Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
203

Mageia 8 MGASA-2021-0395 Moderate: Bluez Discoverability Effect Mitigated

Updated bluez packages fix security vulnerability: Adapter incorrectly restores Discoverable state after powered down (CVE-2021-3658). . MGASA-2021-0395 - Updated bluez packages fix security vulnerability Publication date: 06 Aug 2021 URL: https://advisories.mageia.org/MGASA-2021-0395.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-3658 Updated bluez packages fix security vulnerability: Adapter incorrectly restores Discoverable state after powered down (CVE-2021-3658). References: - https://bugs.mageia.org/show_bug.cgi?id=29323 - https://www.cve.org/CVERecord?id=CVE-2021-3658 SRPMS: - 8/core/bluez-5.55-3.2.mga8 . Fedora patches security flaw in openssl that impacts data encryption after system reboot.. bluez Update, Mageia Security, Security Patch, Package Security, Adapter Discoverability. . LinuxSecurity.com Team

Calendar 2 Aug 06, 2021 Mageia
89

Fedora 34: 2021-ae7251c31b Critical: Bluetooth Adapter Bug Fix

This update fixes a bug where the adapter could be discoverable after turning it off and back on.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-ae7251c31b 2021-08-02 01:02:57.308713 --------------------------------------------------------------------------------Name : bluez Product : Fedora 34 Version : 5.60 Release : 2.fc34 URL : Summary : Bluetooth utilities Description : Utilities for use in Bluetooth applications: - avinfo - bluemoon - bluetoothctl - bluetoothd - btattach - btmon - hex2hcd - l2ping - l2test - mpris-proxy - rctest The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. --------------------------------------------------------------------------------Update Information: This update fixes a bug where the adapter could be discoverable after turning it off and back on. --------------------------------------------------------------------------------ChangeLog: * Tue Jul 27 2021 Bastien Nocera - 5.60-2 + bluez-5.60-2 - Fix for CVE-2021-3658 (rhbz#1986232) --------------------------------------------------------------------------------References: [ 1 ] Bug #1986232 - CVE-2021-3658 bluez: adapter incorrectly restores Discoverable state after powered down [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1986232 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-ae7251c31b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Resolves an issue where the Wi-Fi module continued to be visible to nearby devices post-restart. Essential for safeguarding user security.. Bluetooth Security, Fedora 34 Updates, Adapter Fix, Security Patches. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 01, 2021 Critical Fedora
98

Red Hat: RHSA-2020-2816-01 Important: Remote Code Exec In JBoss SSO

A security update is now available for Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 Red Hat Product Security has rated this update as having a security impact of. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 Advisory ID: RHSA-2020:2816-01 Product: Red Hat JBoss Enterprise Application Platform Advisory URL: https://access.redhat.com/errata/RHSA-2020:2816 Issue date: 2020-07-02 CVE Names: CVE-2020-1714 ==================================================================== 1. Summary: A security update is now available for Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server - noarch Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server - noarch 3. Description: Packages: Red Hat Single Sign-On 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 Security Fix(es): * keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution (CVE-2020-1714) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 1705975 - CVE-2020-1714 keycloak: Lack of checks in ObjectInputStream leading to Remote Code Execution 6. JIRA issues fixed (https://issues.redhat.com/): KEYCLOAK-13949 - Create RPMs for the RH-SSO 7.4.1 adapters for Red Hat JBoss Enterprise Application Platform 6 7. Package List: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Server: Source: keycloak-adapter-sso7_4-eap6-9.0.4-1.redhat_00001.1.ep6.el6.src.rpm noarch: keycloak-adapter-sso7_4-eap6-9.0.4-1.redhat_00001.1.ep6.el6.noarch.rpm keycloak-saml-adapter-sso7_4-eap6-9.0.4-1.redhat_00001.1.ep6.el6.noarch.rpm Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server: Source: keycloak-adapter-sso7_4-eap6-9.0.4-1.redhat_00001.1.ep6.el7.src.rpm noarch: keycloak-adapter-sso7_4-eap6-9.0.4-1.redhat_00001.1.ep6.el7.noarch.rpm keycloak-saml-adapter-sso7_4-eap6-9.0.4-1.redhat_00001.1.ep6.el7.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 8. References: https://access.redhat.com/security/cve/CVE-2020-1714 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/documentation/en-us/red_hat_single_sign-on/7.4/ 9. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXv3vttzjgjWX9erEAQip+g//fUaBD88/9hlJWte4MlRqtgCZH1Bts3za Mad/Msagcj6UlFBHUg94bX6RItRornmSYDvspTUhQhAJ+9NEHlhBLBbxUB/p1rVf Y99XjUK6Z/p4HIgZYKid7P+3fGtWr8/RRClH3Zk2Po6XaQ7J0yZld0np94YFA5rm RiWX+6TBFVTNSommJzKxRU8fIkLtJ1JsL6yrUoc6KDIcHUuf01aZJINLpU+uYI5l z0P1QZG/Re94bnth6hO5Z0ykQxFRH2uKl52qzAmqBn3WZD2YpWz43SNcrWL8banM toLlBIGGP0XT4um/WE7RZrzGL3UeymF3p71sQ8A/VinIEygZyPB+Rkm4W0B3HJQd v+2ln4811QH/y0hRjAW9wS3d1G1zWLKBVy9jmCfEtm3FO0OdVXrhbaoIm/De63Gt Yx2jDPRinbEkkh2+whLflnwAvD8sIrgwlaobk5siCuRDr/5HzDzATjVWf6AGxdpq dWthvIQFHPlLUryUttcjFNVxLW8CxGfkT7OhsTCNVKoDdrIipNq12ulC2EDO5yk4 Hl2d14XP8u1qQ2zY6greVHZhinYkSH+d8SpKFOkmHmeKk/DI/xvJ5YSStFxtfGay Nv/DGhx0gETTZ8zA++rpGmubXlREX64greEemjF7V4nXW9U1gkJoa9dCta81YQXn XP76+/SEPWU=GwKJ -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . An important patch for Red Hat SSO 7.4.1 connectors resolves a significant remote code execution vulnerability in JBoss.. Red Hat Single Sign-On, JBoss EAP, Remote Code Execution, Security Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jul 02, 2020 Important Red Hat
87

Debian 7 Wheezy DSA-2982-1 Moderate: ActiveRecord SQL Injection Risk

Sean Griffin discovered two vulnerabilities in the PostgreSQL adapter for Active Record which could lead to SQL injection. For the stable distribution (wheezy), these problems have been fixed in . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2982-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff July 19, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : ruby-activerecord-3.2 CVE ID : CVE-2014-3482 CVE-2014-3483 Sean Griffin discovered two vulnerabilities in the PostgreSQL adapter for Active Record which could lead to SQL injection. For the stable distribution (wheezy), these problems have been fixed in version 3.2.6-5+deb7u1. Debian provides two variants of "Ruby on Rails" in Wheezy (2.3 and 3.2). Support for the 2.3 variants had to be ceased at this point. This affects the following source packages: ruby-actionmailer-2.3, ruby-actionpack-2.3 ruby-activerecord-2.3, ruby-activeresource-2.3, ruby-activesupport-2.3 and ruby-rails-2.3. The version of Redmine in Wheezy still requires 2.3, you can use an updated version from backports.debian.org which is compatible with rails 3.2. For the unstable distribution (sid), these problems have been fixed in version 3.2.19-1 of the rails-3.2 source package. We recommend that you upgrade your ruby-activerecord-3.2 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Recent updates address two SQL injection vulnerabilities in ruby-activerecord-3.2, enhancing security for Debian's stable release. Users are encouraged to upgrade promptly.. Ruby ActiveRecord Security, Debian SQL Injection Fix,PostgreSQL Adapter Security. . LinuxSecurity.com Team

Calendar 2 Jul 19, 2014 Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here