Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89

Fedora: 2022-ea8f4e232d critical: golang-github-googleapis-gnostic Update

Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-ea8f4e232d 2022-07-30 01:52:05.591840 --------------------------------------------------------------------------------Name : golang-github-googleapis-gnostic Product : Fedora 36 Version : 0.5.3 Release : 7.fc36 URL : https://github.com/google/gnostic Summary : Compiler for APIs described by the OpenAPI Specification Description : This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer models for the OpenAPI Specification can be used to generate code that includes data structures with explicit fields for the elements of an OpenAPI description. This makes it possible for developers to work with OpenAPI descriptions in type-safe ways, which is particularly useful in strongly-typed languages like Go and Swift. gnostic reads OpenAPI descriptions into these generated data structures, reports errors, resolves internal dependencies, and writes the results in a binary form that can be used in any language that is supported by the Protocol Buffer tools. A plugin interface simplifies integration with API tools written in a variety of different languages, and when necessary, Protocol Buffer OpenAPI descriptions can be reexported as JSON or YAML. gnostic compilation code and OpenAPI Protocol Buffer models are automatically generated from an OpenAPI JSON Schema. Source code for the generator is in the generate-gnosticdirectory. --------------------------------------------------------------------------------Update Information: Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. --------------------------------------------------------------------------------ChangeLog: * Tue Jul 19 2022 Maxwell G - 0.5.3-7 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-ea8f4e232d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Addresses various security issues in golang-github-googleapis-gnostic for Fedora via patches and improvements.. Golang Gnostic, OpenAPI Specification, Fedora Updates, API Security, Software Updates. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 29, 2022 Critical Fedora
100

SUSE: 2019:1690-1 Important: libvirt Execution Risk Mitigation

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:1690-1 Rating: important References: #1138301 Cross-References: CVE-2019-10161 Affected Products: SUSE Linux Enterprise Server 12-LTSS ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libvirt fixes the following issue: Security issue fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file with root privileges by libvirtd (bsc#1138301). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2019-1690=1 Package List: - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): libvirt-1.2.5-27.19.1 libvirt-client-1.2.5-27.19.1 libvirt-client-debuginfo-1.2.5-27.19.1 libvirt-daemon-1.2.5-27.19.1 libvirt-daemon-config-network-1.2.5-27.19.1 libvirt-daemon-config-nwfilter-1.2.5-27.19.1 libvirt-daemon-debuginfo-1.2.5-27.19.1 libvirt-daemon-driver-interface-1.2.5-27.19.1 libvirt-daemon-driver-interface-debuginfo-1.2.5-27.19.1 libvirt-daemon-driver-lxc-1.2.5-27.19.1 libvirt-daemon-driver-lxc-debuginfo-1.2.5-27.19.1 libvirt-daemon-driver-network-1.2.5-27.19.1 libvirt-daemon-driver-network-debuginfo-1.2.5-27.19.1 libvirt-daemon-driver-nodedev-1.2.5-27.19.1 libvirt-daemon-driver-nodedev-debuginfo-1.2.5-27.19.1 libvirt-daemon-driver-nwfilter-1.2.5-27.19.1 libvirt-daemon-driver-nwfilter-debuginfo-1.2.5-27.19.1 libvirt-daemon-driver-qemu-1.2.5-27.19.1 libvirt-daemon-driver-qemu-debuginfo-1.2.5-27.19.1 libvirt-daemon-driver-secret-1.2.5-27.19.1 libvirt-daemon-driver-secret-debuginfo-1.2.5-27.19.1 libvirt-daemon-driver-storage-1.2.5-27.19.1 libvirt-daemon-driver-storage-debuginfo-1.2.5-27.19.1 libvirt-daemon-lxc-1.2.5-27.19.1 libvirt-daemon-qemu-1.2.5-27.19.1 libvirt-debugsource-1.2.5-27.19.1 libvirt-doc-1.2.5-27.19.1 libvirt-lock-sanlock-1.2.5-27.19.1 libvirt-lock-sanlock-debuginfo-1.2.5-27.19.1 - SUSE Linux Enterprise Server 12-LTSS (x86_64): libvirt-daemon-driver-libxl-1.2.5-27.19.1 libvirt-daemon-driver-libxl-debuginfo-1.2.5-27.19.1 libvirt-daemon-xen-1.2.5-27.19.1 References: https://www.suse.com/security/cve/CVE-2019-10161.html https://bugzilla.suse.com/1138301 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . This vital SUSE Security Update tackles a severe issue in libvirt, safeguarding system integrity from potential threats.. libvirt security patch, SUSE update, Linux Enterprise vulnerability, important security fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 24, 2019 Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here