Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

Stay Secure with the Latest Linux Advisories

Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 LTS python-pip Moderate DoS Regression Fix USN-8344-3

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS GStreamer Base Significant DoS Attack Vulnerability Alert

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS MySQL Important Security Issues USN-8363-2

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 LTS nginx Security Advisory for Critical DoS Vulnerabilities

Calendar White Jun 03, 2026
Critical
Oracle Large Esm H900
Oracle

Oracle Linux 8 gnutls Important Buffer Overflow Auth Bypass ELSA-2026-20611

Calendar White Jun 03, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 ELSA-2026-22315 compat-openssl10 Moderate DoS Fix

Calendar White Jun 02, 2026
moderate
Oracle Large Esm H800
Oracle

Oracle Linux 8 httpd Important Denial of Service Vuln ELSA-2026-22140

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 Important Kernel Security Advisory ELSA-2026-21706

Calendar White Jun 02, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

Calendar White Jun 02, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 5 articles for you...
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorydenial of servicecritical

Ubuntu 25.10 pyOpenSSL Critical Fix for Denial of Service CVE-2026-27459

Several security issues were fixed in pyOpenSSL.. ========================================================================== Ubuntu Security Notice USN-8115-1 March 23, 2026 pyopenssl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in pyOpenSSL. Software Description: - pyopenssl: Python wrapper around the OpenSSL library Details: It was discovered that pyOpenSSL incorrectly handled exceptions in the tlsext_servername callback. This could result in connections being accepted after an exception, contrary to expectations. (CVE-2026-27448) It was discovered that pyOpenSSL incorrectly handled the DTLS cookie generation callback. If a callback provided cookie values greater than 256 bytes, an attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2026-27459) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 python3-openssl 25.0.0-1ubuntu0.1 Ubuntu 24.04 LTS python3-openssl 23.2.0-1ubuntu0.1 Ubuntu 22.04 LTS python3-openssl 21.0.0-1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8115-1 CVE-2026-27448, CVE-2026-27459 Package Information: https://launchpad.net/ubuntu/+source/pyopenssl/25.0.0-1ubuntu0.1 https://launchpad.net/ubuntu/+source/pyopenssl/23.2.0-1ubuntu0.1 https://launchpad.net/ubuntu/+source/pyopenssl/21.0.0-1ubuntu0.1 . Several issues fixed in pyOpenSSL for different Ubuntu versions to prevent service disruptions. Stay updated now!. Ubuntu security, pyOpenSSL update, critical vulnerabilities, denial of service, softwaresecurity patch. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 23, 2026 •Critical Ubuntu
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedorapatch

Fedora 41: Xen Update 4.19.3 Critical Transitive Attack 2025-d2a821d9d1

update to xen-4.19.3 includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-d2a821d9d1 2025-08-09 03:07:08.046913+00:00 -------------------------------------------------------------------------------- Name : xen Product : Fedora 41 Version : 4.19.3 Release : 1.fc41 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor -------------------------------------------------------------------------------- Update Information: update to xen-4.19.3 includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350, -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 5 2025 Michael Young - 4.19.3-1 - update to xen-4.19.3 remove patches now included or superceded upstream includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350, CVE-2024-36357] -------------------------------------------------------------------------------- References: [ 1 ] Bug #2381572 - CVE-2025-27465 xen: Xen: Incorrect Exception Handling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2381572 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-d2a821d9d1' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . The Fedora 41 release of Xen 4.19.3 comes with essential updates addressing various security vulnerabilities and enhances virtualization administration practices.. Xen Update Fedora 41 Transitive Attack Exception Handling Patches. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 09, 2025 •Critical Fedora
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoralinux

Fedora 42: Xen Critical Exceptions and Scheduler Attacks 2025-ddaa63a0f5

update to xen-4.19.3 includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-ddaa63a0f5 2025-08-08 00:53:07.923997+00:00 -------------------------------------------------------------------------------- Name : xen Product : Fedora 42 Version : 4.19.3 Release : 2.fc42 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor -------------------------------------------------------------------------------- Update Information: update to xen-4.19.3 includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350, CVE-2024-36357] -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 5 2025 Michael Young - 4.19.3-2 - update to xen-4.19.3 remove patches now included or superceded upstream includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350, CVE-2024-36357] -------------------------------------------------------------------------------- References: [ 1 ] Bug #2381572 - CVE-2025-27465 xen: Xen: Incorrect Exception Handling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2381572 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-ddaa63a0f5' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Fedora 42 enhances xen with essential patches to counter transitive threats and rectify flaws in exception management.. Fedora security advisory, xen vulnerability, virtual machine monitor. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 08, 2025 •Critical Fedora
100
Ls Advisories Suse Esm H240
Price Tag 1security advisorySuSEimportant

SUSE: xen Important AMD Execution Attacks Fix 2025:02319-1

* bsc#1238896 * bsc#1244644 * bsc#1246112 Cross-References: . # Security update for xen Announcement ID: SUSE-SU-2025:02319-1 Release Date: 2025-07-15T14:20:10Z Rating: important References: * bsc#1238896 * bsc#1244644 * bsc#1246112 Cross-References: * CVE-2024-36350 * CVE-2024-36357 * CVE-2025-27465 CVSS scores: * CVE-2024-36350 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2024-36357 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2025-27465 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-27465 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves three vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471) * CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-2319=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2319=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2319=1 * SUSE LinuxEnterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2319=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-2319=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-2319=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2319=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2319=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * xen-tools-domU-debuginfo-4.14.6_26-150300.3.91.1 * xen-debugsource-4.14.6_26-150300.3.91.1 * xen-devel-4.14.6_26-150300.3.91.1 * xen-libs-4.14.6_26-150300.3.91.1 * xen-libs-debuginfo-4.14.6_26-150300.3.91.1 * xen-tools-domU-4.14.6_26-150300.3.91.1 * openSUSE Leap 15.3 (x86_64) * xen-libs-32bit-debuginfo-4.14.6_26-150300.3.91.1 * xen-libs-32bit-4.14.6_26-150300.3.91.1 * openSUSE Leap 15.3 (aarch64 x86_64) * xen-doc-html-4.14.6_26-150300.3.91.1 * xen-tools-debuginfo-4.14.6_26-150300.3.91.1 * xen-tools-4.14.6_26-150300.3.91.1 * xen-4.14.6_26-150300.3.91.1 * openSUSE Leap 15.3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_26-150300.3.91.1 * openSUSE Leap 15.3 (aarch64_ilp32) * xen-libs-64bit-4.14.6_26-150300.3.91.1 * xen-libs-64bit-debuginfo-4.14.6_26-150300.3.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (x86_64) * xen-tools-domU-debuginfo-4.14.6_26-150300.3.91.1 * xen-debugsource-4.14.6_26-150300.3.91.1 * xen-tools-4.14.6_26-150300.3.91.1 * xen-tools-domU-4.14.6_26-150300.3.91.1 * xen-devel-4.14.6_26-150300.3.91.1 * xen-libs-4.14.6_26-150300.3.91.1 * xen-tools-debuginfo-4.14.6_26-150300.3.91.1 * xen-libs-debuginfo-4.14.6_26-150300.3.91.1 * xen-4.14.6_26-150300.3.91.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_26-150300.3.91.1 * SUSE Linux EnterpriseServer 15 SP3 LTSS (x86_64) * xen-tools-domU-debuginfo-4.14.6_26-150300.3.91.1 * xen-debugsource-4.14.6_26-150300.3.91.1 * xen-tools-4.14.6_26-150300.3.91.1 * xen-tools-domU-4.14.6_26-150300.3.91.1 * xen-devel-4.14.6_26-150300.3.91.1 * xen-libs-4.14.6_26-150300.3.91.1 * xen-tools-debuginfo-4.14.6_26-150300.3.91.1 * xen-libs-debuginfo-4.14.6_26-150300.3.91.1 * xen-4.14.6_26-150300.3.91.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.14.6_26-150300.3.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (x86_64) * xen-tools-domU-debuginfo-4.14.6_26-150300.3.91.1 * xen-debugsource-4.14.6_26-150300.3.91.1 * xen-tools-4.14.6_26-150300.3.91.1 * xen-tools-domU-4.14.6_26-150300.3.91.1 * xen-devel-4.14.6_26-150300.3.91.1 * xen-libs-4.14.6_26-150300.3.91.1 * xen-tools-debuginfo-4.14.6_26-150300.3.91.1 * xen-libs-debuginfo-4.14.6_26-150300.3.91.1 * xen-4.14.6_26-150300.3.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_26-150300.3.91.1 * SUSE Enterprise Storage 7.1 (x86_64) * xen-tools-domU-debuginfo-4.14.6_26-150300.3.91.1 * xen-debugsource-4.14.6_26-150300.3.91.1 * xen-tools-4.14.6_26-150300.3.91.1 * xen-tools-domU-4.14.6_26-150300.3.91.1 * xen-devel-4.14.6_26-150300.3.91.1 * xen-libs-4.14.6_26-150300.3.91.1 * xen-tools-debuginfo-4.14.6_26-150300.3.91.1 * xen-libs-debuginfo-4.14.6_26-150300.3.91.1 * xen-4.14.6_26-150300.3.91.1 * SUSE Enterprise Storage 7.1 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_26-150300.3.91.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * xen-libs-4.14.6_26-150300.3.91.1 * xen-debugsource-4.14.6_26-150300.3.91.1 * xen-libs-debuginfo-4.14.6_26-150300.3.91.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * xen-libs-4.14.6_26-150300.3.91.1 * xen-debugsource-4.14.6_26-150300.3.91.1 * xen-libs-debuginfo-4.14.6_26-150300.3.91.1 * SUSELinux Enterprise Micro for Rancher 5.2 (x86_64) * xen-libs-4.14.6_26-150300.3.91.1 * xen-debugsource-4.14.6_26-150300.3.91.1 * xen-libs-debuginfo-4.14.6_26-150300.3.91.1 ## References: * https://www.suse.com/security/cve/CVE-2024-36350.html * https://www.suse.com/security/cve/CVE-2024-36357.html * https://www.suse.com/security/cve/CVE-2025-27465.html * https://bugzilla.suse.com/show_bug.cgi?id=1238896 * https://bugzilla.suse.com/show_bug.cgi?id=1244644 * https://bugzilla.suse.com/show_bug.cgi?id=1246112 . A critical patch release for SUSE has been issued to address significant security flaws in the xen software package. Suggested updates are available.. SUSE Linux, Xen Application, Security Patching, System Vulnerability Management. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jul 15, 2025 •Important SuSE
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorysoftware updateFedora

Fedora 36: 2022-8ad3246cc0 Moderate Keylime Exception Handling Fix

Security fix for CVE-2022-3500 Proper exception handling in tornado_requests. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-8ad3246cc0 2022-12-19 01:17:16.560460 --------------------------------------------------------------------------------Name : keylime Product : Fedora 36 Version : 6.4.3 Release : 2.fc36 URL : https://github.com/keylime/keylime Summary : Open source TPM software for Bootstrapping and Maintaining Trust Description : Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2022-3500 Proper exception handling in tornado_requests --------------------------------------------------------------------------------ChangeLog: * Thu Dec 8 2022 Sergio Correia - 6.4.3-2 - Proper exception handling in tornado_requests Fixes: CVE-2022-3500 --------------------------------------------------------------------------------References: [ 1 ] Bug #2135343 - CVE-2022-3500 keylime: exception handling and impedance match in tornado_requests https://bugzilla.redhat.com/show_bug.cgi?id=2135343 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-8ad3246cc0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. Tounsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 36 has released an update to resolve a security vulnerability found in the keylime package, while also improving error handling in tornado_requests.. Fedora 36, Keylime Fix, Exception Handling, Security Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 19, 2022 •Important Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryFedoraimportant update

Fedora 37: FEDORA-2022-7a312cde45 Important: Keylime Exception Handling Fix

Security fix for CVE-2022-3500 Proper exception handling in tornado_requests. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-7a312cde45 2022-12-19 01:14:07.970132 --------------------------------------------------------------------------------Name : keylime Product : Fedora 37 Version : 6.4.3 Release : 5.fc37 URL : https://github.com/keylime/keylime Summary : Open source TPM software for Bootstrapping and Maintaining Trust Description : Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2022-3500 Proper exception handling in tornado_requests --------------------------------------------------------------------------------ChangeLog: * Fri Dec 9 2022 Sergio Correia 6.4.3-5 - Proper exception handling in tornado_requests * Fri Dec 9 2022 Sergio Correia 6.4.3-4 - Do not remove tag-repository.repo * Thu Dec 1 2022 Karel Srot 6.4.3-3 - Add dynamic_ref reference to e2e_tests.fmf * Wed Sep 14 2022 Sergio Correia 6.4.3-2 - Update tests branch to fedora-main --------------------------------------------------------------------------------References: [ 1 ] Bug #2135343 - CVE-2022-3500 keylime: exception handling and impedance match in tornado_requests https://bugzilla.redhat.com/show_bug.cgi?id=2135343 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-7a312cde45' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Security Alert for Fedora 37 - Keylime Updates Feature Improved Exception Management in tornado_requests.. Fedora Updates, Keylime Security, Exception Handling. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 19, 2022 •Important Fedora
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryFedorasoftware fix

Fedora 35 Keylime Update: Fix For CVE-2022-3500 Exception Handling

Security fix for CVE-2022-3500 Proper exception handling in tornado_requests. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-5a6ed3607d 2022-12-11 01:46:58.698282 --------------------------------------------------------------------------------Name : keylime Product : Fedora 35 Version : 6.4.3 Release : 2.fc35 URL : https://github.com/keylime/keylime Summary : Open source TPM software for Bootstrapping and Maintaining Trust Description : Keylime is a TPM based highly scalable remote boot attestation and runtime integrity measurement solution. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2022-3500 Proper exception handling in tornado_requests --------------------------------------------------------------------------------ChangeLog: * Thu Dec 8 2022 Sergio Correia - 6.4.3-2 - Proper exception handling in tornado_requests Fixes: CVE-2022-3500 --------------------------------------------------------------------------------References: [ 1 ] Bug #2135343 - CVE-2022-3500 keylime: exception handling and impedance match in tornado_requests https://bugzilla.redhat.com/show_bug.cgi?id=2135343 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-5a6ed3607d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. Tounsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The latest Fedora update for Keylime addresses an exception handling flaw that bolsters defenses against possible vulnerabilities.. Fedora Update, Keylime Security, Exception Handling. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 11, 2022 •Critical Fedora
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorycritical issueexception handling

Mageia 8: MGASA-2021-0487 Critical: Ansible Exception Handling Issue

Do not include params in exception when a call to set_options fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620) References: . MGASA-2021-0487 - Updated ansible packages fix security vulnerability Publication date: 23 Oct 2021 URL: https://advisories.mageia.org/MGASA-2021-0487.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-3620 Do not include params in exception when a call to set_options fails. Additionally, block the exception that is returned from being displayed to stdout. (CVE-2021-3620) References: - https://bugs.mageia.org/show_bug.cgi?id=29558 - https://access.redhat.com/errata/RHSA-2021:3872 - https://www.cve.org/CVERecord?id=CVE-2021-3620 SRPMS: - 8/core/ansible-2.9.27-1.mga8 . A recent Ansible patch tackles crucial vulnerabilities within Mageia 8, effectively mitigating exceptions and resolving stdout rendering problems.. Ansible Security Update,Mageia 8,Patch Management,Software Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 23, 2021 •Critical Mageia
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here