/1092206 https://bugzilla.suse.com/1122623 -- . Crucial announcement regarding openwsman addresses two vulnerabilities in openSUSE, delivering essential guidance for its user base.. openwsman Updates, OpenSUSE Security, Update Instructions. . Severity: Important. LinuxSecurity.com Team
Apr 02, 2019
•Important
OpenSUSE
89
security advisorysecurity issuecriticalFedora 30: 2019-af0cd1b8f7 Critical: Openwsman Buffer Disclosure and DoS
Security fixes for CVE-2019-3816 and CVE-2019-3833. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-af0cd1b8f7 2019-03-29 19:07:28.732307 --------------------------------------------------------------------------------Name : openwsman Product : Fedora 30 Version : 2.6.8 Release : 5.fc30 URL : Summary : Open source Implementation of WS-Management Description : Openwsman is a project intended to provide an open-source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that exposes a set of operations focused on and covers all system management aspects. --------------------------------------------------------------------------------Update Information: Security fixes for CVE-2019-3816 and CVE-2019-3833 --------------------------------------------------------------------------------References: [ 1 ] Bug #1667070 - CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs https://bugzilla.redhat.com/show_bug.cgi?id=1667070 [ 2 ] Bug #1674478 - CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1674478 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-af0cd1b8f7' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 29, 2019
•Critical
Fedora
89
security advisorymoderatedenial of serviceFedora 29: 2019-64b384de9b Moderate: Openwsman DoS And File Disclosure
Security fixes for CVE-2019-3816 and CVE-2019-3833. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-64b384de9b 2019-03-29 02:58:04.249915 --------------------------------------------------------------------------------Name : openwsman Product : Fedora 29 Version : 2.6.5 Release : 9.fc29 URL : Summary : Open source Implementation of WS-Management Description : Openwsman is a project intended to provide an open-source implementation of the Web Services Management specification (WS-Management) and to expose system management information on the Linux operating system using the WS-Management protocol. WS-Management is based on a suite of web services specifications and usage requirements that exposes a set of operations focused on and covers all system management aspects. --------------------------------------------------------------------------------Update Information: Security fixes for CVE-2019-3816 and CVE-2019-3833 --------------------------------------------------------------------------------ChangeLog: * Wed Mar 13 2019 Vitezslav Crhonek - 2.6.5-9 - Fix CVE-2019-3816 Resolves: #1687760 - Fix CVE-2019-3833 Resolves: #1687762 --------------------------------------------------------------------------------References: [ 1 ] Bug #1667070 - CVE-2019-3816 openwsman: Disclosure of arbitrary files outside of the registered URIs https://bugzilla.redhat.com/show_bug.cgi?id=1667070 [ 2 ] Bug #1674478 - CVE-2019-3833 openwsman: Infinite loop in process_connection() allows denial of service https://bugzilla.redhat.com/show_bug.cgi?id=1674478 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-64b384de9b' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 28, 2019
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!