Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorymoderatesecurity issue

Red Hat Enterprise Linux 9 RHSA-2022-8126-01 Moderate Ignition Bug Fix

An update for ignition is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: ignition security, bug fix, and enhancement update Advisory ID: RHSA-2022:8126-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:8126 Issue date: 2022-11-15 CVE Names: CVE-2022-1706 ==================================================================== 1. Summary: An update for ignition is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - aarch64, ppc64le, s390x, x86_64 3. Description: Ignition is a utility used to manipulate systems during the initramfs. This includes partitioning disks, formatting partitions, writing files (regular files, systemd units, etc.), and configuring users. On first boot, Ignition reads its configuration from a source of truth (remote URL, network metadata service, hypervisor bridge, etc.) and applies the configuration. The following packages have been upgraded to a later upstream version: ignition (2.14.0). (BZ#2090647) Security Fix(es): * ignition: configs are accessible from unprivileged containers in VMs running on VMware products (CVE-2022-1706) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other relatedinformation, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2066829 - Update to 2.13.0-2 2082274 - CVE-2022-1706 ignition: configs are accessible from unprivileged containers in VMs running on VMware products 2085130 - update spec file/man page to indicate Ignition is currently only supported on RHCOS 2090647 - Update Ignition to latest upstream version 2.14.0 2117606 - Enable ssh-key-dir in ignition on C9S 6. Package List: Red Hat Enterprise Linux AppStream (v. 9): Source: ignition-2.14.0-1.el9.src.rpm aarch64: ignition-2.14.0-1.el9.aarch64.rpm ignition-debuginfo-2.14.0-1.el9.aarch64.rpm ignition-debugsource-2.14.0-1.el9.aarch64.rpm ignition-validate-debuginfo-2.14.0-1.el9.aarch64.rpm ppc64le: ignition-2.14.0-1.el9.ppc64le.rpm ignition-debuginfo-2.14.0-1.el9.ppc64le.rpm ignition-debugsource-2.14.0-1.el9.ppc64le.rpm ignition-validate-debuginfo-2.14.0-1.el9.ppc64le.rpm s390x: ignition-2.14.0-1.el9.s390x.rpm ignition-debuginfo-2.14.0-1.el9.s390x.rpm ignition-debugsource-2.14.0-1.el9.s390x.rpm ignition-validate-debuginfo-2.14.0-1.el9.s390x.rpm x86_64: ignition-2.14.0-1.el9.x86_64.rpm ignition-debuginfo-2.14.0-1.el9.x86_64.rpm ignition-debugsource-2.14.0-1.el9.x86_64.rpm ignition-validate-debuginfo-2.14.0-1.el9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2022-1706 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.1_release_notes/index 8.Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY3PhJdzjgjWX9erEAQj5DA//afrYtok46n53B1sQ+im37Kf+famdtKUs k1rbjBdYgSRDDBkut/9vGXVw52Ulf5aXVR1LbyVrnhCdbeEVTsiVZXlrnoMwj1vg pxQNdObR8iq75LB4QcLSla7Dsen4Ips+lGxok6DAeDrVo9b3zNnwaYfih8sREYZy gOOECfGNKUdtpYYIvOSDnzh2aNUKhyrRj2ahMDCcgIs93Ivg9jkCkXOaSb/4/aB6 TmDwmf6nq311sf6LSZk97UVlQlVk8NSLmnQHSxp7DPrQRrzaGun6C9E3819eSTvl /DDDaNT7A8FLb0z0i3QlLmagz29iuHXEAxBiuoTutGKLXymEaTijNFZmrO6mcA6Q NTEw7yUJljbfCQ6i6wRwr+8bRBedhWSEbHQWeXrxrkFVVty+FSZDmDAjk0G2nyaR eqEBzy8dga6cI8AnCrU+G/R3n/fj4u41Cm95f8vGQcQ1fYUvcfCw5iohAUtd2MOr eYw2t+gh6snTOmt81KJfcnpmNqK9t5Bn9cmOPaQrcA4BAwKouZad6aHedNoxLMTW M92KzdK2eRc9tPKzZUim1YwwbG1OD4KvQqdFHhfUTF3D6VJH1vVqLoyoChGY4EYk qoEzoFwRGUY0gHbjuy07h/1qr++lkkpEbY6ZkAnu42/QjdMoGWJFrEXxlBW4KMMm BRdawOhkw98=4E1Y -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . A significant patch for Ignition on Red Hat Linux 9 resolves security vulnerabilities and corrects bugs. Implement updates for better protection.. Red Hat Enterprise Linux, Ignition Security Update, Bug Fix. . LinuxSecurity.com Team

Calendar 2 Nov 15, 2022 Red Hat
87
Ls Advisories Debian Esm H240
Price Tag 1security advisoryremote accessDebian

Debian DSA 265-1: Remote Access And XSS Threats Fixed In Bonsai

Several security related bugs have been fix in bonsai.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 265-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze March 21st, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : bonsai Vulnerability : several Problem-Type : remote Debian-specific: no CVE Ids : CAN-2003-0152 CAN-2003-0153 CAN-2003-0154 CAN-2003-0155 Rémi Perrot fixed several security related bugs in the bonsai, the Mozilla CVS query tool by web interface. Vulnerabilities include arbitrary code execution, cross-site scripting and access to configuration parameters. The Common Vulnerabilities and Exposures project identifies the following problems: * CAN-2003-0152 - Remote execution of arbitrary commands as www-data * CAN-2003-0153 - Absolute path disclosure * CAN-2003-0154 - Cross site scriptiong attacks * CAN-2003-0155 - Unauthenticated access to parameters page For the stable distribution (woody) these problems have been fixed in version 1.3+cvs20020224-1woody1. The old stable distribution (potato) is not affected since it doesn't contain bonsai. For the unstable distribution (sid) these problems have been fixed in version 1.3+cvs20030317-1. We recommend that you upgrade your bonsai package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 675 55a326a22076c5eb4ae06b9f45040ca0 Size/MD5 checksum: 53566 d168b5366401692756ad7d6260ca2f74 Size/MD5 checksum: 150238 5dea945aa87188e1dda4f9e5a285808c Alpha architecture: Size/MD5 checksum: 154504 fcb8ac72eece822427c7510ced4e21c4 ARM architecture: Size/MD5 checksum: 154020 f2adb4988192cb84344c3473b8402a21 Intel IA-32 architecture: Size/MD5 checksum: 154122 c2b39dfcfc33c3752afcb744323a91a2 Intel IA-64 architecture: Size/MD5 checksum: 155282 a5cc11db973bdb952528330125dadc71 HP Precision architecture: Size/MD5 checksum: 154590 f69e416af4e3ba0164084283584eb083 Motorola 680x0 architecture: Size/MD5 checksum: 154054 f4126c21a9e5283806f02a7f43d4e7cf Big endian MIPS architecture: Size/MD5 checksum: 154590 a3368e19dbc46fad391a198df2af9526 Little endian MIPS architecture: Size/MD5 checksum: 154614 dd7f9cbe92c2f9825bd91e3ebfad250e PowerPC architecture: Size/MD5 checksum: 154024 f8702f4c9471ebdd56c9f858b1d0c10e IBM S/390 architecture: Size/MD5 checksum: 154540 fb6c638075c196104c7f445a65f1ac9c Sun Sparc architecture: Size/MD5 checksum: 158044 1d81d6c62382a6f78b7c3a11ea668ae1 These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Ubuntu addresses Maple library issues: unauthorized access and CSRF weaknesses fixed with instructions for enhancements.. Debian Security Advisory, Bonsai Package, Remote Access Fix, Code Execution, XSS Mitigation. . Severity: Important.LinuxSecurity.com Team

Calendar 2 Mar 21, 2003 •Important Debian
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here