Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98

Red Hat OpenShift 3.11 RHSA-2019:3142-01 Low: mediawiki Security Fix

An update for mediawiki is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Low: OpenShift Container Platform 3.11 mediawiki security update Advisory ID: RHSA-2019:3142-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2019:3142 Issue date: 2019-10-18 CVE Names: CVE-2018-0503 CVE-2018-0505 ==================================================================== 1. Summary: An update for mediawiki is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenShift Container Platform 3.11 - noarch 3. Description: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains an updated mediawiki RPM package for Red Hat OpenShift Container Platform 3.11. Security Fix(es): * mediawiki: $wgRateLimits (rate limit / ping limiter) entry for 'user' overrides that for 'newbie' (CVE-2018-0503) * mediawiki: BotPassword can bypass CentralAuth's account lock (CVE-2018-0505) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: See the following documentation, which will be updated shortly for this release, for importantinstructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/3.11/html/release_notes/release-notes-ocp-3-11-release-notes 5. Bugs fixed (https://bugzilla.redhat.com/): 1634161 - CVE-2018-0503 mediawiki: $wgRateLimits (rate limit / ping limiter) entry for 'user' overrides that for 'newbie' 1634166 - CVE-2018-0505 mediawiki: BotPassword can bypass CentralAuth's account lock 6. Package List: Red Hat OpenShift Container Platform 3.11: Source: mediawiki-1.27.7-1.el7.src.rpm noarch: mediawiki-1.27.7-1.el7.noarch.rpm mediawiki-doc-1.27.7-1.el7.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-0503 https://access.redhat.com/security/cve/CVE-2018-0505 https://access.redhat.com/security/updates/classification/#low 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXakWF9zjgjWX9erEAQiEOg/9FnzGqV+9pHHs4Vm+2eeGGw1gPMH2/oap n1rmE4rIfxL2eWHqChmS82xL6bY4wYZJ6ibXOwYpuTJX7rw816Bqgn33aU8Z3rei kYs18XZ7jLUxDqGIK9nvC+4Uzii4qkLcA9m0cyWXCgO89t2xcibV4R7qhkG33URu NKKRGhPgXf59cm9o/9S2C9mlIQohM/w+Lrz09ys6wu1CLsIyQoA5cyTAvI3BR9qC tBZv1i32uDGVG08dwevV/NFUChnnQLuM2mQccSGY2AeMqaFasG9s5z/rwJCcKsTM z1MVGdl8/meW2od0SYh8c/9s5T/Sz0fpqwdkGSHWT+pvOxu/xjhg/6wjpLmIdTLS NF/LXuRd+2V3PpeHkIxB9TlGHEhEN2SX3NXSFNEPSVhUBQ0kh6JdnWg/wlEeH+ew O1rAgtIQt2jFnxVRot8ikgRYMzod9eOZhWbfcmHO2mLZzYqILUmu4tmLjaqivgmx N7VVyyH2XVzhYtzFeDsNmMP3pn0J36HHMD3x29gkJG+xp/50DAFlKq0etKQYcOyr lSaRuQouJp14tSJQBVlhYa8tskpREXA/LqsCQRDZFuPnQJFLrgVBjyXAYRlrkksL W8xE56wko/jz3HDcBWTKt7BpjScXFT/hsSLYZijF1IhcuYzz5Ui6qs4bwrNwSloL Q5r1X/tRFKQ=+Bsy -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . RedHat OpenShift 3.11 receives a Low severity mediawiki update addressing security issues and ensuring safer cloud deployments.. update, mediawiki, openshift, container, platform. . Severity: Low. LinuxSecurity.com Team

Calendar 2 Oct 17, 2019 Low Red Hat
87

Debian: DSA-4301-1 Critical MediaWiki Flaws in Rate Limits and Account Lock

Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which result in incorrectly configured rate limits, information disclosure in Special:Redirect/logid and bypass of an account lock. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4301-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff September 22, 2018 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : mediawiki CVE ID : CVE-2018-0503 CVE-2018-0504 CVE-2018-0505 Multiple security vulnerabilities have been discovered in MediaWiki, a website engine for collaborative work, which result in incorrectly configured rate limits, information disclosure in Special:Redirect/logid and bypass of an account lock. For the stable distribution (stretch), these problems have been fixed in version 1:1.27.5-1~deb9u1. We recommend that you upgrade your mediawiki packages. For the detailed security status of mediawiki please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/mediawiki Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance MediaWiki security on Debian by upgrading, adjusting configurations for rate limits and account locks, and monitoring for performance and errors. Debian Security, MediaWiki Update, Open Source Security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 22, 2018 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here