Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 418
Alerts This Week
Warning Icon 1 418

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Chromium Important Buffer Overflow Input Issues 2026-acf674bc6a

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-django5 Low Risk Data Exposure Bugs 2026-fbb9501b22

Calendar White Jul 24, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 43 dotnet10.0 Critical CVE Fixes Update 2026-d9817786d6

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 mupdf Critical Out-of-Bounds Read Fix Advisory 2026-8870088088

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 wget1 Critical Memory Corruption DoS Fix 2026-7bbb52b49d

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mbedtls 3.6.7 Important Fixes for Multiple CVEs

Calendar White Jul 24, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 sssd Critical Use-After-Free and GPO Cache Issues 2026-9ab663dcd4

Calendar White Jul 24, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 Chromium Significant Buffer Overflow and Input Validation Issues

Calendar White Jul 24, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Skopeo Critical DoS Fix CVE-2026-27145 Advisory 2026-9b2e56edf5

Calendar White Jul 24, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorysoftware updatelow severity

SUSE: 2025:0981-1 low: python311 Security Advisory Updates

* bsc#1238450 * bsc#1239210 Cross-References: * CVE-2025-1795 . # Security update for python311 Announcement ID: SUSE-SU-2025:0981-1 Release Date: 2025-03-21T14:16:50Z Rating: low References: * bsc#1238450 * bsc#1239210 Cross-References: * CVE-2025-1795 CVSS scores: * CVE-2025-1795 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-1795 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2025-1795 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2025-1795: Fixed mishandling of comma during folding and unicode- encoding of email headers (bsc#1238450). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-981=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-981=1 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-3.11.11-150400.9.49.1 * libpython3_11-1_0-3.11.11-150400.9.49.1 * python311-base-3.11.11-150400.9.49.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390xx86_64 i586) * python311-tk-3.11.11-150400.9.49.1 * python311-doc-3.11.11-150400.9.49.1 * python311-debuginfo-3.11.11-150400.9.49.1 * python311-idle-3.11.11-150400.9.49.1 * python311-testsuite-3.11.11-150400.9.49.1 * python311-curses-3.11.11-150400.9.49.1 * python311-tk-debuginfo-3.11.11-150400.9.49.1 * python311-3.11.11-150400.9.49.1 * libpython3_11-1_0-debuginfo-3.11.11-150400.9.49.1 * python311-base-debuginfo-3.11.11-150400.9.49.1 * python311-base-3.11.11-150400.9.49.1 * python311-testsuite-debuginfo-3.11.11-150400.9.49.1 * python311-core-debugsource-3.11.11-150400.9.49.1 * python311-doc-devhelp-3.11.11-150400.9.49.1 * python311-tools-3.11.11-150400.9.49.1 * python311-curses-debuginfo-3.11.11-150400.9.49.1 * python311-debugsource-3.11.11-150400.9.49.1 * python311-dbm-debuginfo-3.11.11-150400.9.49.1 * python311-dbm-3.11.11-150400.9.49.1 * python311-devel-3.11.11-150400.9.49.1 * libpython3_11-1_0-3.11.11-150400.9.49.1 * openSUSE Leap 15.4 (x86_64) * libpython3_11-1_0-32bit-debuginfo-3.11.11-150400.9.49.1 * python311-base-32bit-3.11.11-150400.9.49.1 * libpython3_11-1_0-32bit-3.11.11-150400.9.49.1 * python311-base-32bit-debuginfo-3.11.11-150400.9.49.1 * python311-32bit-debuginfo-3.11.11-150400.9.49.1 * python311-32bit-3.11.11-150400.9.49.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-debuginfo-3.11.11-150400.9.49.1 * python311-64bit-3.11.11-150400.9.49.1 * python311-64bit-debuginfo-3.11.11-150400.9.49.1 * libpython3_11-1_0-64bit-3.11.11-150400.9.49.1 * python311-base-64bit-debuginfo-3.11.11-150400.9.49.1 * python311-base-64bit-3.11.11-150400.9.49.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1795.html * https://bugzilla.suse.com/show_bug.cgi?id=1238450 * https://bugzilla.suse.com/show_bug.cgi?id=1239210 . A low-severity security advisory for python311 updates, addressing CVE-2025-1795 for SUSE systems.. bsc#1238450, bsc#1239210,cross-references, cve-2025-1795, security, update, python311, announ. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Mar 21, 2025 •Low SuSE
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisoryupdatethreat

Mageia 9: MGASA-2025-0070 critical: neomutt email header signing issues

The To and Cc email header fields are not protected by cryptographic signing. (CVE-2024-49393) The In-reply-to email header field is not protected by cryptographic signing. (CVE-2024-49394) . MGASA-2025-0070 - Updated neomutt packages fix security vulnerabilities Publication date: 24 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0070.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-49393, CVE-2024-49394 The To and Cc email header fields are not protected by cryptographic signing. (CVE-2024-49393) The In-reply-to email header field is not protected by cryptographic signing. (CVE-2024-49394) References: - https://bugs.mageia.org/show_bug.cgi?id=33814 - - https://www.cve.org/CVERecord?id=CVE-2024-49393 - https://www.cve.org/CVERecord?id=CVE-2024-49394 SRPMS: - 9/core/neomutt-20241002-1.mga9 . Newly released neomutt updates address problems with email header management and enhance cryptographic signing capabilities, effective on February 24, 2025.. neomutt updates,mageia security,email header signing issues. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 24, 2025 •Critical Mageia
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorysecurity fiximportant

SUSE: 2024:3201-2 Critical: NodeJS Security Vulnerability Patch

* bsc#1225660 * bsc#1227378 * bsc#1227999 * bsc#1228780 . # Security update for python311 Announcement ID: SUSE-SU-2024:3200-1 Rating: important References: * bsc#1225660 * bsc#1227378 * bsc#1227999 * bsc#1228780 Cross-References: * CVE-2024-6923 CVSS scores: * CVE-2024-6923 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability and has three security fixes can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2024-6923: Fixed email header injection due to unquoted newlines (bsc#1228780) Other fixes: \- %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999) \- Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378) \- Make pip and modern tools install directly in /usr/local when used by the user (bsc#1225660) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -tpatch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3200=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3200=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3200=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2024-3200=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3200=1 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3200=1 * Python 3 Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Python3-15-SP5-2024-3200=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3200=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3200=1 ## Package List: * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * libpython3_11-1_0-debuginfo-3.11.9-150400.9.32.3 * python311-curses-3.11.9-150400.9.32.4 * python311-curses-debuginfo-3.11.9-150400.9.32.4 * python311-dbm-3.11.9-150400.9.32.4 * python311-debuginfo-3.11.9-150400.9.32.4 * python311-doc-3.11.9-150400.9.32.1 * python311-3.11.9-150400.9.32.4 * python311-dbm-debuginfo-3.11.9-150400.9.32.4 * python311-debugsource-3.11.9-150400.9.32.4 * python311-core-debugsource-3.11.9-150400.9.32.3 * python311-doc-devhelp-3.11.9-150400.9.32.1 * python311-devel-3.11.9-150400.9.32.3 * python311-tk-debuginfo-3.11.9-150400.9.32.4 * python311-tools-3.11.9-150400.9.32.3 * libpython3_11-1_0-3.11.9-150400.9.32.3 * python311-base-3.11.9-150400.9.32.3 * python311-tk-3.11.9-150400.9.32.4 * python311-base-debuginfo-3.11.9-150400.9.32.3 * python311-idle-3.11.9-150400.9.32.4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * libpython3_11-1_0-debuginfo-3.11.9-150400.9.32.3 *python311-curses-3.11.9-150400.9.32.4 * python311-curses-debuginfo-3.11.9-150400.9.32.4 * python311-dbm-3.11.9-150400.9.32.4 * python311-debuginfo-3.11.9-150400.9.32.4 * python311-doc-3.11.9-150400.9.32.1 * python311-3.11.9-150400.9.32.4 * python311-dbm-debuginfo-3.11.9-150400.9.32.4 * python311-debugsource-3.11.9-150400.9.32.4 * python311-core-debugsource-3.11.9-150400.9.32.3 * python311-doc-devhelp-3.11.9-150400.9.32.1 * python311-devel-3.11.9-150400.9.32.3 * python311-tk-debuginfo-3.11.9-150400.9.32.4 * python311-tools-3.11.9-150400.9.32.3 * libpython3_11-1_0-3.11.9-150400.9.32.3 * python311-base-3.11.9-150400.9.32.3 * python311-tk-3.11.9-150400.9.32.4 * python311-base-debuginfo-3.11.9-150400.9.32.3 * python311-idle-3.11.9-150400.9.32.4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libpython3_11-1_0-debuginfo-3.11.9-150400.9.32.3 * python311-curses-3.11.9-150400.9.32.4 * python311-curses-debuginfo-3.11.9-150400.9.32.4 * python311-dbm-3.11.9-150400.9.32.4 * python311-debuginfo-3.11.9-150400.9.32.4 * python311-doc-3.11.9-150400.9.32.1 * python311-3.11.9-150400.9.32.4 * python311-dbm-debuginfo-3.11.9-150400.9.32.4 * python311-debugsource-3.11.9-150400.9.32.4 * python311-core-debugsource-3.11.9-150400.9.32.3 * python311-doc-devhelp-3.11.9-150400.9.32.1 * python311-devel-3.11.9-150400.9.32.3 * python311-tk-debuginfo-3.11.9-150400.9.32.4 * python311-tools-3.11.9-150400.9.32.3 * libpython3_11-1_0-3.11.9-150400.9.32.3 * python311-base-3.11.9-150400.9.32.3 * python311-tk-3.11.9-150400.9.32.4 * python311-base-debuginfo-3.11.9-150400.9.32.3 * python311-idle-3.11.9-150400.9.32.4 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-curses-debuginfo-3.11.9-150400.9.32.4 * python311-debuginfo-3.11.9-150400.9.32.4 * python311-tk-3.11.9-150400.9.32.4 * libpython3_11-1_0-3.11.9-150400.9.32.3 *python311-testsuite-debuginfo-3.11.9-150400.9.32.3 * python311-testsuite-3.11.9-150400.9.32.3 * python311-doc-3.11.9-150400.9.32.1 * python311-dbm-debuginfo-3.11.9-150400.9.32.4 * python311-3.11.9-150400.9.32.4 * python311-devel-3.11.9-150400.9.32.3 * python311-base-3.11.9-150400.9.32.3 * python311-idle-3.11.9-150400.9.32.4 * libpython3_11-1_0-debuginfo-3.11.9-150400.9.32.3 * python311-curses-3.11.9-150400.9.32.4 * python311-doc-devhelp-3.11.9-150400.9.32.1 * python311-debugsource-3.11.9-150400.9.32.4 * python311-tk-debuginfo-3.11.9-150400.9.32.4 * python311-tools-3.11.9-150400.9.32.3 * python311-core-debugsource-3.11.9-150400.9.32.3 * python311-dbm-3.11.9-150400.9.32.4 * python311-base-debuginfo-3.11.9-150400.9.32.3 * openSUSE Leap 15.4 (x86_64) * python311-base-32bit-debuginfo-3.11.9-150400.9.32.3 * python311-32bit-3.11.9-150400.9.32.4 * python311-base-32bit-3.11.9-150400.9.32.3 * libpython3_11-1_0-32bit-debuginfo-3.11.9-150400.9.32.3 * libpython3_11-1_0-32bit-3.11.9-150400.9.32.3 * python311-32bit-debuginfo-3.11.9-150400.9.32.4 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-3.11.9-150400.9.32.3 * python311-64bit-debuginfo-3.11.9-150400.9.32.4 * libpython3_11-1_0-64bit-debuginfo-3.11.9-150400.9.32.3 * python311-base-64bit-3.11.9-150400.9.32.3 * python311-64bit-3.11.9-150400.9.32.4 * python311-base-64bit-debuginfo-3.11.9-150400.9.32.3 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python311-curses-debuginfo-3.11.9-150400.9.32.4 * python311-debuginfo-3.11.9-150400.9.32.4 * libpython3_11-1_0-3.11.9-150400.9.32.3 * python311-tk-3.11.9-150400.9.32.4 * python311-testsuite-debuginfo-3.11.9-150400.9.32.3 * python311-testsuite-3.11.9-150400.9.32.3 * python311-doc-3.11.9-150400.9.32.1 * python311-3.11.9-150400.9.32.4 * python311-dbm-debuginfo-3.11.9-150400.9.32.4 * python311-devel-3.11.9-150400.9.32.3 *python311-base-3.11.9-150400.9.32.3 * python311-idle-3.11.9-150400.9.32.4 * libpython3_11-1_0-debuginfo-3.11.9-150400.9.32.3 * python311-curses-3.11.9-150400.9.32.4 * python311-doc-devhelp-3.11.9-150400.9.32.1 * python311-debugsource-3.11.9-150400.9.32.4 * python311-tk-debuginfo-3.11.9-150400.9.32.4 * python311-tools-3.11.9-150400.9.32.3 * python311-core-debugsource-3.11.9-150400.9.32.3 * python311-dbm-3.11.9-150400.9.32.4 * python311-base-debuginfo-3.11.9-150400.9.32.3 * openSUSE Leap 15.5 (x86_64) * python311-base-32bit-debuginfo-3.11.9-150400.9.32.3 * python311-32bit-3.11.9-150400.9.32.4 * python311-base-32bit-3.11.9-150400.9.32.3 * libpython3_11-1_0-32bit-debuginfo-3.11.9-150400.9.32.3 * libpython3_11-1_0-32bit-3.11.9-150400.9.32.3 * python311-32bit-debuginfo-3.11.9-150400.9.32.4 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-3.11.9-150400.9.32.4 * libpython3_11-1_0-3.11.9-150400.9.32.3 * python311-base-3.11.9-150400.9.32.3 * Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libpython3_11-1_0-debuginfo-3.11.9-150400.9.32.3 * python311-curses-3.11.9-150400.9.32.4 * python311-curses-debuginfo-3.11.9-150400.9.32.4 * python311-dbm-3.11.9-150400.9.32.4 * python311-debuginfo-3.11.9-150400.9.32.4 * python311-doc-3.11.9-150400.9.32.1 * python311-3.11.9-150400.9.32.4 * python311-dbm-debuginfo-3.11.9-150400.9.32.4 * python311-debugsource-3.11.9-150400.9.32.4 * python311-core-debugsource-3.11.9-150400.9.32.3 * python311-doc-devhelp-3.11.9-150400.9.32.1 * python311-devel-3.11.9-150400.9.32.3 * python311-tk-debuginfo-3.11.9-150400.9.32.4 * python311-tools-3.11.9-150400.9.32.3 * libpython3_11-1_0-3.11.9-150400.9.32.3 * python311-base-3.11.9-150400.9.32.3 * python311-tk-3.11.9-150400.9.32.4 * python311-base-debuginfo-3.11.9-150400.9.32.3 * python311-idle-3.11.9-150400.9.32.4 * SUSE Linux Enterprise High Performance Computing ESPOS 15SP4 (aarch64 x86_64) * libpython3_11-1_0-debuginfo-3.11.9-150400.9.32.3 * python311-curses-3.11.9-150400.9.32.4 * python311-curses-debuginfo-3.11.9-150400.9.32.4 * python311-dbm-3.11.9-150400.9.32.4 * python311-debuginfo-3.11.9-150400.9.32.4 * python311-doc-3.11.9-150400.9.32.1 * python311-3.11.9-150400.9.32.4 * python311-dbm-debuginfo-3.11.9-150400.9.32.4 * python311-debugsource-3.11.9-150400.9.32.4 * python311-core-debugsource-3.11.9-150400.9.32.3 * python311-doc-devhelp-3.11.9-150400.9.32.1 * python311-devel-3.11.9-150400.9.32.3 * python311-tk-debuginfo-3.11.9-150400.9.32.4 * python311-tools-3.11.9-150400.9.32.3 * libpython3_11-1_0-3.11.9-150400.9.32.3 * python311-base-3.11.9-150400.9.32.3 * python311-tk-3.11.9-150400.9.32.4 * python311-base-debuginfo-3.11.9-150400.9.32.3 * python311-idle-3.11.9-150400.9.32.4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libpython3_11-1_0-debuginfo-3.11.9-150400.9.32.3 * python311-curses-3.11.9-150400.9.32.4 * python311-curses-debuginfo-3.11.9-150400.9.32.4 * python311-dbm-3.11.9-150400.9.32.4 * python311-debuginfo-3.11.9-150400.9.32.4 * python311-doc-3.11.9-150400.9.32.1 * python311-3.11.9-150400.9.32.4 * python311-dbm-debuginfo-3.11.9-150400.9.32.4 * python311-debugsource-3.11.9-150400.9.32.4 * python311-core-debugsource-3.11.9-150400.9.32.3 * python311-doc-devhelp-3.11.9-150400.9.32.1 * python311-devel-3.11.9-150400.9.32.3 * python311-tk-debuginfo-3.11.9-150400.9.32.4 * python311-tools-3.11.9-150400.9.32.3 * libpython3_11-1_0-3.11.9-150400.9.32.3 * python311-base-3.11.9-150400.9.32.3 * python311-tk-3.11.9-150400.9.32.4 * python311-base-debuginfo-3.11.9-150400.9.32.3 * python311-idle-3.11.9-150400.9.32.4 ## References: * https://www.suse.com/security/cve/CVE-2024-6923.html * https://bugzilla.suse.com/show_bug.cgi?id=1225660 *https://bugzilla.suse.com/show_bug.cgi?id=1227378 * https://bugzilla.suse.com/show_bug.cgi?id=1227999 * https://bugzilla.suse.com/show_bug.cgi?id=1228780 . SUSE releases for python311 tackle critical vulnerabilities. Apply updates now to strengthen system defenses!. python311 security, SUSE security updates, email header fix, important security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 11, 2024 •Important SuSE
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorymoderatedebian

Debian: DSA-5542-1 Moderate: Request Tracker Email Header Issues

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. CVE-2023-41259 . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5542-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2023 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : request-tracker4 CVE ID : CVE-2023-41259 CVE-2023-41260 Debian Bug : 1054516 Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. CVE-2023-41259 Tom Wolters reported that Request Tracker is vulnerable to accepting unvalidated RT email headers in incoming email and the mail-gateway REST interface. CVE-2023-41260 Tom Wolters reported that Request Tracker is vulnerable to information leakage via response messages returned from requests sent via the mail-gateway REST interface. For the oldstable distribution (bullseye), these problems have been fixed in version 4.4.4+dfsg-2+deb11u3. For the stable distribution (bookworm), these problems have been fixed in version 4.4.6+dfsg-1.1+deb12u1. We recommend that you upgrade your request-tracker4 packages. For the detailed security status of request-tracker4 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/request-tracker4 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Several security flaws in Request Tracker were revealed, comprising data exposure and unchecked email header inputs.. Debian DSA, Request Tracker, Security Advisory, Information Leakage. . LinuxSecurity.com Team

Calendar%202 Oct 30, 2023 Debian
Banner 4 1028x280 1708121825 1771600306
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicedebian

Debian: DSA 738-1 Critical: Razor Email Parsing DoS Issue

Updated package.. - ------------------------------------------------------------------------Debian Security Advisory DSA 738-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------Package : razor Vulnerability : email header parsing error Problem type : remote DOS Debian-specific: no CVE Id(s) : CAN-2005-2024 A vulnerability was discovered in the way that Razor parses certain email headers that could potentially be used to crash the Razor program, causing a denial of service (DOS). For the stable distribution (sarge), this problem has been fixed in version 2.670-1sarge2. The old stable distribution (woody) is not affected by this issue. We recommend that you upgrade your razor package. Upgrade instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian 3.1 (sarge) - ------------------ sarge was released for alpha, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 799 88b6def693d8e884f636acf9337344f1 Size/MD5 checksum: 86705 0118b6030ea261ea85e73a55cc7eac8e Size/MD5 checksum: 10699 ed53476451c87dbf876697e198083973 alpha architecture (DEC Alpha) Size/MD5 checksum: 117030 ab3c6043749da7b66aa468f8fec794a7 arm architecture (ARM) Size/MD5 checksum: 115572 01ee173b14d45f1f576dd3b4db6ba3e8 hppa architecture (HP PARISC) Size/MD5 checksum: 117146 82889def9ab647e075cedf658a2e7707 i386 architecture (Intel ia32) Size/MD5 checksum: 116070 9171153ba7bf5c0c679c14a8303d777d ia64 architecture (Intel ia64) Size/MD5 checksum: 118378 d1ed58ed88d490cad82b8cde72745b6d m68k architecture (Motorola Mc680x0) Size/MD5 checksum: 115938 6a620f25c1895e3ac80ba94c57931874 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 114962 3a771fb3bc2b88b6606121541f4e1c80 mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 114978 3c6f16f40f9820e4624c277969c85947 powerpc architecture (PowerPC) Size/MD5 checksum: 117502 2860b774a37ed2eaae9efd365e05ceaf s390 architecture (IBM S/390) Size/MD5 checksum: 115738 02789063e04d63a1eea5f2bf88745c5f sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 115848 8a264ab5802cf6764db4354facdd4ea0 - -------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A critical security flaw in Razor's email processing has been addressed with the newest Debian package release. Users are advised to perform an upgrade.. Debian Security,Razor DoS,Email Header Fix,Package Update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 05, 2005 •Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics