Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
99

Slackware: 2020-124-03 Important: HTTPD Buffer Overflow Vulnerability

New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] httpd (SSA:2019-096-01) New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/httpd-2.4.39-i586-1_slack14.2.txz: Upgraded. This release contains security fixes and improvements. In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process by manipulating the scoreboard. For more information, see: https://www.cve.org/CVERecord?id=CVE-2019-0211 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware 14.2: Updated package for Slackware x86_64 14.2: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 14.0 package: ef8dc6c74f67c20f69e45d367c69d91e httpd-2.4.39-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 213e093ac572698139ce27bf378a0bec httpd-2.4.39-x86_64-1_slack14.0.txz Slackware 14.1 package: 4191bba2f5d138a5bfd7a65e7d8a01cc httpd-2.4.39-i486-1_slack14.1.txz Slackware x86_64 14.1 package: 177aaf7e527a5eb2c4de2b6f1b6d03ea httpd-2.4.39-x86_64-1_slack14.1.txz Slackware 14.2 package: d9b05dfe83204233ab7c4ffa46ee8936 httpd-2.4.39-i586-1_slack14.2.txz Slackware x86_64 14.2 package: 7f21336828b6b8db4ffd74d3ffadf249 httpd-2.4.39-x86_64-1_slack14.2.txz Slackware -current package: 002df106ca8a8ce88cf6abbe5dd7518a n/httpd-2.4.39-i586-1.txz Slackware x86_64 -current package: d1ed25cdbb792326e2fe3f7f28a3d901 n/httpd-2.4.39-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg httpd-2.4.39-i586-1_slack14.2.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+ . Updated httpd packages for Slackware address severe security vulnerabilities impacting Apache HTTP Server versions.. Slackware Security, HTTPD Packages, Apache Update, Security Patch, Code Execution. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Apr 06, 2019 Important Slackware
99

Slackware 14.1 Security Advisory: Apache DDoS Mitigation Updates

New httpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] httpd (SSA:2014-204-01) New httpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/httpd-2.4.10-i486-1_slack14.1.txz: Upgraded. This update fixes the following security issues: *) SECURITY: CVE-2014-0117 (cve.mitre.org) mod_proxy: Fix crash in Connection header handling which allowed a denial of service attack against a reverse proxy with a threaded MPM. [Ben Reser] *) SECURITY: CVE-2014-0118 (cve.mitre.org) mod_deflate: The DEFLATE input filter (inflates request bodies) now limits the length and compression ratio of inflated request bodies to avoid denial of sevice via highly compressed bodies. See directives DeflateInflateLimitRequestBody, DeflateInflateRatioLimit, and DeflateInflateRatioBurst. [Yann Ylavic, Eric Covener] *) SECURITY: CVE-2014-0226 (cve.mitre.org) Fix a race condition in scoreboard handling, which could lead to a heap buffer overflow. [Joe Orton, Eric Covener] *) SECURITY: CVE-2014-0231 (cve.mitre.org) mod_cgid: Fix a denial of service against CGI scripts that do not consume stdin that could lead to lingering HTTPD child processes filling up the scoreboard and eventually hanging the server. By default, the client I/O timeout (Timeout directive) now applies to communication with scripts. The CGIDScriptTimeout directive can be used to set a different timeout for communication with scripts. [Rainer Jung, Eric Covener, Yann Ylavic] For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-0117 https://www.cve.org/CVERecord?id=CVE-2014-0118 https://www.cve.org/CVERecord?id=CVE-2014-0226 https://www.cve.org/CVERecord?id=CVE-2014-0231 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 13.0: Updated package for Slackware x86_64 13.0: Updated package for Slackware 13.1: Updated package for Slackware x86_64 13.1: Updated package for Slackware 13.37: Updated package for Slackware x86_64 13.37: Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 13.0 package: c79e696c379625efd18e6414f30dba80 httpd-2.2.27-i486-1_slack13.0.txz Slackware x86_64 13.0 package: 28be181b3a0aae494371279230f190e9 httpd-2.2.27-x86_64-1_slack13.0.txz Slackware 13.1 package: fc409fff4d79cb1969a40756f8a9f576 httpd-2.2.27-i486-1_slack13.1.txz Slackware x86_64 13.1 package: 07ab0f3337fc15656cd2e841c9b0eba4 httpd-2.2.27-x86_64-1_slack13.1.txz Slackware 13.37 package: b5cefd8903745aceaa68b482cb63e4e2 httpd-2.2.27-i486-1_slack13.37.txz Slackware x86_64 13.37 package: 610a33703e7f84fd14f09bc9529c1cd5 httpd-2.2.27-x86_64-1_slack13.37.txz Slackware 14.0 package: d6dedc1064a6a4d039b188fed02de89b httpd-2.4.10-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 7d150bf3bd558bf70ea2c21a08a1b5b7 httpd-2.4.10-x86_64-1_slack14.0.txz Slackware 14.1 package: 7e9b03930b0452a95595a61cf1b093d8 httpd-2.4.10-i486-1_slack14.1.txz Slackware x86_64 14.1 package: efc9893a3428d87a8d78787fbde793e0 httpd-2.4.10-x86_64-1_slack14.1.txz Slackware -current package: 1ac5a4cc6275c8f7cfa6e3a77a27f2db n/httpd-2.4.10-i486-1.txz Slackware x86_64 -currentpackage: 7fa5fda601a324238f5a2768204a7476 n/httpd-2.4.10-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg httpd-2.4.10-i486-1_slack14.1.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+ . Recent updates to the httpd packages tackle a range of security vulnerabilities in Slackware, enhancing overall system reliability and protection for users.. httpd updates, Slackware security, denial of service fix, package management. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jul 24, 2014 Important Slackware
100

openSUSE 11.0: SUSE-SA:2009:050 Moderate: Apache Execution Risk

The Apache web server was updated to fix various security issues: The Apache web server was updated to fix various security issues: - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - mod_proxy could run into an infinite loop when used as reverse proxy(CVE-2009-1890) - mod_deflate continued to co [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: apache2,libapr1 Announcement ID: SUSE-SA:2009:050 Date: Mon, 26 Oct 2009 12:00:00 +0000 Affected Products: openSUSE 10.3 openSUSE 11.0 openSUSE 11.1 SUSE SLES 9 Novell Linux Desktop 9 Open Enterprise Server Novell Linux POS 9 SLE SDK 10 SP2 SLE SDK 10 SP3 SUSE Linux Enterprise Desktop 10 SP2 SUSE Linux Enterprise Desktop 10 SP3 SUSE Linux Enterprise 10 SP2 DEBUGINFO SUSE Linux Enterprise Server 10 SP2 SUSE Linux Enterprise 10 SP3 DEBUGINFO SUSE Linux Enterprise Server 10 SP3 SLES 11 DEBUGINFO SLE 11 SLES 11 Vulnerability Type: potential code execution remote denial of service Severity (1-10): 8 SUSE Default Package: no Cross-References: CVE-2009-1195, CVE-2009-1890, CVE-2009-1891 CVE-2009-2412,CVE-2009-3094, CVE-2009-3095 Content of This Advisory: 1) Security Vulnerability Resolved: Apache and libapr1 security updates Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion The Apache web server was updated to fix various security issues: - the option IncludesNOEXEC could be bypassed via .htaccess (CVE-2009-1195) - mod_proxy could run into an infinite loop when used as reverse proxy (CVE-2009-1890) - mod_deflate continued to compress large files even after a network connection was closed, causing mod_deflate to consume large amounts of CPU (CVE-2009-1891) - The ap_proxy_ftp_handler function in modules/proxy/proxy_ftp.c in the mod_proxy_ftp module allows remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command. (CVE-2009-3094) - access restriction bypass in mod_proxy_ftp module (CVE-2009-3095) Also the libapr1 and libapr-util1 Apache helper libraries were updated to fix multiple integer overflows that could probably be used to execute arbitrary code remotely. (CVE-2009-2412) 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please close and restart all running instances of Apache after the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv to apply the update, replacing with the filename of the downloaded RPM package. x86 Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/apache2-debuginfo-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/apache2-debugsource-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/libapr-util1-debuginfo-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/libapr-util1-debugsource-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/libapr1-debuginfo-1.3.3-12.2.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/i586/libapr1-debugsource-1.3.3-12.2.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-devel-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-doc-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-example-pages-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-prefork-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-utils-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/apache2-worker-2.2.10-2.8.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-dbd-mysql-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-dbd-pgsql-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-dbd-sqlite3-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr-util1-devel-1.3.4-13.3.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr1-1.3.3-12.2.1.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/libapr1-devel-1.3.3-12.2.1.i586.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-devel-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-doc-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-example-pages-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-prefork-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-utils-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/apache2-worker-2.2.8-28.8.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-dbd-mysql-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-dbd-pgsql-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-dbd-sqlite3-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr-util1-devel-1.2.12-43.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr1-1.2.12-27.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/libapr1-devel-1.2.12-27.2.i586.rpm openSUSE 10.3: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-devel-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-doc-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-example-pages-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-prefork-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-utils-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/apache2-worker-2.2.4-70.11.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-dbd-mysql-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-dbd-pgsql-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-dbd-sqlite3-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr-util1-devel-1.2.8-68.4.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr1-1.2.9-9.2.i586.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/i586/libapr1-devel-1.2.9-9.2.i586.rpm Power PC Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/apache2-debuginfo-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/apache2-debugsource-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/libapr-util1-debuginfo-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/libapr-util1-debugsource-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/libapr1-debuginfo-1.3.3-12.2.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/ppc/libapr1-debugsource-1.3.3-12.2.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-devel-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-doc-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-example-pages-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-prefork-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-utils-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/apache2-worker-2.2.10-2.8.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-dbd-mysql-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-dbd-pgsql-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-dbd-sqlite3-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr-util1-devel-1.3.4-13.3.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr1-1.3.3-12.2.1.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/ppc/libapr1-devel-1.3.3-12.2.1.ppc.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-devel-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-doc-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-example-pages-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-prefork-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-utils-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/apache2-worker-2.2.8-28.8.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-64bit-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-dbd-mysql-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-dbd-pgsql-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-dbd-sqlite3-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-devel-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr-util1-devel-64bit-1.2.12-43.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr1-1.2.12-27.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr1-64bit-1.2.12-27.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr1-devel-1.2.12-27.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/ppc/libapr1-devel-64bit-1.2.12-27.2.ppc.rpm openSUSE 10.3: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-devel-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-doc-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-example-pages-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-prefork-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-utils-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/apache2-worker-2.2.4-70.11.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-64bit-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-dbd-mysql-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-dbd-pgsql-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-dbd-sqlite3-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-devel-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr-util1-devel-64bit-1.2.8-68.4.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr1-1.2.9-9.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr1-64bit-1.2.9-9.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr1-devel-1.2.9-9.2.ppc.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/ppc/libapr1-devel-64bit-1.2.9-9.2.ppc.rpm x86-64 Platform: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/apache2-debuginfo-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/apache2-debugsource-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/libapr-util1-debuginfo-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/libapr-util1-debugsource-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/libapr1-debuginfo-1.3.3-12.2.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/debug/update/11.1/rpm/x86_64/libapr1-debugsource-1.3.3-12.2.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-devel-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-doc-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-example-pages-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-prefork-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-utils-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/apache2-worker-2.2.10-2.8.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-dbd-mysql-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-dbd-pgsql-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-dbd-sqlite3-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr-util1-devel-1.3.4-13.3.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr1-1.3.3-12.2.1.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/x86_64/libapr1-devel-1.3.3-12.2.1.x86_64.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-devel-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-doc-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-example-pages-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-prefork-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-utils-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/apache2-worker-2.2.8-28.8.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-dbd-mysql-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-dbd-pgsql-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-dbd-sqlite3-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr-util1-devel-1.2.12-43.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr1-1.2.12-27.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/x86_64/libapr1-devel-1.2.12-27.2.x86_64.rpm openSUSE 10.3: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-devel-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-doc-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-example-pages-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-prefork-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-utils-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/apache2-worker-2.2.4-70.11.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-dbd-mysql-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-dbd-pgsql-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-dbd-sqlite3-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr-util1-devel-1.2.8-68.4.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr1-1.2.9-9.2.x86_64.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/x86_64/libapr1-devel-1.2.9-9.2.x86_64.rpm Sources: openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/src/libapr-util1-1.3.4-13.3.2.src.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/src/libapr1-1.3.3-12.2.1.src.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/src/libapr-util1-1.2.12-43.4.src.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/src/libapr1-1.2.12-27.2.src.rpm openSUSE 10.3: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/src/apache2-2.2.4-70.11.src.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/src/libapr-util1-1.2.8-68.4.src.rpm http://ftp5.gwdg.de/pub/opensuse/discontinued/update/10.3/rpm/src/libapr1-1.2.9-9.2.src.rpm Our maintenance customers are notifiedindividually. The packages are offered for installation from the maintenance web: SUSE Linux Enterprise Desktop 10 SP3 SUSE Linux Enterprise Desktop 10 SP2 Open Enterprise Server Novell Linux POS 9 Novell Linux Desktop 9 SUSE SLES 9 SLES 11 SLE 11 SLES 11 DEBUGINFO SUSE Linux Enterprise Server 10 SP3 SLE SDK 10 SP3 SUSE Linux Enterprise 10 SP3 DEBUGINFO SUSE Linux Enterprise Server 10 SP2 SLE SDK 10 SP2 SUSE Linux Enterprise 10 SP2 DEBUGINFO ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify replacing with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from This email address is being protected from spambots. You need JavaScript enabled to view it. with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. - SUSE runs two security mailing lists to which any interested party may subscribe: This email address is being protected from spambots. You need JavaScript enabled to view it. - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to . This email address is being protected from spambots. You need JavaScript enabled to view it. - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to . ==================================================================== SUSE's security contact is or . The public key is listed below. ==================================================================== . The Nginx web server along with libnghttp2 has been patched with essential updates addressing possible remote code execution vulnerabilities and risks of service interruptions.. apache update, openSUSE security, libapr patch, remote execution. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 26, 2009 Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here