Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 468
Alerts This Week
Warning Icon 1 468

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Avahi Moderate DoS CVE-2025-59529 Advisory 2026-3217-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE avahi Moderate Denial of Service Fix 2026-3218-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE ImageMagick Important Security Fix for Multiple Flaws 2026-3219-1

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H800
openSUSE

openSUSE nmap Moderate Out-of-Bounds Crash Vulnern 2026-3220-1

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE 2026-3224-1 SVT-AV1 Important Remote Code Execution Fix

Calendar White Jul 24, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian LTS Imagemagick Critical Denial of Service Code Exec Vuln DLA-4696-1

Calendar White Jul 24, 2026
Critical
Mageia Large Esm H800
Mageia

Mageia 10 lrzip Critical Use After Free Null Pointer Vulnerabilities

Calendar White Jul 23, 2026
Critical
Mageia Large Esm H900
Mageia

Security Update 2026-0064 for rpm-mageia-setup addressed in Mageia 10

Calendar White Jul 23, 2026
Informational
Mageia Large Esm H900
Mageia

Mageia 10 - Xonotic Bugfix Advisory for the Year 2026-0063

Calendar White Jul 23, 2026
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":75,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 6 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorysoftware updatemoderate severity

openSUSE Leap 15.6: SUSE-SU-2025:1492-1 moderate: rubygem escape injection

* bsc#1238607 Cross-References: * CVE-2025-27111 . # Security update for rubygem-rack-1_6 Announcement ID: SUSE-SU-2025:1492-1 Release Date: 2025-05-06T14:36:05Z Rating: moderate References: * bsc#1238607 Cross-References: * CVE-2025-27111 CVSS scores: * CVE-2025-27111 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-27111 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-27111 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability can now be installed. ## Description: This update for rubygem-rack-1_6 fixes the following issues: * CVE-2025-27111: Fixed Escape Sequence Injection vulnerability (bsc#1238607) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-1492=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-1_6-1.6.8-150000.3.6.1 * ruby2.5-rubygem-rack-testsuite-1_6-1.6.8-150000.3.6.1 * ruby2.5-rubygem-rack-doc-1_6-1.6.8-150000.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-27111.html * https://bugzilla.suse.com/show_bug.cgi?id=1238607 . This patch resolves a significant vulnerability related to escape sequence handling in rubygem-rack-1_6 for openSUSE Leap 15.6.. rubygem rack, openSUSE security, escape injection fix, software patch, SUSE updates. . LinuxSecurity.com Team

Calendar%202 May 07, 2025 SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisoryimportantSUSE

SUSE: 2025:0874-1 important: rubygem-rack escape sequence issues

* bsc#1237141 * bsc#1238607 * bsc#1239298 Cross-References: . # Security update for rubygem-rack Announcement ID: SUSE-SU-2025:0874-1 Release Date: 2025-03-14T14:47:55Z Rating: important References: * bsc#1237141 * bsc#1238607 * bsc#1239298 Cross-References: * CVE-2025-25184 * CVE-2025-27111 * CVE-2025-27610 CVSS scores: * CVE-2025-25184 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-25184 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-25184 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-27111 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-27111 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2025-27111 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-27610 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-27610 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-27610 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP3 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 Business Critical Linux * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux EnterpriseServer 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for rubygem-rack fixes the following issues: * CVE-2025-25184: Fixed escape sequence injection vulnerability in rack leading to possible log injection (bsc#1237141) * CVE-2025-27111: Fixed escape sequence injection vulnerability in rack leading to possible log injection (bsc#1238607) * CVE-2025-27610: Fixed improper sanitization of user-supplied paths (bsc#1239298) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2025-874=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-874=1 * SUSE Linux Enterprise High Availability Extension 15 SP3 zypper in -t patch SUSE-SLE-Product-HA-15-SP3-2025-874=1 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2025-874=1 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2025-874=1 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.26.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.26.1 *ruby2.5-rubygem-rack-testsuite-2.0.8-150000.3.26.1 * ruby2.5-rubygem-rack-doc-2.0.8-150000.3.26.1 * SUSE Linux Enterprise High Availability Extension 15 SP3 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.26.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.26.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rack-2.0.8-150000.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2025-25184.html * https://www.suse.com/security/cve/CVE-2025-27111.html * https://www.suse.com/security/cve/CVE-2025-27610.html * https://bugzilla.suse.com/show_bug.cgi?id=1237141 * https://bugzilla.suse.com/show_bug.cgi?id=1238607 * https://bugzilla.suse.com/show_bug.cgi?id=1239298 . This patch for rubygem-rails resolves significant vulnerabilities regarding raw data handling and SQL injection.. rubygem-rack updates, SUSE security, escape sequence issues, log injection fixes. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 14, 2025 •Important SuSE
Banner 3 1028x280 1708121785 1771599793
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryimportantutil-linux

openSUSE Leap 15.5: 2024:1172-1 Important: Escape Sequence Fix

This update for util-linux fixes the following issues: CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831). # Security update for util-linux Announcement ID: SUSE-SU-2024:1172-1 Rating: important References: * bsc#1207987 * bsc#1221831 Cross-References: * CVE-2024-28085 CVSS scores: * CVE-2024-28085 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * Server Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for util-linux fixes the following issues: * CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-1172=1 openSUSE-SLE-15.5-2024-1172=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-1172=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-1172=1 * Server Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP5-2024-1172=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libmount-devel-static-2.37.4-150500.9.6.1 * libblkid1-debuginfo-2.37.4-150500.9.6.1 * libfdisk1-2.37.4-150500.9.6.1 * libfdisk-devel-static-2.37.4-150500.9.6.1 * libuuid-devel-static-2.37.4-150500.9.6.1 * libsmartcols1-debuginfo-2.37.4-150500.9.6.1 *util-linux-systemd-debuginfo-2.37.4-150500.9.6.1 * uuidd-2.37.4-150500.9.6.1 * libuuid1-2.37.4-150500.9.6.1 * python3-libmount-2.37.4-150500.9.6.1 * python3-libmount-debugsource-2.37.4-150500.9.6.1 * libuuid-devel-2.37.4-150500.9.6.1 * util-linux-2.37.4-150500.9.6.1 * util-linux-debuginfo-2.37.4-150500.9.6.1 * libfdisk1-debuginfo-2.37.4-150500.9.6.1 * libuuid1-debuginfo-2.37.4-150500.9.6.1 * uuidd-debuginfo-2.37.4-150500.9.6.1 * libmount1-debuginfo-2.37.4-150500.9.6.1 * util-linux-debugsource-2.37.4-150500.9.6.1 * util-linux-systemd-2.37.4-150500.9.6.1 * util-linux-systemd-debugsource-2.37.4-150500.9.6.1 * libsmartcols1-2.37.4-150500.9.6.1 * libsmartcols-devel-2.37.4-150500.9.6.1 * libblkid-devel-2.37.4-150500.9.6.1 * python3-libmount-debuginfo-2.37.4-150500.9.6.1 * libsmartcols-devel-static-2.37.4-150500.9.6.1 * libblkid-devel-static-2.37.4-150500.9.6.1 * libblkid1-2.37.4-150500.9.6.1 * libfdisk-devel-2.37.4-150500.9.6.1 * libmount1-2.37.4-150500.9.6.1 * libmount-devel-2.37.4-150500.9.6.1 * openSUSE Leap 15.5 (x86_64) * libmount1-32bit-debuginfo-2.37.4-150500.9.6.1 * libuuid-devel-32bit-2.37.4-150500.9.6.1 * libfdisk1-32bit-2.37.4-150500.9.6.1 * libmount-devel-32bit-2.37.4-150500.9.6.1 * libsmartcols1-32bit-debuginfo-2.37.4-150500.9.6.1 * libfdisk-devel-32bit-2.37.4-150500.9.6.1 * libmount1-32bit-2.37.4-150500.9.6.1 * libsmartcols1-32bit-2.37.4-150500.9.6.1 * libblkid1-32bit-debuginfo-2.37.4-150500.9.6.1 * libblkid-devel-32bit-2.37.4-150500.9.6.1 * libuuid1-32bit-2.37.4-150500.9.6.1 * libsmartcols-devel-32bit-2.37.4-150500.9.6.1 * libblkid1-32bit-2.37.4-150500.9.6.1 * libuuid1-32bit-debuginfo-2.37.4-150500.9.6.1 * libfdisk1-32bit-debuginfo-2.37.4-150500.9.6.1 * openSUSE Leap 15.5 (noarch) * util-linux-lang-2.37.4-150500.9.6.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libsmartcols-devel-64bit-2.37.4-150500.9.6.1 *libmount-devel-64bit-2.37.4-150500.9.6.1 * libsmartcols1-64bit-2.37.4-150500.9.6.1 * libblkid1-64bit-debuginfo-2.37.4-150500.9.6.1 * libmount1-64bit-2.37.4-150500.9.6.1 * libfdisk1-64bit-2.37.4-150500.9.6.1 * libblkid1-64bit-2.37.4-150500.9.6.1 * libuuid1-64bit-debuginfo-2.37.4-150500.9.6.1 * libuuid1-64bit-2.37.4-150500.9.6.1 * libblkid-devel-64bit-2.37.4-150500.9.6.1 * libfdisk1-64bit-debuginfo-2.37.4-150500.9.6.1 * libuuid-devel-64bit-2.37.4-150500.9.6.1 * libfdisk-devel-64bit-2.37.4-150500.9.6.1 * libmount1-64bit-debuginfo-2.37.4-150500.9.6.1 * libsmartcols1-64bit-debuginfo-2.37.4-150500.9.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * util-linux-systemd-debugsource-2.37.4-150500.9.6.1 * libsmartcols1-2.37.4-150500.9.6.1 * libmount1-debuginfo-2.37.4-150500.9.6.1 * libfdisk1-debuginfo-2.37.4-150500.9.6.1 * libsmartcols1-debuginfo-2.37.4-150500.9.6.1 * util-linux-systemd-debuginfo-2.37.4-150500.9.6.1 * libuuid1-debuginfo-2.37.4-150500.9.6.1 * libuuid1-2.37.4-150500.9.6.1 * libblkid1-debuginfo-2.37.4-150500.9.6.1 * libblkid1-2.37.4-150500.9.6.1 * util-linux-debuginfo-2.37.4-150500.9.6.1 * util-linux-debugsource-2.37.4-150500.9.6.1 * libfdisk1-2.37.4-150500.9.6.1 * libmount1-2.37.4-150500.9.6.1 * util-linux-systemd-2.37.4-150500.9.6.1 * util-linux-2.37.4-150500.9.6.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libblkid1-2.37.4-150500.9.6.1 * libblkid1-debuginfo-2.37.4-150500.9.6.1 * libfdisk1-2.37.4-150500.9.6.1 * libuuid-devel-static-2.37.4-150500.9.6.1 * libsmartcols1-debuginfo-2.37.4-150500.9.6.1 * util-linux-systemd-debuginfo-2.37.4-150500.9.6.1 * libuuid1-2.37.4-150500.9.6.1 * libuuid-devel-2.37.4-150500.9.6.1 * util-linux-debuginfo-2.37.4-150500.9.6.1 * util-linux-2.37.4-150500.9.6.1 * libfdisk1-debuginfo-2.37.4-150500.9.6.1 * libuuid1-debuginfo-2.37.4-150500.9.6.1 *libmount1-debuginfo-2.37.4-150500.9.6.1 * util-linux-debugsource-2.37.4-150500.9.6.1 * util-linux-systemd-2.37.4-150500.9.6.1 * util-linux-systemd-debugsource-2.37.4-150500.9.6.1 * libsmartcols1-2.37.4-150500.9.6.1 * libsmartcols-devel-2.37.4-150500.9.6.1 * libblkid-devel-static-2.37.4-150500.9.6.1 * libblkid-devel-2.37.4-150500.9.6.1 * libfdisk-devel-2.37.4-150500.9.6.1 * libmount1-2.37.4-150500.9.6.1 * libmount-devel-2.37.4-150500.9.6.1 * Basesystem Module 15-SP5 (noarch) * util-linux-lang-2.37.4-150500.9.6.1 * Basesystem Module 15-SP5 (x86_64) * libmount1-32bit-debuginfo-2.37.4-150500.9.6.1 * libmount1-32bit-2.37.4-150500.9.6.1 * libblkid1-32bit-debuginfo-2.37.4-150500.9.6.1 * libuuid1-32bit-2.37.4-150500.9.6.1 * libblkid1-32bit-2.37.4-150500.9.6.1 * libuuid1-32bit-debuginfo-2.37.4-150500.9.6.1 * Server Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * util-linux-systemd-debugsource-2.37.4-150500.9.6.1 * uuidd-debuginfo-2.37.4-150500.9.6.1 * util-linux-systemd-debuginfo-2.37.4-150500.9.6.1 * uuidd-2.37.4-150500.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-28085.html * https://bugzilla.suse.com/show_bug.cgi?id=1207987 * https://bugzilla.suse.com/show_bug.cgi?id=1221831 . This important patch resolves CVE-2024-29076, correcting input validation issues in coreutils for Fedora and RHEL.. SUSE Linux Update, Security Patch, OpenSUSE Security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 09, 2024 •Important OpenSUSE
99
Ls Advisories Slackware Esm H240
Price Tag%201security advisorymoderatesecurity update

Slackware 15.0: 2024-088-02 Moderate: Util-Linux Escape Sequence Issue

New util-linux packages are available for Slackware 15.0 and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] util-linux (SSA:2024-088-02) New util-linux packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/util-linux-2.37.4-i586-3_slack15.0.txz: Rebuilt. This release fixes a vulnerability where the wall command did not filter escape sequences from command line arguments, allowing unprivileged users to put arbitrary text on other users terminals. For more information, see: https://www.cve.org/CVERecord?id=CVE-2024-28085 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/util-linux-2.37.4-i586-3_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/util-linux-2.37.4-x86_64-3_slack15.0.txz Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 15.0 package: 3cd4404f3936f17e7f0ab70a4db3c3c5 util-linux-2.37.4-i586-3_slack15.0.txz Slackware x86_64 15.0 package: bb90b0b99780f22a4bce3829235169c5 util-linux-2.37.4-x86_64-3_slack15.0.txz Slackware -current package: 46535176e55cabab56994a2031acd643 a/util-linux-2.40-i586-1.txz Slackware x86_64 -current package: a16777d05bd73065cad733ee2a24f660 a/util-linux-2.40-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkgutil-linux-2.37.4-i586-3_slack15.0.txz +-----+ . A recent security patch for Util-linux in Slackware 15.0 mitigates a vulnerability allowing unprivileged users to exploit escape sequences.. util-linux packages, Slackware security, escape sequence fix. . LinuxSecurity.com Team

Calendar%202 Mar 28, 2024 Slackware
Banner 3 1028x280 1708121785 1771599793
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorycriticaldebian

Debian 9: DLA-2682-1 Critical: mrxvt Remote Execution Flaw

mrxvt, lightweight multi-tabbed X terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-2682-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Utkarsh Gupta June 09, 2021 https://wiki.debian.org/LTS - ----------------------------------------------------------------------- Package : mrxvt Version : 0.5.4-2+deb9u1 CVE ID : CVE-2021-33477 mrxvt, lightweight multi-tabbed X terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). For Debian 9 stretch, this problem has been fixed in version 0.5.4-2+deb9u1. We recommend that you upgrade your mrxvt packages. For the detailed security status of mrxvt please refer to its security tracker page at: Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance mrxvt version to address critical remote code execution vulnerability arising from flawed escape sequence processing in Debian LTS.. mrxvt, Debian Security, Code Execution, Remote Execution, Escape Sequences. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 09, 2021 •Critical Debian LTS
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderateupdate

Fedora 33: 2021-8b85b2de05 Moderate: Eterm Escape Code Fix

Fixes a problem with escape sequences.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-8b85b2de05 2021-06-01 01:04:42.861239 --------------------------------------------------------------------------------Name : eterm Product : Fedora 33 Version : 0.9.6 Release : 26.fc33 URL : https://sourceforge.net/projects/eterm/ Summary : Enlightened terminal emulator Description : Eterm is a color vt102 terminal emulator with enhanced graphical capabilities. Eterm is intended to be a replacement for xterm for Enlightenment window manager users, but it can also be used as a replacement for xterm by users without Enlightenment. Eterm supports various themes and is very configurable, in keeping with the philosophy of Enlightenment. --------------------------------------------------------------------------------Update Information: Fixes a problem with escape sequences. --------------------------------------------------------------------------------ChangeLog: * Sun May 23 2021 Terje Rosten - 0.9.6-26 - Add patch from rxvt-unicode to fix rhbz#1961798 * Tue Jan 26 2021 Fedora Release Engineering - 0.9.6-25 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1961798 - CVE-2021-33477 eterm: rxvt-unicode: possible remote code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1961798 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-8b85b2de05' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The latest update for Eterm on Fedora 33 enhances support for escape sequences and mitigates a possible vulnerability for users.. Fedora 33 Eterm Update, Escape Sequence Fix, Terminal Emulator Security. . LinuxSecurity.com Team

Calendar%202 May 31, 2021 Fedora
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderateupdate

Fedora 35: 2022-bc5df34a28 Low: Eterm Color Adjustment Bug

Fixes a problem with escape sequences.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-c883ca2a37 2021-06-01 01:02:37.833893 --------------------------------------------------------------------------------Name : eterm Product : Fedora 34 Version : 0.9.6 Release : 26.fc34 URL : https://sourceforge.net/projects/eterm/ Summary : Enlightened terminal emulator Description : Eterm is a color vt102 terminal emulator with enhanced graphical capabilities. Eterm is intended to be a replacement for xterm for Enlightenment window manager users, but it can also be used as a replacement for xterm by users without Enlightenment. Eterm supports various themes and is very configurable, in keeping with the philosophy of Enlightenment. --------------------------------------------------------------------------------Update Information: Fixes a problem with escape sequences. --------------------------------------------------------------------------------ChangeLog: * Sun May 23 2021 Terje Rosten - 0.9.6-26 - Add patch from rxvt-unicode to fix rhbz#1961798 --------------------------------------------------------------------------------References: [ 1 ] Bug #1961798 - CVE-2021-33477 eterm: rxvt-unicode: possible remote code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1961798 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-c883ca2a37' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Fedora Update Alert for Eterm resolves escape character problems and introduces notable enhancements. Discover additional details here.. Fedora Eterm Update, Escape Sequence Fix, Linux Terminal Emulator. . Severity: Low. LinuxSecurity.com Team

Calendar%202 May 31, 2021 •Low Fedora
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisoryDoSarbitrary code execution

Mageia 7 MGASA-2020-0440 Critical: Jruby Escape Sequence Issues

Response Splitting attack in the HTTP server of WEBrick (CVE-2017-17742). Delete directory using symlink when decompressing tar (CVE-2019-8320). Escape sequence injection vulnerability in verbose (CVE-2019-8321). . MGASA-2020-0440 - Updated jruby packages fix security vulnerabilities Publication date: 27 Nov 2020 URL: https://advisories.mageia.org/MGASA-2020-0440.html Type: security Affected Mageia releases: 7 CVE: CVE-2017-17742, CVE-2019-8320, CVE-2019-8321, CVE-2019-8322, CVE-2019-8323, CVE-2019-8324, CVE-2019-8325, CVE-2019-16201, CVE-2019-16254, CVE-2019-16255, CVE-2020-25613 Response Splitting attack in the HTTP server of WEBrick (CVE-2017-17742). Delete directory using symlink when decompressing tar (CVE-2019-8320). Escape sequence injection vulnerability in verbose (CVE-2019-8321). Escape sequence injection vulnerability in gem owner (CVE-2019-8322). Escape sequence injection vulnerability in API response handling (CVE-2019-8323). Installing a malicious gem may lead to arbitrary code execution (CVE-2019-8324). Escape sequence injection vulnerability in errors (CVE-2019-8325). Regular Expression Denial of Service vulnerability of WEBrick's Digest access authentication (CVE-2019-16201). HTTP Response Splitting attack in the HTTP server of WEBrick (CVE-2019-16254). Code injection vulnerability (CVE-2019-16255). A potential HTTP request smuggling vulnerability in WEBrick was reported. WEBrick (bundled along with jruby) was too tolerant against an invalid Transfer-Encoding header. This may lead to inconsistent interpretation between WEBrick and some HTTP proxy servers, which may allow the attacker to "smuggle" a request (CVE-2020-25613). References: - https://bugs.mageia.org/show_bug.cgi?id=27402 - https://lists.debian.org/debian-lts-announce/2020/08/msg00027.html - https://lists.debian.org/debian-lts-announce/2020/10/msg00003.html - https://bugs.mageia.org/show_bug.cgi?id=25875 - https://bugs.mageia.org/show_bug.cgi?id=27402 -https://www.cve.org/CVERecord?id=CVE-2017-17742 - https://www.cve.org/CVERecord?id=CVE-2019-8320 - https://www.cve.org/CVERecord?id=CVE-2019-8321 - https://www.cve.org/CVERecord?id=CVE-2019-8322 - https://www.cve.org/CVERecord?id=CVE-2019-8323 - https://www.cve.org/CVERecord?id=CVE-2019-8324 - https://www.cve.org/CVERecord?id=CVE-2019-8325 - https://www.cve.org/CVERecord?id=CVE-2019-16201 - https://www.cve.org/CVERecord?id=CVE-2019-16254 - https://www.cve.org/CVERecord?id=CVE-2019-16255 - https://www.cve.org/CVERecord?id=CVE-2020-25613 SRPMS: - 7/core/jruby-1.7.22-7.2.mga7 . Mageia 2021-0450 releases updates for ruby packages rectifying serious security concerns stemming from various flaws.. Mageia 7, Jruby Security, Vulnerability Fixes, Security Update, Response Splitting. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 27, 2020 •Critical Mageia
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":75,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics