Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
89
security advisoryFedoracritical threatFedora 31: FEDORA-2020-04ac174fa9 Critical: Tomcat AJP File Read Issue
This update includes a rebase from 9.0.30 up to 9.0.31 which resolves one CVE along with various other bugs/features: * rhbz#1806805 CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability * rhbz#1801729 tomcat-9.0.31 is available **WARNING** - This update does *not* enforce the change in defaults for the AJP Connector like the upstream fix does. This is. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-04ac174fa9 2020-04-02 09:54:13.701405 --------------------------------------------------------------------------------Name : tomcat Product : Fedora 31 Version : 9.0.31 Release : 2.fc31 URL : https://tomcat.apache.org/ Summary : Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API Description : Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world. --------------------------------------------------------------------------------Update Information: This update includes a rebase from 9.0.30 up to 9.0.31 which resolves one CVE along with various other bugs/features: * rhbz#1806805 CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability * rhbz#1801729 tomcat-9.0.31 is available **WARNING** - This update does *not* enforce the change in defaults for the AJP Connector like the upstream fix does. This is done to prevent breakage of current installations, but it is highly advised to review your AJP Connector configuration to ensure that it is only accessible by your proxy! For more information see the [TomcatSecurity Page](https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.31) and the [Tomcat Security Considerations Document](https://tomcat.apache.org/tomcat-9.0-doc/security-howto.html#Connectors). --------------------------------------------------------------------------------ChangeLog: * Thu Mar 12 2020 Coty Sutherland - 1:9.0.31-2 - Related: rhbz#1806398 Undo changes in defaults for AJP connector (CVE-2020-1938) to prevent breakage, please update your configuration accordingly * Thu Mar 5 2020 Coty Sutherland - 1:9.0.31-1 - Update to 9.0.31 - Resolves: rhbz#1806398 - CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-04ac174fa9' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 02, 2020
•Critical
Fedora
89
security advisoryupdateFedoraFedora 24 Security Advisory: sway 0.11 Update and Configuration Reminder
Update ---- Update to 0.11 ---- Update ---- Update. **WARNING:** if you are using your own config file, add ``` include /etc/sway/config.d/* ``` At the end of it, otherwise nothing will work on Wayland. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-c6ae9b6cf8 2017-01-07 17:58:43.232798 -------------------------------------------------------------------------------- Name : sway Product : Fedora 24 Version : 0.11 Release : 4.fc24 URL : https://github.com/swaywm/sway Summary : i3-compatible window manager for Wayland Description : Sway is a tiling window manager supporting Wayland compositor protocol and i3-compatible configuration. -------------------------------------------------------------------------------- Update Information: Update ---- Update to 0.11 ---- Update ---- Update. **WARNING:** if you are using your own config file, add ``` include /etc/sway/config.d/* ``` At the end of it, otherwise nothing will work on Wayland -------------------------------------------------------------------------------- References: [ 1 ] Bug #1401349 - sway-0.11-rc1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1401349 [ 2 ] Bug #1405735 - sway-0.11-rc3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1405735 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade sway' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jan 07, 2017
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!