Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
200

SciLinux: SLSA-2019-3055-1 Important Security Advisory for Kernel

kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c (CVE-2018-20856) * kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c (CVE-2019-3846) * hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506) * kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ [More...]. Synopsis: Important: kernel security and bug fix update Advisory ID: SLSA-2019:3055-1 Issue Date: 2019-10-16 CVE Numbers: None -- Security Fix(es): * kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c (CVE-2018-20856) * kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function in marvell/mwifiex/scan.c (CVE-2019-3846) * hardware: bluetooth: BR/EDR encryption key negotiation attacks (KNOB) (CVE-2019-9506) * kernel: Heap overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c (CVE-2019-10126) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fixes: * gfs2: Fix iomap write page reclaim deadlock (BZ#1737373) * [FJ7.6 Bug]: [REG] kernel: ipc: ipc_free should use kvfree (BZ#1740178) * high update_cfs_rq_blocked_load contention (BZ#1740180) * [Hyper-V][RHEL 7] kdump fails to start on a Hyper-V guest of Windows Server 2019. (BZ#1740188) * kvm: backport cpuidle-haltpoll driver (BZ#1740192) * Growing unreclaimable slab memory (BZ#1741920) * [bnx2x] ping failed from pf to vf which has been attached to vm (BZ#1741926) * [Hyper-V]vPCI devices cannot allocate IRQs vectors in a Hyper-V VM with > 240 vCPUs (i.e., when in x2APIC mode) (BZ#1743324) * Macsec: inbound MACSEC frame is unexpectedly dropped with InPktsNotValid (BZ#1744442) * RHEL 7.7 Beta - Hit error when trying to run nvme connect with IPv6 address (BZ#1744443) * RHEL 7.6 SS4 - Paths lost when running straight I/Oon NVMe/RoCE system (BZ#1744444) * NFSv4.0 client sending a double CLOSE (leading to EIO application failure) (BZ#1744946) * [Azure] CRI-RDOS | [RHEL 7.8] Live migration only takes 10 seconds, but the VM was unavailable for 2 hours (BZ#1748239) * NFS client autodisconnect timer may fire immediately after TCP connection setup and may cause DoS type reconnect problem in complex network environments (BZ#1749290) * [Inspur] RHEL7.6 ASPEED graphic card display issue (BZ#1749296) * Allows macvlan to operated correctly over the active-backup mode to support bonding events. (BZ#1751579) * [LLNL 7.5 Bug] slab leak causing a crash when using kmem control group (BZ#1752421) Users of kernel are advised to upgrade to these updated packages, which fix these bugs. -- SL7 x86_64 bpftool-3.10.0-1062.4.1.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1062.4.1.el7.x86_64.rpm kernel-3.10.0-1062.4.1.el7.x86_64.rpm kernel-debug-3.10.0-1062.4.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.4.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-1062.4.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-1062.4.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1062.4.1.el7.x86_64.rpm kernel-devel-3.10.0-1062.4.1.el7.x86_64.rpm kernel-headers-3.10.0-1062.4.1.el7.x86_64.rpm kernel-tools-3.10.0-1062.4.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1062.4.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-1062.4.1.el7.x86_64.rpm perf-3.10.0-1062.4.1.el7.x86_64.rpm perf-debuginfo-3.10.0-1062.4.1.el7.x86_64.rpm python-perf-3.10.0-1062.4.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1062.4.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-1062.4.1.el7.x86_64.rpm noarch kernel-abi-whitelists-3.10.0-1062.4.1.el7.noarch.rpm kernel-doc-3.10.0-1062.4.1.el7.noarch.rpm - Scientific Linux Development Team . Critical kernel updates concerning memory corruption and buffer overflow flaws have been resolved for SL7.x in this notification.. Kernel Security, Bug Fix Update, Heap Overflow,Bluetooth Attacks. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 18, 2019 Important Scientific Linux
98

Red Hat 4 RHSA-2007:0065-01 Moderate: Bluetooth HID Attack Prevention

Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. A flaw was found in the Bluetooth HID daemon (hidd). A remote attacker would have been able to inject keyboard and mouse events via a Bluetooth connection without any authorization. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Moderate: bluez-utils security update Advisory ID: RHSA-2007:0065-01 Advisory URL: https://access.redhat.com/errata/RHSA-2007:0065.html Issue date: 2007-05-14 Updated on: 2007-05-14 Product: Red Hat Enterprise Linux CVE Names: CVE-2006-6899 - ---------------------------------------------------------------------1. Summary: Updated bluez-utils packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Problem description: The bluez-utils package contains Bluetooth daemons and utilities. A flaw was found in the Bluetooth HID daemon (hidd). A remote attacker would have been able to inject keyboard and mouse events via a Bluetooth connection without any authorization. (CVE-2006-6899) Note that Red Hat Enterprise Linux does not come with the Bluetooth HID daemon enabled by default. Users of bluez-utils are advised to upgrade to these updated packages, which contains a backported patch to correct this issue. 4. Solution: Before applying this update, make sure all previously released errata relevant to yoursystem have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed (http://bugzilla.redhat.com/): 227014 - CVE-2006-6899 Bluetooth HID key events injection flaw 6. RPMs required: Red Hat Enterprise Linux AS version 4: SRPMS: f7a4d82ed172f4984e8e1abecf723eab bluez-utils-2.10-2.2.src.rpm i386: 818e3b413b31f4fc68e6388dc3feca16 bluez-utils-2.10-2.2.i386.rpm 8ab01e39c64083f86da77b56f1b9ed9c bluez-utils-cups-2.10-2.2.i386.rpm 88944ec7e5a6fa381ec30d9251230827 bluez-utils-debuginfo-2.10-2.2.i386.rpm ia64: ba34fe7467efcb74df5896e42261cfb9 bluez-utils-2.10-2.2.ia64.rpm 864af7581f08ad15f6cbd9961fb53880 bluez-utils-cups-2.10-2.2.ia64.rpm 7bc5e16ae46f22aea7208725920de642 bluez-utils-debuginfo-2.10-2.2.ia64.rpm ppc: d7a59edfaeb01d98ec4643958c8c5cdd bluez-utils-2.10-2.2.ppc.rpm 24b8e2e784629942997068f591dca695 bluez-utils-cups-2.10-2.2.ppc.rpm 909bebe0993c4531da2d80b077d63661 bluez-utils-debuginfo-2.10-2.2.ppc.rpm x86_64: 230bdc2688fb568dd6402d7728c40cb4 bluez-utils-2.10-2.2.x86_64.rpm 2c83d5d0ff12b0d627f609e75586fac4 bluez-utils-cups-2.10-2.2.x86_64.rpm 95964f5ff634df86ff613d0fc0e8c9d1 bluez-utils-debuginfo-2.10-2.2.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: SRPMS: f7a4d82ed172f4984e8e1abecf723eab bluez-utils-2.10-2.2.src.rpm i386: 818e3b413b31f4fc68e6388dc3feca16 bluez-utils-2.10-2.2.i386.rpm 8ab01e39c64083f86da77b56f1b9ed9c bluez-utils-cups-2.10-2.2.i386.rpm 88944ec7e5a6fa381ec30d9251230827 bluez-utils-debuginfo-2.10-2.2.i386.rpm x86_64: 230bdc2688fb568dd6402d7728c40cb4 bluez-utils-2.10-2.2.x86_64.rpm 2c83d5d0ff12b0d627f609e75586fac4 bluez-utils-cups-2.10-2.2.x86_64.rpm 95964f5ff634df86ff613d0fc0e8c9d1 bluez-utils-debuginfo-2.10-2.2.x86_64.rpm Red Hat Enterprise Linux ES version4: SRPMS: f7a4d82ed172f4984e8e1abecf723eab bluez-utils-2.10-2.2.src.rpm i386: 818e3b413b31f4fc68e6388dc3feca16 bluez-utils-2.10-2.2.i386.rpm 8ab01e39c64083f86da77b56f1b9ed9c bluez-utils-cups-2.10-2.2.i386.rpm 88944ec7e5a6fa381ec30d9251230827 bluez-utils-debuginfo-2.10-2.2.i386.rpm ia64: ba34fe7467efcb74df5896e42261cfb9 bluez-utils-2.10-2.2.ia64.rpm 864af7581f08ad15f6cbd9961fb53880 bluez-utils-cups-2.10-2.2.ia64.rpm 7bc5e16ae46f22aea7208725920de642 bluez-utils-debuginfo-2.10-2.2.ia64.rpm x86_64: 230bdc2688fb568dd6402d7728c40cb4 bluez-utils-2.10-2.2.x86_64.rpm 2c83d5d0ff12b0d627f609e75586fac4 bluez-utils-cups-2.10-2.2.x86_64.rpm 95964f5ff634df86ff613d0fc0e8c9d1 bluez-utils-debuginfo-2.10-2.2.x86_64.rpm Red Hat Enterprise Linux WS version 4: SRPMS: f7a4d82ed172f4984e8e1abecf723eab bluez-utils-2.10-2.2.src.rpm i386: 818e3b413b31f4fc68e6388dc3feca16 bluez-utils-2.10-2.2.i386.rpm 8ab01e39c64083f86da77b56f1b9ed9c bluez-utils-cups-2.10-2.2.i386.rpm 88944ec7e5a6fa381ec30d9251230827 bluez-utils-debuginfo-2.10-2.2.i386.rpm ia64: ba34fe7467efcb74df5896e42261cfb9 bluez-utils-2.10-2.2.ia64.rpm 864af7581f08ad15f6cbd9961fb53880 bluez-utils-cups-2.10-2.2.ia64.rpm 7bc5e16ae46f22aea7208725920de642 bluez-utils-debuginfo-2.10-2.2.ia64.rpm x86_64: 230bdc2688fb568dd6402d7728c40cb4 bluez-utils-2.10-2.2.x86_64.rpm 2c83d5d0ff12b0d627f609e75586fac4 bluez-utils-cups-2.10-2.2.x86_64.rpm 95964f5ff634df86ff613d0fc0e8c9d1 bluez-utils-debuginfo-2.10-2.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2006-6899 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2007 Red Hat, Inc. . Patch for bluez-utils addressessignificant security vulnerability in Red Hat Linux, safeguarding systems from potential remote exploitation.. Bluez-Utils Update, Red Hat Security, Bluetooth Vulnerability, Moderate Impact Advisory. . LinuxSecurity.com Team

Calendar 2 May 14, 2007 Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here