Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89

Fedora 33: 2021-186bca5b58 Critical: OS-Autoinst Crash and Data Limit Fix

This update is intended to fix two bugs in os-autoinst: a crash on exit that commonly occurs, and a problem that can occur where a dbus-broker per-UID queued data limit is exceeded if many tap tests are running simultaneously for too long.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-186bca5b58 2021-04-21 21:39:57.068279 --------------------------------------------------------------------------------Name : os-autoinst Product : Fedora 33 Version : 4.6 Release : 35.20210326git24ec8f9.fc33 URL : http://open.qa/ Summary : OS-level test automation Description : The OS-autoinst project aims at providing a means to run fully automated tests. Especially to run tests of basic and low-level operating system components such as bootloader, kernel, installer and upgrade, which can not easily and safely be tested with other automated testing frameworks. However, it can just as well be used to test applications on top of a newly installed OS. --------------------------------------------------------------------------------Update Information: This update is intended to fix two bugs in os-autoinst: a crash on exit that commonly occurs, and a problem that can occur where a dbus-broker per-UID queued data limit is exceeded if many tap tests are running simultaneously for too long. --------------------------------------------------------------------------------ChangeLog: * Tue Apr 13 2021 Adam Williamson - 4.6-35.20210326git24ec8f9 - Backport upstream patch to hopefully fix crashes on isotovideo exit (#1667163) - Try and fix dbus limit overflows due to persistent dbus connection (POO #90872) --------------------------------------------------------------------------------References: [ 1 ] Bug #1667163 - perl segfault in openqa worker process isotovideo (seems to be related to opencv threading) https://bugzilla.redhat.com/show_bug.cgi?id=1667163 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-186bca5b58' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The latest patch for os-autoinst tackles prevalent system crashes while optimizing dbus-broker to prevent data overflow, enhancing overall operating system automation.. os-autoinst Update, Fedora 33 Security, Automated Testing Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 21, 2021 Critical Fedora
202

openSUSE 13.2: openSUSE-SU-2015:0161-1 Important Libpng16 Heap Overflow

An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for libpng16 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0161-1 Rating: important References: #912076 #912929 Cross-References: CVE-2014-9495 CVE-2015-0973 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: libpng was updated to fix some security issues: * CVE-2014-9495 [bnc#912076]: Heap-buffer overflow png_combine_row() with very wide interlaced images * CVE-2015-0973 [bnc#912929]: overflow in png_read_IDAT_data libpng is now also build with -DPNG_SAFE_LIMITS_SUPPORTED. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-79 - openSUSE 13.1: zypper in -t patch openSUSE-2015-79 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpng16-16-1.6.13-2.4.1 libpng16-16-debuginfo-1.6.13-2.4.1 libpng16-compat-devel-1.6.13-2.4.1 libpng16-debugsource-1.6.13-2.4.1 libpng16-devel-1.6.13-2.4.1 libpng16-tools-1.6.13-2.4.1 libpng16-tools-debuginfo-1.6.13-2.4.1 - openSUSE 13.2 (x86_64): libpng16-16-32bit-1.6.13-2.4.1 libpng16-16-debuginfo-32bit-1.6.13-2.4.1 libpng16-compat-devel-32bit-1.6.13-2.4.1 libpng16-devel-32bit-1.6.13-2.4.1 - openSUSE 13.1 (i586 x86_64): libpng16-16-1.6.6-16.1 libpng16-16-debuginfo-1.6.6-16.1 libpng16-compat-devel-1.6.6-16.1 libpng16-debugsource-1.6.6-16.1 libpng16-devel-1.6.6-16.1 libpng16-tools-1.6.6-16.1 libpng16-tools-debuginfo-1.6.6-16.1 - openSUSE 13.1 (x86_64): libpng16-16-32bit-1.6.6-16.1 libpng16-16-debuginfo-32bit-1.6.6-16.1 libpng16-compat-devel-32bit-1.6.6-16.1 libpng16-devel-32bit-1.6.6-16.1 References: https://www.suse.com/security/cve/CVE-2014-9495.html https://www.suse.com/security/cve/CVE-2015-0973.html https://bugzilla.suse.com/show_bug.cgi?id=912076 https://bugzilla.suse.com/show_bug.cgi?id=912929 . A recent update addresses vital vulnerabilities in libpng16 for openSUSE versions 13.1 and 13.2. Ensure you apply the necessary patch without delay.. openSUSE, libpng16, security update, heap overflow, data overflow. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 28, 2015 Important OpenSUSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200