Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 3,878 articles for you...
200
security advisorycriticalpythonScientific Linux 7 SLSA-2023:6885 Critical: Python TLS Handshake Bypass
python: TLS handshake bypass (CVE-2023-40217) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6885 SL7 srpm python-0:2.7.5-94.el7_9.src x86_64 python-0:2.7.5-94.el7_9.x86_64 i386 python-libs-0:2.7.5-94.el7_9.i686 - Scientific Linux Development Team . Red Hat Security Advisory: python security update Advisory ID: SLSA-2023:6885 Issue Date: 2023-11-13 CVE Numbers: CVE-2023-40217 -- Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high lev el dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowin g systems. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6885 -- SL7 srpm python-0:2.7.5-94.el7_9.src x86_64 python-0:2.7.5-94.el7_9.x86_64 i386 python-libs-0:2.7.5-94.el7_9.i686 - Scientific Linux Development Team . Crucial patch released for SL7 to improve Python security, resolving vulnerabilities linked to TLS handshake bypass for multiple systems.. Python, Security Update, TLS Handshake Bypass. . Severity: Critical. LinuxSecurity.com Team
Nov 13, 2023
•Critical
Scientific Linux
200
security advisorycriticalfile creationSciLinux: SLSA-2023:6886 Critical: Plexus-Archiver File Creation Risk
plexus-archiver: Arbitrary File Creation in AbstractUnArchiver (CVE-2023-37460) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6886 SL7 srpm plexus-archiver-0:2.4.2-6.el7_9.src noarch plexus-archiver-0:2.4.2-6.el7_9.noarch - Scientific Linux Development Team . Red Hat Security Advisory: plexus-archiver security update Advisory ID: SLSA-2023:6886 Issue Date: 2023-11-13 CVE Numbers: CVE-2023-37460 -- The Plexus project provides a full software stack for creating and executing software projects. Based on the Plexus container, the applications can utilise component-oriented programming to build modular, reusable components that can easily be assembled and reused. The plexus-archiver component provides functions to create and extract archives. Security Fix(es): * plexus-archiver: Arbitrary File Creation in AbstractUnArchiver (CVE-2023-37460) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6886 -- SL7 srpm plexus-archiver-0:2.4.2-6.el7_9.src noarch plexus-archiver-0:2.4.2-6.el7_9.noarch - Scientific Linux Development Team . Plexus-archiver vulnerability patch for Uncontrolled File Creation in AbstractUnArchiver (SLSA-2023:6886).. Plexus Archiver Update, Security Fix, File Creation Risk. . Severity: Critical. LinuxSecurity.com Team
Nov 13, 2023
•Critical
Scientific Linux
200
security advisorycriticalDoSScientific Linux 7 Advisory SLSA-2023:5691 Critical DoS in BIND
bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:5691 SL7 srpm bind-32:9.11.4-26.P2.el7_9.15.src i386 bind-export-libs-32:9.11.4-26.P2.el7_9.15.i686 x86_64 bind-export-libs-32:9.11.4-26.P2.el7_9.15.x86_64 noarch bind-license-32:9.11.4-26.P2.el7_9.15.noarch - Scie [More...] . Red Hat Security Advisory: bind security update Advisory ID: SLSA-2023:5691 Issue Date: 2023-10-12 CVE Numbers: CVE-2023-3341 -- The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:5691 -- SL7 srpm bind-32:9.11.4-26.P2.el7_9.15.src i386 bind-export-libs-32:9.11.4-26.P2.el7_9.15.i686 x86_64 bind-export-libs-32:9.11.4-26.P2.el7_9.15.x86_64 noarch bind-license-32:9.11.4-26.P2.el7_9.15.noarch - Scientific Linux Development Team . Critical Security Bulletin on BIND Enhancement impacting Scientific Linux, including comprehensive details on the identified vulnerabilities.. Scientific Linux BIND Update, DoS Security Fix, SL7 Advisory Update. . Severity: Critical. LinuxSecurity.com Team
Nov 09, 2023
•Critical
Scientific Linux
200
security advisorysecurity issuemedium severityScientific Linux SLSA-2023:5615 Moderate Security Issue in libssh2
libssh2: use-of-uninitialized-value in _libssh2_transport_read (CVE-2020-22218) --- This content is derived from https://sso.redhat.com/auth/realms/redhat-external/protocol/saml?SAMLRequest=fZJBT8MwDIX%2FSm85ZWk7yrZonVQxIU0ChDbgwAVlqccipUmJXTb49aQbg3Hh6jy%2F79nOFFVjW1l1tHVLeOsAKakQIZDx7so77BoIKwjvRsPj8qZkW6IWpRBKa0AcBKi3igbaN6L2O2e9qlH0nmJjnLLmE1hSEQWz7giOfsa9fhsuXA37kmUsmUdu1PfQXwSiP%2FdXMaMIoGyD4ljmsCcIESPa4Mlrbw9olizmJXvJ9WgMWmV8qMcTfpGNUq7WxZCvVTEe5dmoUJebKEXsYhAk5ahkeZoXPL3g6eQhHcqikGn2zJInCHhIlg9Sluwb61D2oJJ1wUmv0KB0qgGUpOWqur2RUSjVaY3nLe3%2FPac52Gzaq%2BUhXZh1zmwM1PxnxVNx%2Fjw9HvEu2i3m994a%2FZFU1vrdVVwXQckodPEO1z40iv4P0FdMzTcHqWz7wZHAEROzI%2FPvX5l9AQ%3D%3D&RelayState=https%3A%2F%2Faccess.redhat.com%2Ferrata%2FRHSA-2&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=BrJPc%2FvdbvszAnFEmxMHTWhWO5IJXnU8CNik001PBsM04yezeCS%2B0pETxgMIupFPsrxTbmD1oepOHhERcPL4Byk1qKkm6TtFvfXm74lB8Pui6rdjg%2B8IwVmrenuF4Ph3LD4ZnDeuNW3YO4dDbN5Q4%2F89FIjEkeGKeLLar10vtkiy8GweKEe8cuja3717pxNrVTOi8ckfBHwomdUD8Xw1IE6M1qHI4u6pOMtxqpKQPu%2FZzsAgrME854P7NQqtGaZRI3eqZlBRVyG2FYrR7KFC6QtA%2FdVCYBxBWG4JdxZhXmbM%2Fc%2Bn%2B04WEKPpbhH12qa7URkjktnYMsJNcVF7rtYtn1D6gCyPnuXrwe7qcV0MgnrfuqmW4FoGsGrjhFdp7Eebe40wh78VaLxxAxO9hR%2BrYRDgNjvtewICpUbzYQUm6jzVk3i%2FYjt5Pmr9HesI1zvaI80Jmpgud1snf1z7VWoIqnAXwIZyLlo%2BxyFZs4qDUBgFr9tqrgbnGjBgTzdyJTItq7yFMVJDCt6dy5LjnMgKSMd%2BjjsoDBjssytWMM4ulzlyQHtn4IdVgCe4q4jgLQrHXf4ZucbUIA6q%2Fxgg7favSO%2FZaivTQq%2BoaQQKJ1NXxPiMXw6j354mdaEtz8jK549xaCEZi2OiF3l8Qrzc%2B7JikRXQ8wlX1gh8SbiNHfo6ZcE%3D 023:5615 SL7 srpm libssh2-0:1.8.0-4.el7_9.1.src i386 libssh2-0:1.8.0-4.el7_9.1.i686 x86_64 libssh2-0:1.8.0-4.el7_9.1.x86_64 noarch libssh2-docs-0:1.8.0- 4.el7_9.1.noarch - Scientific Linux Development Team . Red Hat Security Advisory: libssh2 security update Advisory ID: SLSA-2023:5615 Issue Date: 2023-10-10 CVE Numbers: CVE-2020-22218 -- The libssh2 packages provide a library that implements the SSH2 protocol. Security Fix(es): * libssh2: use-of-uninitialized-valuein _libssh2_transport_read (CVE-2020-22218) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:5615 -- SL7 srpm libssh2-0:1.8.0-4.el7_9.1.src i386 libssh2-0:1.8.0-4.el7_9.1.i686 x86_64 libssh2-0:1.8.0-4.el7_9.1.x86_64 noarch libssh2-docs-0:1.8.0-4.el7_9.1.noarch - Scientific Linux Development Team . The latest Red Hat Security Advisory highlights a vital libssh2 security patch, Advisory ID: SLSA-2023:5615, focusing on vulnerabilities linked to SSH protocols.. libssh2 Update, SSH Security, Scientific Linux Advisory. . LinuxSecurity.com Team
Nov 09, 2023
Scientific Linux
200
security advisorycriticalcode executionSciLinux SL7: SLSA-2023:5616 Critical Code Injection in Python-Reportlab
python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:5616 SL7 srpm python-reportlab-0:2.5-11.el7_9.src x86_64 python-reportlab-0:2.5-11.el7_9.x86_64 - Scientific Linux Development Team . Red Hat Security Advisory: python-reportlab security update Advisory ID: SLSA-2023:5616 Issue Date: 2023-10-10 CVE Numbers: CVE-2019-19450 -- Python-reportlab is a library used for generation of PDF documents. Security Fix(es): * python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:5616 -- SL7 srpm python-reportlab-0:2.5-11.el7_9.src x86_64 python-reportlab-0:2.5-11.el7_9.x86_64 - Scientific Linux Development Team . The latest advisory warns of a critical vulnerability in the python-reportlab library affecting SL7 systems, enabling arbitrary code execution risks from input injections. python-reportlab, code injection, SL7 security, security update. . Severity: Critical. LinuxSecurity.com Team
Nov 09, 2023
•Critical
Scientific Linux
200
security advisorycriticalDenial of ServiceScientific Linux: SLSA-2023:6806 Critical Vulnerability in Apache
squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6805 SL7 srpm squid-7:3.5.20-17.el7_9.9.src x86_64 squid-7:3.5.20-17.el7_9.9.x86_64 - Scientific Linux Development Team . Red Hat Security Advisory: squid security update Advisory ID: SLSA-2023:6805 Issue Date: 2023-11-08 CVE Numbers: CVE-2023-46847 -- Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fix(es): * squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6805 -- SL7 srpm squid-7:3.5.20-17.el7_9.9.src x86_64 squid-7:3.5.20-17.el7_9.9.x86_64 - Scientific Linux Development Team . Crucial squid security patch for Scientific Linux addresses DoS vulnerability (CVE-2023-46847) issued on November 8.. Squid, Critical Update, Service Denial, Linux Security. . Severity: Critical. LinuxSecurity.com Team
Nov 09, 2023
•Critical
Scientific Linux
200
security advisorycriticalScientific LinuxScientific Linux SL7: SLSA-2023:6823 Critical TLS Bypass
python: TLS handshake bypass (CVE-2023-40217) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6823 SL7 srpm python3-0:3.6.8-21.el7_9.src x86_64 python3-0:3.6.8-21.el7_9.x86_64 i386 python3-libs-0:3.6.8-21.el7_9.i686 - Scientific Linux Development Team . Red Hat Security Advisory: python3 security update Advisory ID: SLSA-2023:6823 Issue Date: 2023-11-08 CVE Numbers: CVE-2023-40217 -- Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6823 -- SL7 srpm python3-0:3.6.8-21.el7_9.src x86_64 python3-0:3.6.8-21.el7_9.x86_64 i386 python3-libs-0:3.6.8-21.el7_9.i686 - Scientific Linux Development Team . Ubuntu's Python3 patch addresses a critical TLS certificate validation flaw on 20.04 LTS. Advisory ID: USN-2023:8765, 2023-11-09. Python Security,TLS Handshake,SL7 Advisory. . Severity: Critical. LinuxSecurity.com Team
Nov 09, 2023
•Critical
Scientific Linux
200
security advisorycritical issuesecurity fixCritical Advisory: Scientific Linux 7 SLSA-2023:6802 on xorg-x11-server
xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6802 SL7 srpm xorg-x11-server-0:1.20.4-24.el7_9.src x86_64 xorg-x11-server-Xephyr-0:1.20.4-24.el7_9.x86_64 i386 xorg-x11-server-devel-0:1.20.4-24.el7_9.i686 noarch xorg-x11-server-source-0:1.2 [More...] . Red Hat Security Advisory: xorg-x11-server security update Advisory ID: SLSA-2023:6802 Issue Date: 2023-11-08 CVE Numbers: CVE-2023-5367 -- X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphica l user interfaces are designed upon. Security Fix(es): * xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty (CVE-2023-5367) --- This content is derived from https://access.redhat.com/errata/RHSA-2023:6802 -- SL7 srpm xorg-x11-server-0:1.20.4-24.el7_9.src x86_64 xorg-x11-server-Xephyr-0:1.20.4-24.el7_9.x86_64 i386 xorg-x11-server-devel-0:1.20.4-24.el7_9.i686 noarch xorg-x11-server-source-0:1.20.4-24.el7_9.noarch - Scientific Linux Development Team . Keep informed about the xorg-x11-server patch for SL7, which tackles CVE-2023-5368 to mitigate out-of-bounds read vulnerabilities.. Xorg-X11, Security Update, Critical Issue, Out-Of-Bounds Write, Scientific Linux. . Severity: Critical. LinuxSecurity.com Team
Nov 09, 2023
•Critical
Scientific Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!