Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 9 articles for you...
87
security advisorydenial of servicedebianDebian: DSA-5529-1 Moderate: SLURM Denial Of Service Risk
Francois Diakhate discovered that several race conditions in file processing of the Simple Linux Utility for Resource Management (SLURM), a cluster resource management and job scheduling system, could result in denial of service by overwriting arbitrary files. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5529-1
Oct 17, 2023
Debian
89
security advisoryFedoraupdate notificationFedora 34 zchunk Advisory FEDORA-2022-fef374d46f Moderate: Fix Issues
Fix various small issues highlighted by Coverity. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-fef374d46f 2022-05-05 07:03:42.654345 --------------------------------------------------------------------------------Name : zchunk Product : Fedora 34 Version : 1.2.2 Release : 1.fc34 URL : https://github.com/zchunk/zchunk Summary : Compressed file format that allows easy deltas Description : zchunk is a compressed file format that splits the file into independent chunks. This allows you to only download the differences when downloading a new version of the file, and also makes zchunk files efficient over rsync. zchunk files are protected with strong checksums to verify that the file you downloaded is in fact the file you wanted. --------------------------------------------------------------------------------Update Information: Fix various small issues highlighted by Coverity --------------------------------------------------------------------------------ChangeLog: * Mon Apr 18 2022 Jonathan Dieter - 1.2.2-1 - Fixed a number of small issues highlighted by Coverity --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-fef374d46f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
May 05, 2022
Fedora
197
security advisorycriticaldebianDebian 9: DLA-2823-2 Critical: Salt Regression in File Management
The security update of Salt, a remote execution manager, to fix CVE-2021-21996 introduced a regression in salt/fileclient.py which raised an unexpected exception and made file.managed states fail. . -------------------------------------------------------------------------Debian LTS Advisory DLA-2823-2
Nov 20, 2021
•Critical
Debian LTS
203
security advisorysecurity issuesymbolic linkMageia 8: MGASA-2021-0430 Moderate: Libarchive Symlink Handling Issue
Fix handling of symbolic link ACLs on Linux. Never follow symlinks when setting file flags on Linux. Do not follow symlinks when processing the fixup list. . MGASA-2021-0430 - Updated libarchive packages fix security vulnerability Publication date: 23 Sep 2021 URL: https://advisories.mageia.org/MGASA-2021-0430.html Type: security Affected Mageia releases: 8 Fix handling of symbolic link ACLs on Linux. Never follow symlinks when setting file flags on Linux. Do not follow symlinks when processing the fixup list. References: - https://bugs.mageia.org/show_bug.cgi?id=29431 - https://github.com/libarchive/libarchive/releases/tag/v3.5.2 SRPMS: - 8/core/libarchive-3.5.2-1.mga8 . Enhanced libarchive builds in Mageia 8 fix problems related to symlink handling, ensuring that file attributes are handled with proper security measures.. libarchive security update,Mageia 8,security fixes,symbolic link handling. . LinuxSecurity.com Team
Sep 23, 2021
Mageia
87
security advisorydebianrace conditionDebian: Trn Race Condition Fix for Overwrite Risk Due to Hardcoded Filename
All former versions of trn used a hardcoded filename in /tmp as temporary storage. If the file already exists as symbolic link to users files they will be overwritten. . All former versions of trn used a hardcoded filename in /tmp as temporary storage. If the file already exists as symbolic link to users files they will be overwritten. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.1 alias slink -------------------------------- Source archives: MD5 checksum: a1b2a19ea060c289e079444edf908a18 MD5 checksum: 562b8ad926784d101646dc7148919015 Alpha architecture: MD5 checksum: 919bbf1ae668786ec945d4fb042d0d27 Intel ia32 architecture: MD5 checksum: b14c9ba3eeef6a33e574c55e022c47a4 Motorola 680x0 architecture: MD5 checksum: 3ad7ab653b333cfc4fb4409c7fe1e192 Sun Sparc architecture: MD5 checksum: 97cebe97d78372706c225309898a2e7d Debian GNU/Linux unstable alias potato -------------------------------------- Source archives: -9.4.diff.gz MD5 checksum: 46a3f905fecec6e9079ccb6e6c0d27dd MD5 checksum: e23192e418c3299f0bee0c5ef0f182e8 . tar.gz MD5 checksum: b42f4226072442265fbbda865ca4b796 Alpha architecture: MD5 checksum: bdcad9ead736edd1082bd203a26a3233 ARM architecture: MD5 checksum: f8c918679d759b3ec22a017eb58fc3b4 Intel ia32 architecture: MD5 checksum: d2a73698ac259196876a71fd6f45b714 Motorola 680x0 architecture: MD5 checksum: 0eb1b01ce9d3a92c2072ba8a6e7c81fa PowerPC architecture: MD5 checksum: 60ddaabdecb48ae2062d5d88ee608c42 Sun Sparc architecture: MD5 checksum: a1525fc83d73502be41411e02ba8ec3f --Debian GNU/Linux . Security Managers .
Oct 22, 2020
•Critical
Debian
89
security advisorycriticalFedoraFedora 33 FEDORA-2020-f04f41bcc9 Critical Ark Security Fix
security fix for CVE-2020-24654. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-f04f41bcc9 2020-09-25 16:31:57.890800 --------------------------------------------------------------------------------Name : ark Product : Fedora 33 Version : 20.04.3 Release : 5.fc33 URL : https://apps.kde.org//utilities/ark/ Summary : Archive manager Description : Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha (if appropriate command-line programs are installed). --------------------------------------------------------------------------------Update Information: security fix for CVE-2020-24654 --------------------------------------------------------------------------------ChangeLog: * Mon Aug 31 2020 Than Ngo - 20.04.3-5 - backport security fix for CVE-2020-24654 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-f04f41bcc9' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 25, 2020
•Critical
Fedora
98
security advisorymoderatesecurity updateRed Hat OpenStack Platform 16: RHSA-2020-2165-01 Moderate Security Update
An update for openstack-manila is now available for Red Hat OpenStack Platform 16 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openstack-manila security update Advisory ID: RHSA-2020:2165-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2020:2165 Issue date: 2020-05-14 CVE Names: CVE-2020-9543 ==================================================================== 1. Summary: An update for openstack-manila is now available for Red Hat OpenStack Platform 16 (Train). Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.0 - noarch 3. Description: OpenStack Shared Filesystem Service (Manila) provides services to manage network filesystems for use by Virtual Machine instances. Security Fix(es): * User with share-network UUID is able to show create and delete shares (CVE-2020-9543) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1809855 - CVE-2020-9543 openstack-manila: User with share-network UUID is able to show, create and delete shares 1824519 - Rebase openstack-manila to f071a43 6. Package List: Red HatOpenStack Platform 16.0: Source: openstack-manila-9.1.2-0.20200405045746.f071a43.el8ost.src.rpm noarch: openstack-manila-9.1.2-0.20200405045746.f071a43.el8ost.noarch.rpm openstack-manila-share-9.1.2-0.20200405045746.f071a43.el8ost.noarch.rpm python3-manila-9.1.2-0.20200405045746.f071a43.el8ost.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-9543 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXr00pdzjgjWX9erEAQiYfw//YzUt5qzgY5l4Vsq51VeftRuHBWeOnRbM njsAMWiLxqffF1DFbJ4cR66e+1dtUjLfkLj6KJDb9QxBjiAK9vlhsyWz6mzPVhv/ EbjZy64qQU5JW9ad+eT5e3kCls17EUneM68vmI5YLuo2BqiTrS0f4YxtQ2lq67kC qTRyJUDHkL1Hh0vOspZt8g9uLA1X+mFk5rdB0W1WxS/VcqId+XoT4wVhI8JTyHfD uYovug7rJ4VMqpTZTaHowQDFpihqgYFypCvLJXvj0XNjJsb+21OxFsx6D/l3Rr6N bdQRNMlhjEY4q0ZbZm02acQ2XyBDyzPfYiCwbm1kSx89T7gHL++R2yYWSs6Scy7p kR/ARmzO5S/wQ2C94bb7oyDdOu1LgHLIZ37fgH1IYXsUU1vzJFoHf2gS6E/UDDuB vE3Z/+/Vo2QeP2NKCX2fRLukUX/WiCnnV8mWilYjSMJZHjcvWFfKwlZvGztQwe88 GTe6jNJmG2aSOxlmy9vm+1jX4tQERAMG5r112w8E6ZPCch0V9BYbeTtUC5/K+uch 3WbiXzt7ET6ONUwqqVQe1h6L3lLsm97XRMweK4RJlw4kh2VqElJP03vRdSEy5H1w BiArjFab++9Il5akdoLopKYsHdFH9+zzgtjKUDZNYhZHG61S0LQF90RrHBbXaWn2 GlHm2eMm9dw=KkVq -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 14, 2020
Red Hat
200
security advisoryremote accesslftpScientific Linux SL7: SLSA-2020-1045-1 Moderate Level lftp Threat
lftp: particular remote file names may lead to current working directory erased SL7 x86_64 lftp-4.4.8-12.el7.x86_64.rpm lftp-4.4.8-12.el7.i686.rpm lftp-debuginfo-4.4.8-12.el7.i686.rpm lftp-debuginfo-4.4.8-12.el7.x86_64.rpm noarch lftp-scripts-4.4.8-12.el7.noarch.rpm - Scientific Linux Development Team. Synopsis: Moderate: lftp security update Advisory ID: SLSA-2020:1045-1 Issue Date: 2020-04-07 CVE Numbers: CVE-2018-10916 -- * lftp: particular remote file names may lead to current working directory erased -- SL7 x86_64 lftp-4.4.8-12.el7.x86_64.rpm lftp-4.4.8-12.el7.i686.rpm lftp-debuginfo-4.4.8-12.el7.i686.rpm lftp-debuginfo-4.4.8-12.el7.x86_64.rpm noarch lftp-scripts-4.4.8-12.el7.noarch.rpm - Scientific Linux Development Team . Timely security patch for lftp on SL7.x systems that resolves possible directory deletion vulnerabilities through external files.. lftp security update, Scientific Linux, SL7.x advisory, remote file access, lftp data loss. . LinuxSecurity.com Team
Apr 20, 2020
Scientific Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!