Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisorymoderatefedoraFedora 24: 2017-d5aa7c77d6 Moderate: Tomcat Security Update
This updates includes a rebase from tomcat 8.0.42 up to 8.0.43 which resolves multiple CVEs: - rhbz#1441242 CVE-2017-5647 CVE-2017-5648 CVE-2017-5650 CVE-2017-5651 tomcat: various flaws. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-d5aa7c77d6 2017-04-27 14:02:15.390710 --------------------------------------------------------------------------------Name : tomcat Product : Fedora 24 Version : 8.0.43 Release : 1.fc24 URL : https://tomcat.apache.org/ Summary : Apache Servlet/JSP Engine, RI for Servlet 3.1/JSP 2.3 API Description : Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world. --------------------------------------------------------------------------------Update Information: This updates includes a rebase from tomcat 8.0.42 up to 8.0.43 which resolves multiple CVEs: - rhbz#1441242 CVE-2017-5647 CVE-2017-5648 CVE-2017-5650 CVE-2017-5651 tomcat: various flaws --------------------------------------------------------------------------------References: [ 1 ] Bug #1441242 - CVE-2017-5647 CVE-2017-5648 tomcat: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1441242 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade tomcat' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. Moredetails on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Apr 27, 2017
•Important
Fedora
89
security advisoryfedorasoftware updateFedora 25: Tomcat 8.0.39 Security Update Severe: Multiple Flaws Fix
This updates includes a rebase from tomcat 8.0.38 up to 8.0.39 which resolves multiple CVEs: * \#1397493 - CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-98cca07999 2016-12-14 17:57:38.407800 -------------------------------------------------------------------------------- Name : tomcat Product : Fedora 25 Version : 8.0.39 Release : 1.fc25 URL : https://tomcat.apache.org/ Summary : Apache Servlet/JSP Engine, RI for Servlet 3.1/JSP 2.3 API Description : Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participatory environment and released under the Apache Software License version 2.0. Tomcat is intended to be a collaboration of the best-of-breed developers from around the world. -------------------------------------------------------------------------------- Update Information: This updates includes a rebase from tomcat 8.0.38 up to 8.0.39 which resolves multiple CVEs: * \#1397493 - CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws -------------------------------------------------------------------------------- References: [ 1 ] Bug #1397493 - CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1397493 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade tomcat' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the FedoraProject can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Dec 14, 2016
•Important
Fedora
200
security advisoryremote attackcups serviceScientific Linux: Critical CUPS Security Update for Remote Attacks
Important: cups security update. Date: Wed, 7 Nov 2007 17:08:08 -0600 Reply-To: Connie Sieh Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: Security ERRATA for cups on SL4.x i386/x86_64 Comments: To: scientific Synopsis: Important: cups security update CVE Names: CVE-2007-4045 CVE-2007-4351 CVE-2007-4352 CVE-2007-5392 CVE-2007-5393 Problem description: Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause CUPS to crash or potentially execute arbitrary code when printed. (CVE-2007-4352, CVE-2007-5392, CVE-2007-5393) Alin Rad Pop discovered a flaw in in the way CUPS handles certain IPP tags. A remote attacker who is able to connect to the IPP TCP port could send a malicious request causing the CUPS daemon to crash. (CVE-2007-4351) A flaw was found in the way CUPS handled SSL negotiation. A remote attacker capable of connecting to the CUPS daemon could cause CUPS to crash. (CVE-2007-4045) SL4.x SRPMS: cups-1.1.22-0.rc1.9.20.2.el4_5.2.src.rpm i386: cups-1.1.22-0.rc1.9.20.2.el4_5.2.i386.rpm cups-devel-1.1.22-0.rc1.9.20.2.el4_5.2.i386.rpm cups-libs-1.1.22-0.rc1.9.20.2.el4_5.2.i386.rpm x86_64: cups-1.1.22-0.rc1.9.20.2.el4_5.2.x86_64.rpm cups-devel-1.1.22-0.rc1.9.20.2.el4_5.2.x86_64.rpm cups-libs-1.1.22-0.rc1.9.20.2.el4_5.2.i386.rpm cups-libs-1.1.22-0.rc1.9.20.2.el4_5.2.x86_64.rpm -Connie Sieh -Troy Dawson . SERVER security patch addresses critical vulnerabilities enabling remote code exploitation and system outages. Upgrade advised.. CUPS Update, Remote Code Execution, Scientific Linux Security, PDF Handling Issue, SSL Flaw Resolution. . Severity: Critical. LinuxSecurity.com Team
Nov 07, 2007
•Critical
Scientific Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!