The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-1350 http://linux.oracle.com/errata/ELSA-2026-1350.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: curl-7.76.1-35.el9_7.3.x86_64.rpm curl-minimal-7.76.1-35.el9_7.3.x86_64.rpm libcurl-7.76.1-35.el9_7.3.i686.rpm libcurl-7.76.1-35.el9_7.3.x86_64.rpm libcurl-devel-7.76.1-35.el9_7.3.i686.rpm libcurl-devel-7.76.1-35.el9_7.3.x86_64.rpm libcurl-minimal-7.76.1-35.el9_7.3.i686.rpm libcurl-minimal-7.76.1-35.el9_7.3.x86_64.rpm aarch64: curl-7.76.1-35.el9_7.3.aarch64.rpm curl-minimal-7.76.1-35.el9_7.3.aarch64.rpm libcurl-7.76.1-35.el9_7.3.aarch64.rpm libcurl-devel-7.76.1-35.el9_7.3.aarch64.rpm libcurl-minimal-7.76.1-35.el9_7.3.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates/curl-7.76.1-35.el9_7.3.src.rpm Related CVEs: CVE-2025-9086 Description of changes: [7.76.1-35.el9_7.3] - http: fix crash in rate-limited upload (RHEL-129493) [7.76.1-35.el9_7.2] - openssl: respect system crypto policy for TLS max version (RHEL-128921) [7.76.1-35.el9_7.1] - rebuild for rhel-9.7.0 z-stream (RHEL-121659) [7.76.1-35] - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121659 _______________________________________________ El-errata mailing list
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting, information disclosure, missing rate limiting or denial of service. For the oldstable distribution (bookworm), these problems have been fixed in version 1:1.39.17-1~deb12u1.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6085-1
Potential DoS attacks have been fixed by rate limiting HTTP/2 CONTINUATION frames in Apache Traffic Server, an HTTP/1.1 and HTTP/2 compliant caching proxy server. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3799-1
Update to 20.0.11; Fixes one high severity and multiple low severity CVEs. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-9b421b78af 2021-07-22 01:13:10.976131 --------------------------------------------------------------------------------Name : nextcloud Product : Fedora 34 Version : 20.0.11 Release : 1.fc34 URL : http://nextcloud.com Summary : Private file sync and share server Description : NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing right on the web. NextCloud is extendable via a simple but powerful API for applications and plugins. --------------------------------------------------------------------------------Update Information: Update to 20.0.11; Fixes one high severity and multiple low severity CVEs --------------------------------------------------------------------------------ChangeLog: * Mon Jul 12 2021 Christopher Engelhard 20.0.11-1 - Update to 20.0.11; Fixes RHBZ#1981503; Fixes RHBZ#1981505 --------------------------------------------------------------------------------References: [ 1 ] Bug #1981503 - CVE-2021-32688 nextcloud: Improper permission check permits tokens to change their own permissions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1981503 [ 2 ] Bug #1981505 - CVE-2021-32680 nextcloud: Improper audit logging for expiration date events [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1981505 [ 3 ] Bug #1981817 - CVE-2021-32678 nextcloud: ratelimit not applied on OCS API responses [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1981817 [ 4 ] Bug #1981819 - CVE-2021-32679 nextcloud: filenames not escaped by default in controllers using DownloadResponse [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1981819 [ 5 ] Bug #1981821 - CVE-2021-32703 nextcloud: lack of ratelimit on shareinfo endpoint [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1981821 [ 6 ] Bug #1981824 - CVE-2021-32705 nextcloud: lack of ratelimit on public DAV endpoint [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1981824 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-9b421b78af' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Multiple security issues were discovered in MediaWiki: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate limiting against brute force attempts (CVE-2020-25812, CVE-2020-25813, CVE-2020-25814, CVE-2020-25815, CVE-2020-25827, . MGASA-2020-0381 - Updated mediawiki packages fix security vulnerability Publication date: 30 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0381.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-25812, CVE-2020-25813, CVE-2020-25814, CVE-2020-25815, CVE-2020-25827, CVE-2020-25828, CVE-2020-25869 Multiple security issues were discovered in MediaWiki: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate limiting against brute force attempts (CVE-2020-25812, CVE-2020-25813, CVE-2020-25814, CVE-2020-25815, CVE-2020-25827, CVE-2020-25828). Possible issues with actors not being loaded from the correct database or wiki (CVE-2020-25869). References: - https://bugs.mageia.org/show_bug.cgi?id=27331 - https://lists.wikimedia.org/hyperkitty/list/
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4767-1
An update that solves two vulnerabilities and has 9 fixes is now available. . SUSE Security Update: Security update for crowbar, crowbar-core, crowbar-ha, crowbar-init, crowbar-openstack, crowbar-ui ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:2762-1 Rating: moderate References: #1005886 #1073703 #1081518 #1083093 #1090336 #1093898 #1095420 #1096043 #1096759 #1098369 #1099392 Cross-References: CVE-2016-8611 CVE-2018-3760 Affected Products: SUSE OpenStack Cloud Crowbar 8 ______________________________________________________________________________ An update that solves two vulnerabilities and has 9 fixes is now available. Description: This update for crowbar, crowbar-ha, crowbar-init, crowbar-openstack, crowbar-ui fixes the following issues: This security issues was fixed: - CVE-2018-3760: Upgrade rubygem-sprockets to prevent an information leak. Specially crafted requests could have been be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is used in production (bsc#1098369). - CVE-2016-861: Add rate limiting for glance api (bsc#1005886) These non-security issues were fixed for crowbar: - upgrade: Lock crowbar-ui before admin upgrade - upgrade: Make sure schemas are properly migrated after the upgrade - upgrade: No need for database dump before the upgrade - upgrade: No need to use crowbar-init during the upgrade These non-security issues were fixed for crowbar-core: - upgrade: Remove pre-upgrade constraints from existing locations - upgrade: Show the grep result when checking for not-migrated instances - upgrade: Set clone_stateless_services to false on upgrade - control_lib: fix host allocation check - Fix exception handling in get_log_lines - apache: copytruncate apache logs bsc#1083093 -upgrade: Refresh repos before crowbar-ui update (bsc#1099392) - upgrade: Reset RabbitMQ nodes during upgrade - upgrade: Do not allow cinder-volume on compute nodes - upgrade: Wait until all nova-compute services are up before evacuation - upgrade: Save the information which set of nodes should be upgraded - Let skip_unready_nodes skip also nodes that are in crowbar_upgrade state - upgrade: Add missing brackets checking for nodes - upgrade: Make sure postponed nodes can be skipped when applying proposal - upgrade: When the upgrade is not finished, show a link to wizard - upgrade: Correctly delete remaining upgrade scripts - upgrade: Wait for services shutdown to finish - upgrade: Unlock crowbar-ui after completed upgrade - upgrade: Stop cron before stopping any other service - upgrade: Provide better information after the failure - upgrade: Report missing scripts - upgrade: Better check for upgraded nodes - do not rely on state - upgrade: Improve error messages with lists - upgrade: Check input is a valid node for nodes - upgrade: Delete upgrade scripts really at the end of upgrade - upgrade: Increase the timeout for deleting pacemaker resources - upgrade: Adapt the check for upgraded? value - upgrade: Move step to mark the admin upgrade end - upgrade: Do not finalize nodes that are not upgraded - upgrade: Fix file layout for rails' autoloading (bsc#1096759) - upgrade: Deleting cinder services from database no longer needed - upgrade: Allow postpone and resume of compute nodes upgrade - upgrade: Allow the access to controller actions when upgrade is postponed - upgrade: Finalize upgrade of controller nodes after they are done - upgrade: Added API calls for postponing/resuming compute nodes upgrade - upgrade: Unblock upgrade status API in Cloud8 - upgrade: Do not end admin step while it is still running (bsc#1095420) - upgrade: Adapt ceph-related checks to 7-8 upgrade - upgrade: Allow running schema migrations onupgrade - upgrade: Fix platform retrieval These non-security issues were fixed for crowbar-ha: - pacemaker: allow multiple meta parameters (bsc#1093898) - haproxy: active-active mode, just one VIP These non-security issues were fixed for crowbar-openstack: - Synchronize SSL in the cluster (bsc#1081518) - neutron: add force_metadata attribute - rabbitmq: set client timout to default value - /etc/sysctl.d/99-sysctl.conf is a symlink to /etc/sysctl.conf - Do not automatically put manila-share roles to compute nodes - rabbitmq: check for rabbit readiness - rabbitmq: Make sure rabbit is running on cluster - monasca: various monasca-installer improvements - monasca: reduce monasca-installer runs (bsc#1096043) - manila: Correct field name for cluster name - Do not mark [:nova][:db_synced] too early - nova: Do not do partial online migrations, that was Newton specific - monasca: add elasticsearch tunables (bsc#1090336) - copytruncate apache logs instead of creating - rabbitmq: Better dependency check - aodh: Add config for alarm_history_ttl (bsc#1073703) - upgrade: cinder: run live migrations at correct rev These non-security issues were fixed for crowbar-ui: - upgrade: Dummy backend for status testing - upgrade: Refactor postpone nodes upgrade - upgrade: Allow interruption of status wait loop - upgrade: Added ability to postpone upgrade nodes - upgrade: Add ability to postpone upgrade nodes - upgrade: Add ability to postpone upgrade nodes - upgrade: Add ability to postpone upgrade nodes - Add ability to postpone upgrade - upgrade: Remove openstack precheck - upgrade: Fixed error key for ha_configured - upgrade: Remove CEPH related code - Remove the non-essential database-configuration controller - remove ui typo test - Remove database configuration option - upgrade: Update SUSE-OpenStack-Cloud-8 label - upgrade: Update admin and nodes repo names Patch Instructions: To install this SUSESecurity Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2018-1928=1 Package List: - SUSE OpenStack Cloud Crowbar 8 (x86_64): crowbar-core-5.0+git.1533887407.6e9b0412d-3.8.2 crowbar-core-branding-upstream-5.0+git.1533887407.6e9b0412d-3.8.2 - SUSE OpenStack Cloud Crowbar 8 (noarch): crowbar-5.0+git.1528696845.81a7b5d0-3.3.1 crowbar-devel-5.0+git.1528696845.81a7b5d0-3.3.1 crowbar-ha-5.0+git.1530177874.35b9099-3.3.1 crowbar-init-5.0+git.1520420379.d5bbb35-3.3.1 crowbar-openstack-5.0+git.1534167599.d325ef804-4.8.2 crowbar-ui-1.2.0+git.1533844061.4ac8e723-3.3.1 References: https://www.suse.com/security/cve/CVE-2016-8611.html https://www.suse.com/security/cve/CVE-2018-3760.html https://bugzilla.suse.com/1005886 https://bugzilla.suse.com/1073703 https://bugzilla.suse.com/1081518 https://bugzilla.suse.com/1083093 https://bugzilla.suse.com/1090336 https://bugzilla.suse.com/1093898 https://bugzilla.suse.com/1095420 https://bugzilla.suse.com/1096043 https://bugzilla.suse.com/1096759 https://bugzilla.suse.com/1098369 https://bugzilla.suse.com/1099392 _______________________________________________ sle-security-updates mailing list
Updated bind packages that fix one security issue and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: bind security and enhancement update Advisory ID: RHSA-2013:0550-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:0550.html Issue date: 2013-02-21 CVE Names: CVE-2012-5689 ==================================================================== 1. Summary: Updated bind packages that fix one security issue and add one enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. DNS64 is used toautomatically generate DNS records so IPv6 based clients can access IPv4 systems through a NAT64 server. A flaw was found in the DNS64 implementation in BIND when using Response Policy Zones (RPZ). If a remote attacker sent a specially-crafted query to a named server that is using RPZ rewrite rules, named could exit unexpectedly with an assertion failure. Note that DNS64 support is not enabled by default. (CVE-2012-5689) This update also adds the following enhancement: * Previously, it was impossible to configure the the maximum number of responses sent per second to one client. This allowed remote attackers to conduct traffic amplification attacks using DNS queries with spoofed source IP addresses. With this update, it is possible to use the new "rate-limit" configuration option in named.conf and configure the maximum number of queries which the server responds to. Refer to the BIND documentation for more details about the "rate-limit" option. (BZ#906312) All bind users are advised to upgrade to these updated packages, which contain patches to correct this issue and add this enhancement. After installing the update, the BIND daemon (named) will be restarted automatically. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 903417 - CVE-2012-5689 bind: denial of service when processing queries and with both DNS64 and RPZ enabled 906312 - bind: Backport Response Rate Limiting (DNS RRL) patch into Red Hat Enterprise Linux 6 6. Package List: Red Hat Enterprise Linux Desktop (v.6): Source: i386: bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-libs-9.8.2-0.17.rc1.el6.3.i686.rpm bind-utils-9.8.2-0.17.rc1.el6.3.i686.rpm x86_64: bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-libs-9.8.2-0.17.rc1.el6.3.i686.rpm bind-libs-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-utils-9.8.2-0.17.rc1.el6.3.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): Source: i386: bind-9.8.2-0.17.rc1.el6.3.i686.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-devel-9.8.2-0.17.rc1.el6.3.i686.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.i686.rpm x86_64: bind-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-devel-9.8.2-0.17.rc1.el6.3.i686.rpm bind-devel-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-libs-9.8.2-0.17.rc1.el6.3.i686.rpm bind-libs-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-utils-9.8.2-0.17.rc1.el6.3.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: bind-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-devel-9.8.2-0.17.rc1.el6.3.i686.rpm bind-devel-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: i386: bind-9.8.2-0.17.rc1.el6.3.i686.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-libs-9.8.2-0.17.rc1.el6.3.i686.rpm bind-utils-9.8.2-0.17.rc1.el6.3.i686.rpm ppc64: bind-9.8.2-0.17.rc1.el6.3.ppc64.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.ppc64.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.ppc.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.ppc64.rpm bind-libs-9.8.2-0.17.rc1.el6.3.ppc.rpm bind-libs-9.8.2-0.17.rc1.el6.3.ppc64.rpm bind-utils-9.8.2-0.17.rc1.el6.3.ppc64.rpm s390x: bind-9.8.2-0.17.rc1.el6.3.s390x.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.s390x.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.s390.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.s390x.rpm bind-libs-9.8.2-0.17.rc1.el6.3.s390.rpm bind-libs-9.8.2-0.17.rc1.el6.3.s390x.rpm bind-utils-9.8.2-0.17.rc1.el6.3.s390x.rpm x86_64: bind-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-libs-9.8.2-0.17.rc1.el6.3.i686.rpm bind-libs-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-utils-9.8.2-0.17.rc1.el6.3.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): Source: i386: bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-devel-9.8.2-0.17.rc1.el6.3.i686.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.i686.rpm ppc64: bind-debuginfo-9.8.2-0.17.rc1.el6.3.ppc.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.ppc64.rpm bind-devel-9.8.2-0.17.rc1.el6.3.ppc.rpm bind-devel-9.8.2-0.17.rc1.el6.3.ppc64.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.ppc64.rpm s390x: bind-debuginfo-9.8.2-0.17.rc1.el6.3.s390.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.s390x.rpm bind-devel-9.8.2-0.17.rc1.el6.3.s390.rpm bind-devel-9.8.2-0.17.rc1.el6.3.s390x.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.s390x.rpm x86_64: bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-devel-9.8.2-0.17.rc1.el6.3.i686.rpm bind-devel-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.x86_64.rpm Red Hat Enterprise Linux Workstation (v.6): Source: i386: bind-9.8.2-0.17.rc1.el6.3.i686.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-libs-9.8.2-0.17.rc1.el6.3.i686.rpm bind-utils-9.8.2-0.17.rc1.el6.3.i686.rpm x86_64: bind-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-chroot-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-libs-9.8.2-0.17.rc1.el6.3.i686.rpm bind-libs-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-utils-9.8.2-0.17.rc1.el6.3.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): Source: i386: bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-devel-9.8.2-0.17.rc1.el6.3.i686.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.i686.rpm x86_64: bind-debuginfo-9.8.2-0.17.rc1.el6.3.i686.rpm bind-debuginfo-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-devel-9.8.2-0.17.rc1.el6.3.i686.rpm bind-devel-9.8.2-0.17.rc1.el6.3.x86_64.rpm bind-sdb-9.8.2-0.17.rc1.el6.3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2012-5689 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFRJnU0XlSAg2UNWIIRAqmKAJ9aw1xBPz0zvjWoO1dx8iwrf3KvTwCgh+FG AQqiP7kshwm4ZGsABl1I61k=gqtc -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Get the latest Linux and open source security news straight to your inbox.