Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisoryFedoraupdate releaseFedora 35: 2022-adf0c6d196 moderate zsh buffer problem encountered here
- update to latest upstream release (fixes CVE-2021-45444). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-adf0c6d196 2022-02-16 01:25:55.828547 --------------------------------------------------------------------------------Name : zsh Product : Fedora 35 Version : 5.8.1 Release : 1.fc35 URL : https://zsh.sourceforge.io/ Summary : Powerful interactive shell Description : The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more. --------------------------------------------------------------------------------Update Information: - update to latest upstream release (fixes CVE-2021-45444) --------------------------------------------------------------------------------ChangeLog: * Sun Feb 13 2022 Kamil Dudka - 5.8.1-1 - update to latest upstream release (fixes CVE-2021-45444) * Thu Nov 25 2021 Debarshi Ray - 5.8-7 - Overwrite PROMPT only if it's set to the built-in default (#2026749) --------------------------------------------------------------------------------References: [ 1 ] Bug #2053841 - zsh-5.8.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2053841 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-adf0c6d196' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Feb 15, 2022
Fedora
203
security advisoryxsswebminMageia 7: MGASA-2020-0400 Moderate: Webmin XSS and Input Issues
An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed. (CVE-2020-8820) . MGASA-2020-0400 - Updated webmin package fixes security vulnerabilities Publication date: 08 Nov 2020 URL: https://advisories.mageia.org/MGASA-2020-0400.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-8820, CVE-2020-8821, CVE-2020-12670 An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting the Cluster Shell Commands Menu, the XSS Payload will be rendered and executed. (CVE-2020-8820) An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visiting the Action Logs Menu and displaying logs, the HTML code will be rendered (however, JavaScript is not executed). Changes are kept across users. (CVE-2020-8821) XSS exists in Webmin 1.941 and earlier affecting the Save function of the Read User Email Module / mailboxes Endpoint when attempting to save HTML emails. This module parses any output without sanitizing SCRIPT elements, as opposed to the View function, which sanitizes the input correctly. A malicious user can send any JavaScript payload into the message body and execute it if the user decides to save that email. (CVE-2020-12670) References: - https://bugs.mageia.org/show_bug.cgi?id=27459 - https://webmin.com/security/ - https://webmin.com/tags/webmin-changelog/ - https://www.cve.org/CVERecord?id=CVE-2020-8820 - https://www.cve.org/CVERecord?id=CVE-2020-8821 - https://www.cve.org/CVERecord?id=CVE-2020-12670 SRPMS: - 7/core/webmin-1.960-1.mga7 . MGASA-2020-0500 highlights vulnerabilities in Webminconcerning XSS and deficient input validation on Mageia 8 version. Urgent update suggested!. XSS Exploits, Webmin Security, Mageia Update, Command Shell Vulnerability. . LinuxSecurity.com Team
Nov 08, 2020
Mageia
98
security advisoryRed Hatbug fixRed Hat: RHSA-2019-2017-01 Moderate: zsh Security Update
An update for zsh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: zsh security and bug fix update Advisory ID: RHSA-2019:2017-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2017 Issue date: 2019-08-06 CVE Names: CVE-2018-13259 ==================================================================== 1. Summary: An update for zsh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, andmore. Security Fix(es): * zsh: Improper handling of shebang line longer than 64 (CVE-2018-13259) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1626184 - CVE-2018-13259 zsh: Improper handling of shebang line longer than 64 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: zsh-5.0.2-33.el7.src.rpm x86_64: zsh-5.0.2-33.el7.x86_64.rpm zsh-debuginfo-5.0.2-33.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: zsh-debuginfo-5.0.2-33.el7.x86_64.rpm zsh-html-5.0.2-33.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: zsh-5.0.2-33.el7.src.rpm x86_64: zsh-5.0.2-33.el7.x86_64.rpm zsh-debuginfo-5.0.2-33.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: zsh-debuginfo-5.0.2-33.el7.x86_64.rpm zsh-html-5.0.2-33.el7.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: zsh-5.0.2-33.el7.src.rpm ppc64: zsh-5.0.2-33.el7.ppc64.rpm zsh-debuginfo-5.0.2-33.el7.ppc64.rpm ppc64le: zsh-5.0.2-33.el7.ppc64le.rpm zsh-debuginfo-5.0.2-33.el7.ppc64le.rpm s390x: zsh-5.0.2-33.el7.s390x.rpm zsh-debuginfo-5.0.2-33.el7.s390x.rpm x86_64: zsh-5.0.2-33.el7.x86_64.rpm zsh-debuginfo-5.0.2-33.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.7): ppc64: zsh-debuginfo-5.0.2-33.el7.ppc64.rpm zsh-html-5.0.2-33.el7.ppc64.rpm ppc64le: zsh-debuginfo-5.0.2-33.el7.ppc64le.rpm zsh-html-5.0.2-33.el7.ppc64le.rpm s390x: zsh-debuginfo-5.0.2-33.el7.s390x.rpm zsh-html-5.0.2-33.el7.s390x.rpm x86_64: zsh-debuginfo-5.0.2-33.el7.x86_64.rpm zsh-html-5.0.2-33.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: zsh-5.0.2-33.el7.src.rpm x86_64: zsh-5.0.2-33.el7.x86_64.rpm zsh-debuginfo-5.0.2-33.el7.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: zsh-debuginfo-5.0.2-33.el7.x86_64.rpm zsh-html-5.0.2-33.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-13259 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/7.7_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXUl20NzjgjWX9erEAQhNDg//XRmPG4LBv+FwA/aX+cx8UEG7DyGPR2X6 QGPfpaFroPKk8VWAeQEXj37oymopL1yFn/OHh1qH+6qqKdzUgbYCf3MkZjnB1p5B Tl3c/+SCYJn91NCb11lCoGs1KY2LkiwbLjC9D0HHJXq2Z3OQSCKN9EG4LV05bojX jFJyxMUrsZ2MijMuxVmO6hUZ/22FyGNOixIohMjWIth97m1Twzb8esNmBBWlaqKg PSnpNrRZ82vDbYEDbNkouQOsBeqJPAt3HNoAjZnHpQkEJT7TvnnlEjJbjNG8oNHw GRe9v9ZB/G7YJq+bDCREPcsPW5TMo1L7ehJeNsJ52dfFLeMxHKYt843NmD5Iq5hw 3ner/4s5CR3AxFVtryqTUk4tb6LOfDUbgROpT1RkX7VrJ8uliiFGiM4DGAoQaoED jD+ErLQ43v21IHuwJHb0OrKGE786xxYsdTmWWqm+cNw0y2ReJ4nUJOwKk17YQ05X 4+a+IKNhq9ZF8ren/lBCdyPRhUSmxcizdrqPNq6WDn+OMg5Fcqn+DX0AcR9uxhqR 3kb9V+dSX7Ul25rOo1fhiHmbvAVSb5zZFEUwbMHK6rvWCS5/DrT0t/ayNC6fesT1 kR20MxVBY/EFSZYcDjkgUdL9f7jXUlLxv/iLZtTMr3zJiNjaUjE+Cf1kwnZMJpsp 7H4a/I6oZjs=6Q7S -----END PGP SIGNATURE----- -- RHSA-announce mailinglist
Aug 06, 2019
•Important
Red Hat
100
security advisoryimportantsuseSUSE: 2012:0721-1 Critical Advisory: PHP5 Command Shell Vulnerabilities
An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. It includes one version update. It includes one version update.. SUSE Security Update: Security update for PHP5 ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0721-1 Rating: important References: #761631 Cross-References: CVE-2012-2335 CVE-2012-2336 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. It includes one version update. Description: PHP5 was updated with incremental fixes to the previous update: * CVE-2012-2335: Additional unsafe cgi wrapper scripts are also fixed now. * CVE-2012-2336: Even more commandline option handling is filtered, which could lead to crashes of the php interpreter. Security Issue references: * CVE-2012-2335 * CVE-2012-2336 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-apache2-mod_php5-6316 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-apache2-mod_php5-6316 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-apache2-mod_php5-6316 - SUSE Linux Enterprise Server 11 SP1 forVMware: zypper in -t patch slessp1-apache2-mod_php5-6316 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-apache2-mod_php5-6316 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.40.1 php5-imap-5.2.14-0.7.30.40.1 php5-ncurses-5.2.14-0.7.30.40.1 php5-posix-5.2.14-0.7.30.40.1 php5-readline-5.2.14-0.7.30.40.1 php5-sockets-5.2.14-0.7.30.40.1 php5-sqlite-5.2.14-0.7.30.40.1 php5-tidy-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: php5-devel-5.2.14-0.7.30.40.1 php5-imap-5.2.14-0.7.30.40.1 php5-ncurses-5.2.14-0.7.30.40.1 php5-posix-5.2.14-0.7.30.40.1 php5-readline-5.2.14-0.7.30.40.1 php5-sockets-5.2.14-0.7.30.40.1 php5-sqlite-5.2.14-0.7.30.40.1 php5-tidy-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64) [New Version: 5.2.14]: apache2-mod_php5-5.2.14-0.7.30.40.1 php5-5.2.14-0.7.30.40.1 php5-bcmath-5.2.14-0.7.30.40.1 php5-bz2-5.2.14-0.7.30.40.1 php5-calendar-5.2.14-0.7.30.40.1 php5-ctype-5.2.14-0.7.30.40.1 php5-curl-5.2.14-0.7.30.40.1 php5-dba-5.2.14-0.7.30.40.1 php5-dbase-5.2.14-0.7.30.40.1 php5-dom-5.2.14-0.7.30.40.1 php5-exif-5.2.14-0.7.30.40.1 php5-fastcgi-5.2.14-0.7.30.40.1 php5-ftp-5.2.14-0.7.30.40.1 php5-gd-5.2.14-0.7.30.40.1 php5-gettext-5.2.14-0.7.30.40.1 php5-gmp-5.2.14-0.7.30.40.1 php5-hash-5.2.14-0.7.30.40.1 php5-iconv-5.2.14-0.7.30.40.1 php5-json-5.2.14-0.7.30.40.1 php5-ldap-5.2.14-0.7.30.40.1 php5-mbstring-5.2.14-0.7.30.40.1 php5-mcrypt-5.2.14-0.7.30.40.1 php5-mysql-5.2.14-0.7.30.40.1 php5-odbc-5.2.14-0.7.30.40.1 php5-openssl-5.2.14-0.7.30.40.1 php5-pcntl-5.2.14-0.7.30.40.1 php5-pdo-5.2.14-0.7.30.40.1 php5-pear-5.2.14-0.7.30.40.1 php5-pgsql-5.2.14-0.7.30.40.1 php5-pspell-5.2.14-0.7.30.40.1 php5-shmop-5.2.14-0.7.30.40.1 php5-snmp-5.2.14-0.7.30.40.1 php5-soap-5.2.14-0.7.30.40.1 php5-suhosin-5.2.14-0.7.30.40.1 php5-sysvmsg-5.2.14-0.7.30.40.1 php5-sysvsem-5.2.14-0.7.30.40.1 php5-sysvshm-5.2.14-0.7.30.40.1 php5-tokenizer-5.2.14-0.7.30.40.1 php5-wddx-5.2.14-0.7.30.40.1 php5-xmlreader-5.2.14-0.7.30.40.1 php5-xmlrpc-5.2.14-0.7.30.40.1 php5-xmlwriter-5.2.14-0.7.30.40.1 php5-xsl-5.2.14-0.7.30.40.1 php5-zip-5.2.14-0.7.30.40.1 php5-zlib-5.2.14-0.7.30.40.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.34.1 php5-5.2.14-0.34.1 php5-bcmath-5.2.14-0.34.1 php5-bz2-5.2.14-0.34.1 php5-calendar-5.2.14-0.34.1 php5-ctype-5.2.14-0.34.1 php5-curl-5.2.14-0.34.1 php5-dba-5.2.14-0.34.1 php5-dbase-5.2.14-0.34.1 php5-devel-5.2.14-0.34.1 php5-dom-5.2.14-0.34.1 php5-exif-5.2.14-0.34.1 php5-fastcgi-5.2.14-0.34.1 php5-ftp-5.2.14-0.34.1 php5-gd-5.2.14-0.34.1 php5-gettext-5.2.14-0.34.1 php5-gmp-5.2.14-0.34.1 php5-hash-5.2.14-0.34.1 php5-iconv-5.2.14-0.34.1 php5-imap-5.2.14-0.34.1 php5-json-5.2.14-0.34.1 php5-ldap-5.2.14-0.34.1 php5-mbstring-5.2.14-0.34.1 php5-mcrypt-5.2.14-0.34.1 php5-mhash-5.2.14-0.34.1 php5-mysql-5.2.14-0.34.1 php5-ncurses-5.2.14-0.34.1 php5-odbc-5.2.14-0.34.1 php5-openssl-5.2.14-0.34.1 php5-pcntl-5.2.14-0.34.1 php5-pdo-5.2.14-0.34.1 php5-pear-5.2.14-0.34.1 php5-pgsql-5.2.14-0.34.1 php5-posix-5.2.14-0.34.1 php5-pspell-5.2.14-0.34.1 php5-shmop-5.2.14-0.34.1 php5-snmp-5.2.14-0.34.1 php5-soap-5.2.14-0.34.1 php5-sockets-5.2.14-0.34.1 php5-sqlite-5.2.14-0.34.1 php5-suhosin-5.2.14-0.34.1 php5-sysvmsg-5.2.14-0.34.1 php5-sysvsem-5.2.14-0.34.1 php5-sysvshm-5.2.14-0.34.1 php5-tokenizer-5.2.14-0.34.1 php5-wddx-5.2.14-0.34.1 php5-xmlreader-5.2.14-0.34.1 php5-xmlrpc-5.2.14-0.34.1 php5-xsl-5.2.14-0.34.1 php5-zlib-5.2.14-0.34.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): apache2-mod_php5-5.2.14-0.34.1 php5-5.2.14-0.34.1 php5-bcmath-5.2.14-0.34.1 php5-bz2-5.2.14-0.34.1 php5-calendar-5.2.14-0.34.1 php5-ctype-5.2.14-0.34.1 php5-curl-5.2.14-0.34.1 php5-dba-5.2.14-0.34.1 php5-dbase-5.2.14-0.34.1 php5-devel-5.2.14-0.34.1 php5-dom-5.2.14-0.34.1 php5-exif-5.2.14-0.34.1 php5-fastcgi-5.2.14-0.34.1 php5-ftp-5.2.14-0.34.1 php5-gd-5.2.14-0.34.1 php5-gettext-5.2.14-0.34.1 php5-gmp-5.2.14-0.34.1 php5-hash-5.2.14-0.34.1 php5-iconv-5.2.14-0.34.1 php5-imap-5.2.14-0.34.1 php5-ldap-5.2.14-0.34.1 php5-mbstring-5.2.14-0.34.1 php5-mcrypt-5.2.14-0.34.1 php5-mhash-5.2.14-0.34.1 php5-mysql-5.2.14-0.34.1 php5-ncurses-5.2.14-0.34.1 php5-odbc-5.2.14-0.34.1 php5-openssl-5.2.14-0.34.1 php5-pcntl-5.2.14-0.34.1 php5-pdo-5.2.14-0.34.1 php5-pear-5.2.14-0.34.1 php5-pgsql-5.2.14-0.34.1 php5-posix-5.2.14-0.34.1 php5-pspell-5.2.14-0.34.1 php5-shmop-5.2.14-0.34.1 php5-snmp-5.2.14-0.34.1 php5-soap-5.2.14-0.34.1 php5-sockets-5.2.14-0.34.1 php5-sqlite-5.2.14-0.34.1 php5-suhosin-5.2.14-0.34.1 php5-sysvmsg-5.2.14-0.34.1 php5-sysvsem-5.2.14-0.34.1 php5-sysvshm-5.2.14-0.34.1 php5-tidy-5.2.14-0.34.1 php5-tokenizer-5.2.14-0.34.1 php5-wddx-5.2.14-0.34.1 php5-xmlreader-5.2.14-0.34.1 php5-xmlrpc-5.2.14-0.34.1 php5-xsl-5.2.14-0.34.1 php5-zlib-5.2.14-0.34.1 References: https://www.suse.com/security/cve/CVE-2012-2335.html https://www.suse.com/security/cve/CVE-2012-2336.html . SUSE improves PHP5 by addressing critical security flaws with new updates, accompanied by enhancement protocols and detailed software patch guidelines.. SUSE Security Update, PHP Fixed, Command Shell Issue. . Severity: Important. LinuxSecurity.com Team
Jun 09, 2012
•Important
SuSE
89
security advisorycriticalFedora CoreFedora Core 4: 2006-118 Critical: tcsh 6.14 Update For Stability Issues
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-118 2006-03-11 ---------------------------------------------------------------------Product : Fedora Core 4 Name : tcsh Version : 6.14 Release : 1.fc4.2 Summary : An enhanced version of csh, the C shell. Description : Tcsh is an enhanced but completely compatible version of csh, the C shell. Tcsh is a command language interpreter which can be used both as an interactive login shell and as a shell script command processor. Tcsh includes a command line editor, programmable word completion, spelling correction, a history mechanism, job control and a C language like syntax. ---------------------------------------------------------------------* Tue Feb 28 2006 Miloslav Trmac - 6.14-1.fc4.2 - Fix a crash when reading scripts with multibyte characters (#183267) * Sun Feb 19 2006 Miloslav Trmac - 6.14-1.fc4.1 - Block SIGINT while waiting for children (#177366) ---------------------------------------------------------------------This update can be downloaded from: 61bd17a700557f0e617a7bbb28788acd196d2f98 SRPMS/tcsh-6.14-1.fc4.2.src.rpm 3ff3af074c676425b39411b7032c5557aaa02f16 ppc/tcsh-6.14-1.fc4.2.ppc.rpm b208d19ccc839e3db06fa28dab64a8f8538dcc27 ppc/debug/tcsh-debuginfo-6.14-1.fc4.2.ppc.rpm bffc3820a8eb70b130f5cd63a88f98c0db0c8c7c x86_64/tcsh-6.14-1.fc4.2.x86_64.rpm ac043cbd0833f69e33234421bf0cf1f0d9956754 x86_64/debug/tcsh-debuginfo-6.14-1.fc4.2.x86_64.rpm 0a9050c7ed520417c9b7882dcd9af5d923445bd5 i386/tcsh-6.14-1.fc4.2.i386.rpm af25f28496a0efaab82a3a9ee03d8d015b06d83d i386/debug/tcsh-debuginfo-6.14-1.fc4.2.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ----------------------------------------------------------------------- fedora-announce-list mailing list
Mar 11, 2006
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!