Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
172
security advisorysecurity issuesystem updateUbuntu 20.04 LTS: USN-6924-1 Critical: Linux Kernel Security Issues
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-6924-1 July 29, 2024 linux, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-bluefield: Linux kernel for NVIDIA BlueField platforms - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-iot: Linux kernel for IoT platforms - linux-kvm: Linux kernel for cloud environments - linux-raspi: Linux kernel for Raspberry Pi systems - linux-xilinx-zynqmp: Linux kernel for Xilinx ZynqMP processors - linux-azure-5.4: Linux kernel for Microsoft Azure cloud systems - linux-gcp-5.4: Linux kernel for Google Cloud Platform (GCP) systems - linux-hwe-5.4: Linux hardware enablement (HWE) kernel - linux-ibm-5.4: Linux kernel for IBM cloud systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM SCMI message protocol; - InfiniBand drivers; - TTY drivers; - TLS protocol; (CVE-2024-26584, CVE-2024-36016, CVE-2024-26585, CVE-2021-47131, CVE-2024-26907, CVE-2022-48655, CVE-2024-26583) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS linux-image-5.4.0-1041-iot 5.4.0-1041.42 linux-image-5.4.0-1048-xilinx-zynqmp 5.4.0-1048.52 linux-image-5.4.0-1076-ibm 5.4.0-1076.81 linux-image-5.4.0-1089-bluefield 5.4.0-1089.96 linux-image-5.4.0-1096-gkeop 5.4.0-1096.100 linux-image-5.4.0-1113-raspi 5.4.0-1113.125 linux-image-5.4.0-1117-kvm 5.4.0-1117.124 linux-image-5.4.0-1133-gcp 5.4.0-1133.142 linux-image-5.4.0-1134-azure 5.4.0-1134.141 linux-image-5.4.0-190-generic 5.4.0-190.210 linux-image-5.4.0-190-generic-lpae 5.4.0-190.210 linux-image-5.4.0-190-lowlatency 5.4.0-190.210 linux-image-azure-lts-20.04 5.4.0.1134.128 linux-image-bluefield 5.4.0.1089.85 linux-image-gcp-lts-20.04 5.4.0.1133.135 linux-image-generic 5.4.0.190.188 linux-image-generic-lpae 5.4.0.190.188 linux-image-gkeop 5.4.0.1096.94 linux-image-gkeop-5.4 5.4.0.1096.94 linux-image-ibm-lts-20.04 5.4.0.1076.105 linux-image-kvm 5.4.0.1117.113 linux-image-lowlatency 5.4.0.190.188 linux-image-oem 5.4.0.190.188 linux-image-oem-osp1 5.4.0.190.188 linux-image-raspi 5.4.0.1113.143 linux-image-raspi2 5.4.0.1113.143 linux-image-virtual 5.4.0.190.188 linux-image-xilinx-zynqmp 5.4.0.1048.48 Ubuntu 18.04 LTS linux-image-5.4.0-1076-ibm 5.4.0-1076.81~18.04.1 Available with Ubuntu Pro linux-image-5.4.0-1133-gcp 5.4.0-1133.142~18.04.1 Available with Ubuntu Pro linux-image-5.4.0-1134-azure 5.4.0-1134.141~18.04.1 Available with Ubuntu Pro linux-image-5.4.0-190-generic 5.4.0-190.210~18.04.1 Available with Ubuntu Pro linux-image-5.4.0-190-lowlatency 5.4.0-190.210~18.04.1 Available with Ubuntu Pro linux-image-azure 5.4.0.1134.141~18.04.1 Available with Ubuntu Pro linux-image-gcp 5.4.0.1133.142~18.04.1 Available with Ubuntu Pro linux-image-generic-hwe-18.04 5.4.0.190.210~18.04.1 Available with Ubuntu Pro linux-image-ibm 5.4.0.1076.81~18.04.1 Available with Ubuntu Pro linux-image-lowlatency-hwe-18.04 5.4.0.190.210~18.04.1 Available with Ubuntu Pro linux-image-oem 5.4.0.190.210~18.04.1 Available with Ubuntu Pro linux-image-oem-osp1 5.4.0.190.210~18.04.1 Available with Ubuntu Pro linux-image-snapdragon-hwe-18.04 5.4.0.190.210~18.04.1 Available with Ubuntu Pro linux-image-virtual-hwe-18.04 5.4.0.190.210~18.04.1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-6924-1 CVE-2021-47131, CVE-2022-48655, CVE-2024-26583, CVE-2024-26584, CVE-2024-26585, CVE-2024-26907, CVE-2024-36016 Package Information: https://launchpad.net/ubuntu/+source/linux/5.4.0-190.210 https://launchpad.net/ubuntu/+source/linux-azure/5.4.0-1134.141 https://launchpad.net/ubuntu/+source/linux-bluefield/5.4.0-1089.96 https://launchpad.net/ubuntu/+source/linux-gcp/5.4.0-1133.142 https://launchpad.net/ubuntu/+source/linux-gkeop/5.4.0-1096.100 https://launchpad.net/ubuntu/+source/linux-ibm/5.4.0-1076.81 https://launchpad.net/ubuntu/+source/linux-iot/5.4.0-1041.42 https://launchpad.net/ubuntu/+source/linux-kvm/5.4.0-1117.124 https://launchpad.net/ubuntu/+source/linux-raspi/5.4.0-1113.125 https://launchpad.net/ubuntu/+source/linux-xilinx-zynqmp/5.4.0-1048.52 . Numerous vulnerabilities resolved in the Linux kernel for Debian. Make certain your devices are upgraded to improve security.. Ubuntu Security, Linux Kernel Fixes, System Update Advice, Security Threats, Attack Vector Resolution. . Severity: Critical. LinuxSecurity.com Team
Jul 29, 2024
•Critical
Ubuntu
100
security advisorymoderateinfinite loopSUSE: 2021:0938-1 Moderate Security: Infinite Loop in Go1.15 Issue
An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for go1.15 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0938-1 Rating: moderate References: #1175132 #1183333 Cross-References: CVE-2021-27918 CVSS scores: CVE-2021-27918 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Manager Server 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Enterprise Storage 6 SUSE CaaS Platform 4.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for go1.15 fixes the following issues: - go1.15.10 (released 2021-03-11) (bsc#1175132) - go1.15.9 (released 2021-03-10) (bsc#1175132) - CVE-2021-27918: Fixed an infinite loop when using xml.NewTokenDecoder with a custom TokenReader (bsc#1183333). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-938=1 - SUSE Manager Retail BranchServer 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-938=1 - SUSE Manager Proxy 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-938=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2021-938=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-938=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-938=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2021-938=1 - SUSE Linux Enterprise Module for Development Tools 15-SP2: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP2-2021-938=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-938=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-938=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2021-938=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Manager Server 4.0 (ppc64le s390x x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 - SUSE Manager Server 4.0 (x86_64): go1.15-race-1.15.10-1.25.1 - SUSE Manager Retail Branch Server 4.0 (x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 go1.15-race-1.15.10-1.25.1 - SUSE Manager Proxy 4.0 (x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 go1.15-race-1.15.10-1.25.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (x86_64): go1.15-race-1.15.10-1.25.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 x86_64): go1.15-race-1.15.10-1.25.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 go1.15-race-1.15.10-1.25.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 x86_64): go1.15-race-1.15.10-1.25.1 - SUSE Linux Enterprise Module for Development Tools 15-SP2 (aarch64 ppc64le s390x x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 - SUSE Linux Enterprise Module for Development Tools 15-SP2 (aarch64 x86_64): go1.15-race-1.15.10-1.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 go1.15-race-1.15.10-1.25.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 go1.15-race-1.15.10-1.25.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 go1.15-race-1.15.10-1.25.1 - SUSE CaaS Platform 4.0 (x86_64): go1.15-1.15.10-1.25.1 go1.15-doc-1.15.10-1.25.1 go1.15-race-1.15.10-1.25.1 References: https://www.suse.com/security/cve/CVE-2021-27918.html https://bugzilla.suse.com/1175132 https://bugzilla.suse.com/1183333 . SUSE Security Patch for go1.15 resolves a moderate vulnerability involving an endless loop in xml.NewTokenDecoder. Update immediately.. SUSE Manager, Update Instructions, Go Security Fix. .LinuxSecurity.com Team
Mar 24, 2021
SuSE
199
security advisorysecurity issueimportant advisoryCentOS: CESA-2019-3755 Significant Sudo Security Update Released
Upstream details at : https://access.redhat.com/errata/RHSA-2019:3755. CentOS Errata and Security Advisory 2019:3755 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:3755 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 20c6fb9ca4864211808289759d4e0b6145c3bed95466a142e7b1fc4cf00383a8 sudo-1.8.6p3-29.el6_10.2.i686.rpm 1a1c7a626fb2954348ca1500d3b37e9af05895ee153f41fa1bf9251d937465d3 sudo-devel-1.8.6p3-29.el6_10.2.i686.rpm x86_64: 5b2ac51d5c8cb3ada62d1c08466dd9ff380eb555b08c809321c25fafd545299c sudo-1.8.6p3-29.el6_10.2.x86_64.rpm 1a1c7a626fb2954348ca1500d3b37e9af05895ee153f41fa1bf9251d937465d3 sudo-devel-1.8.6p3-29.el6_10.2.i686.rpm eb46ebc4a63f62d0ce33935f76a011aefdd2ebf5404271931f34af2b73b169e9 sudo-devel-1.8.6p3-29.el6_10.2.x86_64.rpm Source: 959442a22f72ec7e1c6a5e0d5ab34b24dccae0e1558b895c1a152970c39a0ee9 sudo-1.8.6p3-29.el6_10.2.src.rpm -- Johnny Hughes CentOS Project { https://www.centos.org/ } irc: hughesjr, #
Nov 13, 2019
•Important
CentOS
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!