Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Kernel Important Security Fix for net/can 2026-f1fc7772c3

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Nuclei Important Cross-site Scripting DoS Threat 2026-d36ca2dd19

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 perl-Crypt-OpenSSL-X509 Important Fix CVE-2026-58101

Calendar White Jul 21, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 rust-syslog Critical Path Traversal DoS Vuln 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Rust RPKI Critical Path Traversal Issues Fix 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Routinator Important Security Fixes CVE-2026-49232 to 49235

Calendar White Jul 21, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 rust-fern Important Path Traversal Fix Advisory 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Kernel Important Net CAN Issue Fix Advisory 2026-2dd8b600bb

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 btrbk Critical Update Snapshot Tool Fix CVE-2026-62943

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorysecurity updateprivilege escalation

SUSE: 2018:0271-1 important: Linux Kernel Live Patch 21 exploit risks

An update that fixes two vulnerabilities is now available.. SUSE Security Update: Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP1) ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:0271-1 Rating: important References: #1069708 #1071471 Cross-References: CVE-2017-15868 CVE-2017-16939 Affected Products: SUSE Linux Enterprise Server for SAP 12-SP1 SUSE Linux Enterprise Server 12-SP1-LTSS ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for the Linux Kernel 3.12.74-60_64_60 fixes several issues. The following security issues were fixed: - CVE-2017-15868: The bnep_add_connection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted application (bsc#1071471). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2018-188=1 - SUSE Linux Enterprise Server 12-SP1-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2018-188=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): kgraft-patch-3_12_74-60_64_60-default-5-2.1 kgraft-patch-3_12_74-60_64_60-xen-5-2.1 - SUSE Linux Enterprise Server 12-SP1-LTSS (x86_64): kgraft-patch-3_12_74-60_64_60-default-5-2.1 kgraft-patch-3_12_74-60_64_60-xen-5-2.1 References: https://www.suse.com/security/cve/CVE-2017-15868.html https://www.suse.com/security/cve/CVE-2017-16939.html https://bugzilla.suse.com/1069708 https://bugzilla.suse.com/1071471 -- . Address critical flaws inthe Linux Kernel with this essential patch for SUSE Linux Enterprise Server. This update resolves two major security weaknesses.. SUSE Linux Enterprise, Security Patch, Privilege Escalation, Kernel Update, Important Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 30, 2018 •Important SuSE
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorymoderateexploit risks

Debian DSA-3846-1 Moderate: Libytnef Heap Overflow Security Advisory

Several issues were discovered in libytnef, a library used to decode application/ms-tnef e-mail attachments. Multiple heap overflows, out-of-bound writes and reads, NULL pointer dereferences and infinite loops could be exploited by tricking a user into opening a maliciously . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3846-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Sebastien Delafond May 09, 2017 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libytnef CVE ID : CVE-2017-6298 CVE-2017-6299 CVE-2017-6300 CVE-2017-6301 CVE-2017-6302 CVE-2017-6303 CVE-2017-6304 CVE-2017-6305 CVE-2017-6306 CVE-2017-6800 CVE-2017-6801 CVE-2017-6802 Debian Bug : Several issues were discovered in libytnef, a library used to decode application/ms-tnef e-mail attachments. Multiple heap overflows, out-of-bound writes and reads, NULL pointer dereferences and infinite loops could be exploited by tricking a user into opening a maliciously crafted winmail.dat file. For the stable distribution (jessie), these problems have been fixed in version 1.5-6+deb8u1. For the upcoming stable (stretch) and unstable (sid) distributions, these problems have been fixed in version 1.9.2-1. We recommend that you upgrade your libytnef packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Investigate Debian DSA-3846-1 concerning libytnef enhancements that tackle heap overflow vulnerabilities and security issues.. libytnef, Debian DSA-3846-1, exploit mitigation. . LinuxSecurity.com Team

Calendar%202 May 09, 2017 Debian
Banner 1 1028x280 1708121660 1771599717
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryexploit riskscritical update

Red Hat Linux: RHSA-2011:1341-01 Critical: Firefox Exploit Risks

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Critical: firefox security update Advisory ID: RHSA-2011:1341-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:1341.html Issue date: 2011-09-28 CVE Names: CVE-2011-2372 CVE-2011-2995 CVE-2011-2998 CVE-2011-2999 CVE-2011-3000 ==================================================================== 1. Summary: Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional(v. 6) - i386, x86_64 3. Description: Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-2995) A flaw was found in the way Firefox processed the "Enter" keypress event. A malicious web page could present a download dialog while the key is pressed, activating the default "Open" action. A remote attacker could exploit this vulnerability by causing the browser to open malicious web content. (CVE-2011-2372) A flaw was found in the way Firefox handled Location headers in redirect responses. Two copies of this header with different values could be a symptom of a CRLF injection attack against a vulnerable server. Firefox now treats two copies of the Location, Content-Length, or Content-Disposition header as an error condition. (CVE-2011-3000) A flaw was found in the way Firefox handled frame objects with certain names. An attacker could use this flaw to cause a plug-in to grant its content access to another site or the local file system, violating the same-origin policy. (CVE-2011-2999) An integer underflow flaw was found in the way Firefox handled large JavaScript regular expressions. A web page containing malicious JavaScript could cause Firefox to access already freed memory, causing Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-2998) For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 3.6.23. You can find a link to the Mozilla advisories in the References section of this erratum. All Firefox users should upgrade to these updated packages, which contain Firefox version 3.6.23, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect. 4.Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 741902 - CVE-2011-2995 Mozilla: Miscellaneous memory safety hazards (MFSA 2011-36) 741904 - CVE-2011-2999 Mozilla: XSS via plugins and shadowed window.location object (MFSA 2011-38) 741905 - CVE-2011-3000 Mozilla:Defense against multiple Location headers due to CRLF Injection (MFSA 2011-39) 741917 - CVE-2011-2372 Mozilla:Code installation through holding down Enter (MFSA 2011-40) 741924 - CVE-2011-2998 Mozilla: Integer underflow when using JavaScript RegExp (MFSA 2011-37) 6. Package List: Red Hat Enterprise Linux AS version 4: Source: i386: firefox-3.6.23-1.el4.i386.rpm firefox-debuginfo-3.6.23-1.el4.i386.rpm ia64: firefox-3.6.23-1.el4.ia64.rpm firefox-debuginfo-3.6.23-1.el4.ia64.rpm ppc: firefox-3.6.23-1.el4.ppc.rpm firefox-debuginfo-3.6.23-1.el4.ppc.rpm s390: firefox-3.6.23-1.el4.s390.rpm firefox-debuginfo-3.6.23-1.el4.s390.rpm s390x: firefox-3.6.23-1.el4.s390x.rpm firefox-debuginfo-3.6.23-1.el4.s390x.rpm x86_64: firefox-3.6.23-1.el4.x86_64.rpm firefox-debuginfo-3.6.23-1.el4.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: Source: i386: firefox-3.6.23-1.el4.i386.rpm firefox-debuginfo-3.6.23-1.el4.i386.rpm x86_64: firefox-3.6.23-1.el4.x86_64.rpm firefox-debuginfo-3.6.23-1.el4.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: firefox-3.6.23-1.el4.i386.rpm firefox-debuginfo-3.6.23-1.el4.i386.rpm ia64: firefox-3.6.23-1.el4.ia64.rpm firefox-debuginfo-3.6.23-1.el4.ia64.rpm x86_64: firefox-3.6.23-1.el4.x86_64.rpm firefox-debuginfo-3.6.23-1.el4.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: firefox-3.6.23-1.el4.i386.rpm firefox-debuginfo-3.6.23-1.el4.i386.rpm ia64: firefox-3.6.23-1.el4.ia64.rpm firefox-debuginfo-3.6.23-1.el4.ia64.rpm x86_64: firefox-3.6.23-1.el4.x86_64.rpm firefox-debuginfo-3.6.23-1.el4.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: firefox-3.6.23-2.el5_7.i386.rpm firefox-debuginfo-3.6.23-2.el5_7.i386.rpm xulrunner-1.9.2.23-1.el5_7.i386.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.i386.rpm x86_64: firefox-3.6.23-2.el5_7.i386.rpm firefox-3.6.23-2.el5_7.x86_64.rpm firefox-debuginfo-3.6.23-2.el5_7.i386.rpm firefox-debuginfo-3.6.23-2.el5_7.x86_64.rpm xulrunner-1.9.2.23-1.el5_7.i386.rpm xulrunner-1.9.2.23-1.el5_7.x86_64.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.i386.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: xulrunner-debuginfo-1.9.2.23-1.el5_7.i386.rpm xulrunner-devel-1.9.2.23-1.el5_7.i386.rpm x86_64: xulrunner-debuginfo-1.9.2.23-1.el5_7.i386.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.x86_64.rpm xulrunner-devel-1.9.2.23-1.el5_7.i386.rpm xulrunner-devel-1.9.2.23-1.el5_7.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: firefox-3.6.23-2.el5_7.i386.rpm firefox-debuginfo-3.6.23-2.el5_7.i386.rpm xulrunner-1.9.2.23-1.el5_7.i386.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.i386.rpm xulrunner-devel-1.9.2.23-1.el5_7.i386.rpm ia64: firefox-3.6.23-2.el5_7.ia64.rpm firefox-debuginfo-3.6.23-2.el5_7.ia64.rpm xulrunner-1.9.2.23-1.el5_7.ia64.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.ia64.rpm xulrunner-devel-1.9.2.23-1.el5_7.ia64.rpm ppc: firefox-3.6.23-2.el5_7.ppc.rpm firefox-debuginfo-3.6.23-2.el5_7.ppc.rpm xulrunner-1.9.2.23-1.el5_7.ppc.rpm xulrunner-1.9.2.23-1.el5_7.ppc64.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.ppc.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.ppc64.rpm xulrunner-devel-1.9.2.23-1.el5_7.ppc.rpm xulrunner-devel-1.9.2.23-1.el5_7.ppc64.rpm s390x: firefox-3.6.23-2.el5_7.s390.rpm firefox-3.6.23-2.el5_7.s390x.rpm firefox-debuginfo-3.6.23-2.el5_7.s390.rpm firefox-debuginfo-3.6.23-2.el5_7.s390x.rpm xulrunner-1.9.2.23-1.el5_7.s390.rpm xulrunner-1.9.2.23-1.el5_7.s390x.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.s390.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.s390x.rpm xulrunner-devel-1.9.2.23-1.el5_7.s390.rpm xulrunner-devel-1.9.2.23-1.el5_7.s390x.rpm x86_64: firefox-3.6.23-2.el5_7.i386.rpm firefox-3.6.23-2.el5_7.x86_64.rpm firefox-debuginfo-3.6.23-2.el5_7.i386.rpm firefox-debuginfo-3.6.23-2.el5_7.x86_64.rpm xulrunner-1.9.2.23-1.el5_7.i386.rpm xulrunner-1.9.2.23-1.el5_7.x86_64.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.i386.rpm xulrunner-debuginfo-1.9.2.23-1.el5_7.x86_64.rpm xulrunner-devel-1.9.2.23-1.el5_7.i386.rpm xulrunner-devel-1.9.2.23-1.el5_7.x86_64.rpm Red Hat Enterprise Linux Desktop (v.6): Source: i386: firefox-3.6.23-2.el6_1.i686.rpm firefox-debuginfo-3.6.23-2.el6_1.i686.rpm xulrunner-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm x86_64: firefox-3.6.23-2.el6_1.i686.rpm firefox-3.6.23-2.el6_1.x86_64.rpm firefox-debuginfo-3.6.23-2.el6_1.i686.rpm firefox-debuginfo-3.6.23-2.el6_1.x86_64.rpm xulrunner-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-1.9.2.23-1.el6_1.1.x86_64.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): Source: i386: xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.i686.rpm x86_64: xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.x86_64.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: firefox-3.6.23-2.el6_1.i686.rpm firefox-3.6.23-2.el6_1.x86_64.rpm firefox-debuginfo-3.6.23-2.el6_1.i686.rpm firefox-debuginfo-3.6.23-2.el6_1.x86_64.rpm xulrunner-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-1.9.2.23-1.el6_1.1.x86_64.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.x86_64.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: i386: firefox-3.6.23-2.el6_1.i686.rpm firefox-debuginfo-3.6.23-2.el6_1.i686.rpm xulrunner-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm ppc64: firefox-3.6.23-2.el6_1.ppc.rpm firefox-3.6.23-2.el6_1.ppc64.rpm firefox-debuginfo-3.6.23-2.el6_1.ppc.rpm firefox-debuginfo-3.6.23-2.el6_1.ppc64.rpm xulrunner-1.9.2.23-1.el6_1.1.ppc.rpm xulrunner-1.9.2.23-1.el6_1.1.ppc64.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.ppc.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.ppc64.rpm s390x: firefox-3.6.23-2.el6_1.s390.rpm firefox-3.6.23-2.el6_1.s390x.rpm firefox-debuginfo-3.6.23-2.el6_1.s390.rpm firefox-debuginfo-3.6.23-2.el6_1.s390x.rpm xulrunner-1.9.2.23-1.el6_1.1.s390.rpm xulrunner-1.9.2.23-1.el6_1.1.s390x.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.s390.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.s390x.rpm x86_64: firefox-3.6.23-2.el6_1.i686.rpm firefox-3.6.23-2.el6_1.x86_64.rpm firefox-debuginfo-3.6.23-2.el6_1.i686.rpm firefox-debuginfo-3.6.23-2.el6_1.x86_64.rpm xulrunner-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-1.9.2.23-1.el6_1.1.x86_64.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): Source: i386: xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.i686.rpm ppc64: xulrunner-debuginfo-1.9.2.23-1.el6_1.1.ppc.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.ppc64.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.ppc.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.ppc64.rpm s390x: xulrunner-debuginfo-1.9.2.23-1.el6_1.1.s390.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.s390x.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.s390.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.s390x.rpm x86_64: xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.x86_64.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v.6): Source: i386: firefox-3.6.23-2.el6_1.i686.rpm firefox-debuginfo-3.6.23-2.el6_1.i686.rpm xulrunner-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm x86_64: firefox-3.6.23-2.el6_1.i686.rpm firefox-3.6.23-2.el6_1.x86_64.rpm firefox-debuginfo-3.6.23-2.el6_1.i686.rpm firefox-debuginfo-3.6.23-2.el6_1.x86_64.rpm xulrunner-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-1.9.2.23-1.el6_1.1.x86_64.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): Source: i386: xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.i686.rpm x86_64: xulrunner-debuginfo-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-debuginfo-1.9.2.23-1.el6_1.1.x86_64.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.i686.rpm xulrunner-devel-1.9.2.23-1.el6_1.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2011-2372 https://access.redhat.com/security/cve/CVE-2011-2995 https://access.redhat.com/security/cve/CVE-2011-2998 https://access.redhat.com/security/cve/CVE-2011-2999 https://access.redhat.com/security/cve/CVE-2011-3000 https://access.redhat.com/security/updates/classification/#critical https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.6/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2011 Red Hat, Inc. . Important patch for Firefox resolves multiple vulnerabilities in Red Hat Enterprise Linux. Update immediately to protect your system.. firefox updates, red hat security, critical advisory, software maintenance. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 28, 2011 •Critical Red Hat
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorysecurity issueremote code execution

openSUSE 11: SUSE-SA:2010:008 Moderate: Acroread Remote Code Execution

Specially crafted PDF files could crash acroread. Attackers could Specially crafted PDF files could crash acroread. Attackers could potentially exploit that to execute arbitrary code (CVE-2009-3953, potentially exploit that to execute arbitrary code (CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324). Acrobat reader was updated [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: acroread Announcement ID: SUSE-SA:2010:008 Date: Tue, 26 Jan 2010 15:00:00 +0000 Affected Products: openSUSE 11.0 openSUSE 11.1 openSUSE 11.2 SLE10-SP2 SLE10-SP3 SLED 11 Vulnerability Type: remote code execution CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) SUSE Default Package: yes (on SLED) Cross-References: CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324 Content of This Advisory: 1) Security Vulnerability Resolved: Adobe Reader security update Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: - transmission - libopenssl-devel - gzip - bind - viewvc 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion Speciallycrafted PDF files could crash acroread. Attackers could potentially exploit that to execute arbitrary code (CVE-2009-3953, CVE-2009-3954, CVE-2009-3955, CVE-2009-3956, CVE-2009-3957, CVE-2009-3958, CVE-2009-3959, CVE-2009-4324). Acrobat reader was updated to version 9.3 to fix the security issues. Note: Due to integration issues with the major version update of acroread on SLE10 updates for SLE10 are not ready yet. Fixed packages will be submitted ASAP. 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please close and restart all running instances of acroread after the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv to apply the update, replacing with the filename of the downloaded RPM package. x86 Platform: openSUSE 11.2: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.2/rpm/i586/acroread-9.3-0.1.1.i586.rpm openSUSE 11.1: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.1/rpm/i586/acroread-9.3-0.1.1.i586.rpm openSUSE 11.0: http://ftp5.gwdg.de/pub/opensuse/discontinued/update/11.0/rpm/i586/acroread-9.3-0.1.i586.rpm Sources: openSUSE 11.2: openSUSE 11.1: openSUSE 11.0: Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: SLED 11 SLES 11 DEBUGINFO ______________________________________________________________________________ 5) Pending Vulnerabilities,Solutions, and Work-Arounds: - transmission Specially crafted torrent files could overwrite arbitrary files (CVE-2010-0012). Affected Products: openSUSE 11.0, 11.1, 11.2 - libopenssl-devel Incorrect use of an openssl cleanup function can lead to memory leaks in applications. For example an ssl enabled web server such as apache that uses php, curl and openssl leaks memory if a SIGHUP signal was sent to apache. The openssl cleanup function was made more robust to avoid memory leaks (CVE-2009-4355). Affected Products: SLE10-SP2, SLE10-SP3, SLE11, openSUSE 11.0, 11.1, 11.2 - gzip Specially crafted gzip archives could lead to gzip allocating a too small huffman table. Attackers could exploit that to crash gzip (CVE-2009-2624). Specially crafted gzip archives could trigger integer overflows. Attackers could exploit that to crash gzip or potentially execute arbitrary code (CVE-2010-0001). Only 64bit architectures are affected by this flaw. Affected Products: SLES9, SLE10-SP2, SLE10-SP3, SLE11, openSUSE 11.0, 11.1, 11.2 - bind bind when configured for DNSSEC could incorrectly cache NXDOMAIN responses (CVE-2010-0097). Moreover, the fix for CVE-2009-4022 was incomplete. Despite the previous fix CNAME and DNAME responses could be incorrectly cached (CVE-2010-0290). Affected Products: SLE11, openSUSE 11.0, 11.1, 11.2 - viewvc viewvc was updated to version 1.1.3 which fixes the following security problems: - add root listing support of per-root authz config (CVE-2010-0004). - query.py requires 'forbidden' authorizer (or none) in config (CVE-2010-0005). Affected Products: openSUSE 11.2 ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify replacing with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from This email address is being protected from spambots. You need JavaScript enabled to view it. with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. - SUSE runs two security mailing lists to which any interested party may subscribe: This email address is being protected from spambots. You need JavaScript enabled to view it. - General Linux and SUSE security discussion. All SUSE securityannouncements are sent to this list. To subscribe, send an e-mail to . This email address is being protected from spambots. You need JavaScript enabled to view it. - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to . ==================================================================== SUSE's security contact is or . The public key is listed below. ==================================================================== . Patch notification for acroreader on openSUSE aimed at fixing instability when handling maliciously designed PDF documents, further information enclosed.. acroread Update, OpenSUSE Security, Remote Code Exploit, PDF Security, Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 26, 2010 •Important SuSE
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics