Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 481
Alerts This Week
Warning Icon 1 481

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":50,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -8 articles for you...
100

SUSE: 2016:0224-1 Critical: openldap2 Denial Of Service Fix

An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one An update that solves two vulnerabilities and has one errata is now available. errata is now available.. SUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:0224-1 Rating: important References: #937766 #945582 #955210 Cross-References: CVE-2015-4000 CVE-2015-6908 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server for SAP 12 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Desktop 12-SP1 SUSE Linux Enterprise Desktop 12 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update fixes the following security issues: - CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. (bsc#945582) - CVE-2015-4000: Fix weak Diffie-Hellman size vulnerability. (bsc#937766) It also fixes the following non-security bugs: - bsc#955210: Unresponsive LDAP host lookups in IPv6 environment This update adds the following functionality: - fate#319300: SHA2 password hashing module that can be loaded on-demand. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2016-139=1 - SUSE Linux Enterprise Software Development Kit 12: zypper in -t patch SUSE-SLE-SDK-12-2016-139=1 - SUSE Linux Enterprise Server for SAP 12: zypper in -t patch SUSE-SLE-SAP-12-2016-139=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2016-139=1 - SUSE Linux Enterprise Server 12: zypper in -t patch SUSE-SLE-SERVER-12-2016-139=1 - SUSE Linux Enterprise Module for Legacy Software 12: zypper in -t patch SUSE-SLE-Module-Legacy-12-2016-139=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2016-139=1 - SUSE Linux Enterprise Desktop 12: zypper in -t patch SUSE-SLE-DESKTOP-12-2016-139=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): openldap2-back-perl-2.4.41-18.13.4 openldap2-back-perl-debuginfo-2.4.41-18.13.4 openldap2-client-debuginfo-2.4.41-18.13.1 openldap2-client-debugsource-2.4.41-18.13.1 openldap2-debuginfo-2.4.41-18.13.4 openldap2-debugsource-2.4.41-18.13.4 openldap2-devel-2.4.41-18.13.1 openldap2-devel-static-2.4.41-18.13.1 - SUSE Linux Enterprise Software Development Kit 12 (ppc64le s390x x86_64): openldap2-back-perl-2.4.41-18.13.4 openldap2-back-perl-debuginfo-2.4.41-18.13.4 openldap2-client-debuginfo-2.4.41-18.13.1 openldap2-client-debugsource-2.4.41-18.13.1 openldap2-debuginfo-2.4.41-18.13.4 openldap2-debugsource-2.4.41-18.13.4 openldap2-devel-2.4.41-18.13.1 openldap2-devel-static-2.4.41-18.13.1 - SUSE Linux Enterprise Server for SAP 12 (x86_64): compat-libldap-2_3-0-2.3.37-18.13.4 compat-libldap-2_3-0-debuginfo-2.3.37-18.13.4 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): libldap-2_4-2-2.4.41-18.13.1 libldap-2_4-2-debuginfo-2.4.41-18.13.1 openldap2-2.4.41-18.13.4 openldap2-back-meta-2.4.41-18.13.4 openldap2-back-meta-debuginfo-2.4.41-18.13.4 openldap2-client-2.4.41-18.13.1 openldap2-client-debuginfo-2.4.41-18.13.1 openldap2-client-debugsource-2.4.41-18.13.1 openldap2-debuginfo-2.4.41-18.13.4 openldap2-debugsource-2.4.41-18.13.4 - SUSE Linux Enterprise Server 12-SP1 (s390x x86_64): libldap-2_4-2-32bit-2.4.41-18.13.1 libldap-2_4-2-debuginfo-32bit-2.4.41-18.13.1 - SUSE Linux Enterprise Server 12 (ppc64le s390x x86_64): libldap-2_4-2-2.4.41-18.13.1 libldap-2_4-2-debuginfo-2.4.41-18.13.1 openldap2-2.4.41-18.13.4 openldap2-back-meta-2.4.41-18.13.4 openldap2-back-meta-debuginfo-2.4.41-18.13.4 openldap2-client-2.4.41-18.13.1 openldap2-client-debuginfo-2.4.41-18.13.1 openldap2-client-debugsource-2.4.41-18.13.1 openldap2-debuginfo-2.4.41-18.13.4 openldap2-debugsource-2.4.41-18.13.4 - SUSE Linux Enterprise Server 12 (s390x x86_64): libldap-2_4-2-32bit-2.4.41-18.13.1 libldap-2_4-2-debuginfo-32bit-2.4.41-18.13.1 - SUSE Linux Enterprise Module for Legacy Software 12 (ppc64le s390x x86_64): compat-libldap-2_3-0-2.3.37-18.13.4 compat-libldap-2_3-0-debuginfo-2.3.37-18.13.4 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): libldap-2_4-2-2.4.41-18.13.1 libldap-2_4-2-32bit-2.4.41-18.13.1 libldap-2_4-2-debuginfo-2.4.41-18.13.1 libldap-2_4-2-debuginfo-32bit-2.4.41-18.13.1 openldap2-client-2.4.41-18.13.1 openldap2-client-debuginfo-2.4.41-18.13.1 openldap2-client-debugsource-2.4.41-18.13.1 - SUSE Linux Enterprise Desktop 12 (x86_64): libldap-2_4-2-2.4.41-18.13.1 libldap-2_4-2-32bit-2.4.41-18.13.1 libldap-2_4-2-debuginfo-2.4.41-18.13.1 libldap-2_4-2-debuginfo-32bit-2.4.41-18.13.1 openldap2-client-2.4.41-18.13.1 openldap2-client-debuginfo-2.4.41-18.13.1 openldap2-client-debugsource-2.4.41-18.13.1 References: https://www.suse.com/security/cve/CVE-2015-4000.html https://www.suse.com/security/cve/CVE-2015-6908.html https://bugzilla.suse.com/show_bug.cgi?id=937766 https://bugzilla.suse.com/show_bug.cgi?id=945582 https://bugzilla.suse.com/show_bug.cgi?id=955210 . Rectifies serious vulnerabilities in openldap2 for SUSE, tackling denial of service and inadequate encryption concerns.. openldap2 security update,SUSE advisory,denial of service patch,Diffie-Hellman fix,critical vulnerabilities. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 25, 2016 Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":50,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200