Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
98
security advisorykernel updateprivilege escalationRed Hat Enterprise Linux 8.1 RHSA-2022-6872-01 Critical: Kernel Issues
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2022:6872-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:6872 Issue date: 2022-10-11 CVE Names: CVE-2022-2588 CVE-2022-21123 CVE-2022-21125 CVE-2022-21166 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS E4S (v. 8.1) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * a use-after-free in cls_route filter implementation may lead to privilege escalation (CVE-2022-2588) * Incomplete cleanup of multi-core shared buffers (aka SBDR) (CVE-2022-21123) * Incomplete cleanup of microarchitectural fill buffers (aka SBDS) (CVE-2022-21125) * Incomplete cleanup in specific special register write operations (aka DRPW) (CVE-2022-21166) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how toapply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2090237 - CVE-2022-21123 hw: cpu: Incomplete cleanup of multi-core shared buffers (aka SBDR) 2090240 - CVE-2022-21125 hw: cpu: Incomplete cleanup of microarchitectural fill buffers (aka SBDS) 2090241 - CVE-2022-21166 hw: cpu: Incomplete cleanup in specific special register write operations (aka DRPW) 2114849 - CVE-2022-2588 kernel: a use-after-free in cls_route filter implementation may lead to privilege escalation 6. Package List: Red Hat Enterprise Linux BaseOS E4S (v.8.1): Source: kernel-4.18.0-147.76.1.el8_1.src.rpm aarch64: bpftool-4.18.0-147.76.1.el8_1.aarch64.rpm bpftool-debuginfo-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-core-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-cross-headers-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-debug-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-debug-core-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-debug-debuginfo-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-debug-devel-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-debug-modules-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-debug-modules-extra-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-debuginfo-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-debuginfo-common-aarch64-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-devel-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-headers-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-modules-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-modules-extra-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-tools-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-tools-debuginfo-4.18.0-147.76.1.el8_1.aarch64.rpm kernel-tools-libs-4.18.0-147.76.1.el8_1.aarch64.rpm perf-4.18.0-147.76.1.el8_1.aarch64.rpm perf-debuginfo-4.18.0-147.76.1.el8_1.aarch64.rpm python3-perf-4.18.0-147.76.1.el8_1.aarch64.rpm python3-perf-debuginfo-4.18.0-147.76.1.el8_1.aarch64.rpm noarch: kernel-abi-whitelists-4.18.0-147.76.1.el8_1.noarch.rpm kernel-doc-4.18.0-147.76.1.el8_1.noarch.rpm ppc64le: bpftool-4.18.0-147.76.1.el8_1.ppc64le.rpm bpftool-debuginfo-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-core-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-cross-headers-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-debug-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-debug-core-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-debug-debuginfo-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-debug-devel-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-debug-modules-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-debug-modules-extra-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-debuginfo-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-devel-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-headers-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-modules-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-modules-extra-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-tools-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-tools-debuginfo-4.18.0-147.76.1.el8_1.ppc64le.rpm kernel-tools-libs-4.18.0-147.76.1.el8_1.ppc64le.rpm perf-4.18.0-147.76.1.el8_1.ppc64le.rpm perf-debuginfo-4.18.0-147.76.1.el8_1.ppc64le.rpm python3-perf-4.18.0-147.76.1.el8_1.ppc64le.rpm python3-perf-debuginfo-4.18.0-147.76.1.el8_1.ppc64le.rpm s390x: bpftool-4.18.0-147.76.1.el8_1.s390x.rpm bpftool-debuginfo-4.18.0-147.76.1.el8_1.s390x.rpm kernel-4.18.0-147.76.1.el8_1.s390x.rpm kernel-core-4.18.0-147.76.1.el8_1.s390x.rpm kernel-cross-headers-4.18.0-147.76.1.el8_1.s390x.rpm kernel-debug-4.18.0-147.76.1.el8_1.s390x.rpm kernel-debug-core-4.18.0-147.76.1.el8_1.s390x.rpm kernel-debug-debuginfo-4.18.0-147.76.1.el8_1.s390x.rpm kernel-debug-devel-4.18.0-147.76.1.el8_1.s390x.rpm kernel-debug-modules-4.18.0-147.76.1.el8_1.s390x.rpm kernel-debug-modules-extra-4.18.0-147.76.1.el8_1.s390x.rpm kernel-debuginfo-4.18.0-147.76.1.el8_1.s390x.rpm kernel-debuginfo-common-s390x-4.18.0-147.76.1.el8_1.s390x.rpm kernel-devel-4.18.0-147.76.1.el8_1.s390x.rpm kernel-headers-4.18.0-147.76.1.el8_1.s390x.rpm kernel-modules-4.18.0-147.76.1.el8_1.s390x.rpm kernel-modules-extra-4.18.0-147.76.1.el8_1.s390x.rpm kernel-tools-4.18.0-147.76.1.el8_1.s390x.rpm kernel-tools-debuginfo-4.18.0-147.76.1.el8_1.s390x.rpm kernel-zfcpdump-4.18.0-147.76.1.el8_1.s390x.rpm kernel-zfcpdump-core-4.18.0-147.76.1.el8_1.s390x.rpm kernel-zfcpdump-debuginfo-4.18.0-147.76.1.el8_1.s390x.rpm kernel-zfcpdump-devel-4.18.0-147.76.1.el8_1.s390x.rpm kernel-zfcpdump-modules-4.18.0-147.76.1.el8_1.s390x.rpm kernel-zfcpdump-modules-extra-4.18.0-147.76.1.el8_1.s390x.rpm perf-4.18.0-147.76.1.el8_1.s390x.rpm perf-debuginfo-4.18.0-147.76.1.el8_1.s390x.rpm python3-perf-4.18.0-147.76.1.el8_1.s390x.rpm python3-perf-debuginfo-4.18.0-147.76.1.el8_1.s390x.rpm x86_64: bpftool-4.18.0-147.76.1.el8_1.x86_64.rpm bpftool-debuginfo-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-core-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-cross-headers-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-debug-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-debug-core-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-debug-debuginfo-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-debug-devel-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-debug-modules-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-debug-modules-extra-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-debuginfo-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-devel-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-headers-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-modules-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-modules-extra-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-tools-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-tools-debuginfo-4.18.0-147.76.1.el8_1.x86_64.rpm kernel-tools-libs-4.18.0-147.76.1.el8_1.x86_64.rpm perf-4.18.0-147.76.1.el8_1.x86_64.rpm perf-debuginfo-4.18.0-147.76.1.el8_1.x86_64.rpm python3-perf-4.18.0-147.76.1.el8_1.x86_64.rpm python3-perf-debuginfo-4.18.0-147.76.1.el8_1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-2588 https://access.redhat.com/security/cve/CVE-2022-21123 https://access.redhat.com/security/cve/CVE-2022-21125 https://access.redhat.com/security/cve/CVE-2022-21166 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBY0WERNzjgjWX9erEAQgEOhAAhRwli72izUtw1NCNeyho3O/WlU/Ez624 MqdZvTinehtq+kmAc2KCsiZJoGr923AVyY/EYIUj8rX7UNKbTm04fC2fFa4vkH+n o1GSymcmCcUmJuwNeDThrQln8qprjpNFlk4tMUR9hfBHpyR2M3TsL5v3+MoB3npN tMOk/Jcd+/dBznDPgF3vBpE88+8eGkHLoAaB9NHBLsZAESd2YixBzsw+sG3eVOBf +KgrgspiLGE9ukzTZ2cIN7BGWGBZwR7KPATVMqPGqTo/2ucNGzJ7gwgKCfuiZO2P x83liRMwZ8TA37BhTqDas+Sju86m8Mu4OZHLwRLnMo6rTEzo0anlQSg1POsAqyf7 jg9BhTx21L1cPUfddgJJHV7NOLftx4uzmCM8AkCHHhTd77B8ppr0ilq/igDZuJbL 5gYiCQcS6qUp22AMuY2O7ViiD+iwTdKetZ/W16yf75922RpeCqM850LdW9OM35NI fJwqmjWPn0Onbgiqoq/n8aT7YQ2pSba9FEvlpTBh+Pd2uJfShAfw0MffSGSkBK2/ PZdgEwe5doJoMRZQ36Ue9TMRMvN9QRepDr2H1xgDbusvbYKOifW/fFyCFXMLwyRl GLsM/wqBVB/u3fTuV5lWzSyq4KcBapAgJvFLGUWS+57iCkeNvmQMo3sVgwRO+MVf nHgwFm+Wlr8=enhr -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 11, 2022
•Important
Red Hat
202
security advisorysystem enhancementsecurity issuesopenSUSE 13.2: openSUSE-SU-2015:1902-1 Critical: Java Security Update
An update that fixes 17 vulnerabilities is now available. An update that fixes 17 vulnerabilities is now available. An update that fixes 17 vulnerabilities is now available.. openSUSE Security Update: Security update for java-1_7_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:1902-1 Rating: important References: #951376 Cross-References: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4903 CVE-2015-4911 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: java-1_7_0-openjdk was updated to fix 17 security issues. These security issues were fixed: - CVE-2015-4843: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries (bsc#951376). - CVE-2015-4842: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to JAXP (bsc#951376). - CVE-2015-4840: Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via unknown vectors related to 2D (bsc#951376). - CVE-2015-4872: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect integrity via unknown vectors related to Security (bsc#951376). -CVE-2015-4860: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883 (bsc#951376). - CVE-2015-4844: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D (bsc#951376). - CVE-2015-4883: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4860 (bsc#951376). - CVE-2015-4893: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911 (bsc#951376). - CVE-2015-4911: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893 (bsc#951376). - CVE-2015-4882: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect availability via vectors related to CORBA (bsc#951376). - CVE-2015-4881: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4835 (bsc#951376). - CVE-2015-4734: Unspecified vulnerability in Oracle Java SE 6u101, 7u85 and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to JGSS (bsc#951376). - CVE-2015-4806: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries (bsc#951376). - CVE-2015-4805: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serialization (bsc#951376). - CVE-2015-4803: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allowed remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4893 and CVE-2015-4911 (bsc#951376). - CVE-2015-4835: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881 (bsc#951376). - CVE-2015-4903: Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allowed remote attackers to affect confidentiality via vectors related to RMI (bsc#951376). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-695=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): java-1_7_0-openjdk-1.7.0.91-13.1 java-1_7_0-openjdk-accessibility-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-debugsource-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-devel-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-devel-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-headless-1.7.0.91-13.1 java-1_7_0-openjdk-bootstrap-headless-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-debugsource-1.7.0.91-13.1 java-1_7_0-openjdk-demo-1.7.0.91-13.1 java-1_7_0-openjdk-demo-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-devel-1.7.0.91-13.1 java-1_7_0-openjdk-devel-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-headless-1.7.0.91-13.1 java-1_7_0-openjdk-headless-debuginfo-1.7.0.91-13.1 java-1_7_0-openjdk-src-1.7.0.91-13.1 - openSUSE 13.2 (noarch): java-1_7_0-openjdk-javadoc-1.7.0.91-13.1 References: https://www.suse.com/security/cve/CVE-2015-4734.html https://www.suse.com/security/cve/CVE-2015-4803.html https://www.suse.com/security/cve/CVE-2015-4805.html https://www.suse.com/security/cve/CVE-2015-4806.html https://www.suse.com/security/cve/CVE-2015-4835.html https://www.suse.com/security/cve/CVE-2015-4840.html https://www.suse.com/security/cve/CVE-2015-4842.html https://www.suse.com/security/cve/CVE-2015-4843.html https://www.suse.com/security/cve/CVE-2015-4844.html https://www.suse.com/security/cve/CVE-2015-4860.html https://www.suse.com/security/cve/CVE-2015-4872.html https://www.suse.com/security/cve/CVE-2015-4881.html https://www.suse.com/security/cve/CVE-2015-4882.html https://www.suse.com/security/cve/CVE-2015-4883.html https://www.suse.com/security/cve/CVE-2015-4893.html https://www.suse.com/security/cve/CVE-2015-4903.html https://www.suse.com/security/cve/CVE-2015-4911.html https://bugzilla.suse.com/show_bug.cgi?id=951376 . Crucial Fedora patch for python3-3.8.5 addresses 21 vulnerabilities to bolster network security against severe threats.. openSUSE Update, Java Security, Linux Patch Management. . Severity:Important. LinuxSecurity.com Team
Nov 04, 2015
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!