Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisoryFedorasecurity fixFedora 39: FEDORA-2024-af1f06c79c Moderate: Glances Information Exposure
Security fix for CVE-2024-21501. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-af1f06c79c 2024-06-02 03:36:56.060472 -------------------------------------------------------------------------------- Name : glances Product : Fedora 39 Version : 4.0.5 Release : 2.fc39 URL : https://nicolargo.github.io/glances/ Summary : A cross-platform system monitoring tool Description : Glances is a cross-platform monitoring tool which aims to present a large amount of monitoring information through a curses or Web based interface. The information dynamically adapts depending on the size of the user interface It can also work in client/server mode. Remote monitoring could be done via terminal, Web interface or API (XML-RPC and RESTful). Stats can also be exported to files or external time/value databases. Glances is written in Python and uses libraries to grab information from your system. It is based on an open architecture where developers can add new plugins or exports modules. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2024-21501 -------------------------------------------------------------------------------- ChangeLog: * Fri May 24 2024 Ali Erdinc Koroglu - 4.0.5-1 - Update to 4.0.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2207804 - glances-4.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2207804 [ 2 ] Bug #2248802 - [abrt] glances: end(): glances_curses.py:514:end:_curses.error: nocbreak() returned ERR https://bugzilla.redhat.com/show_bug.cgi?id=2248802 [ 3 ] Bug #2266116 - TRIAGE CVE-2024-21501 glances: sanitize-html: Information Exposure when used on the backend [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266116 [ 4 ] Bug #2282299 - [abrt] glances: display_popup():glances_curses.py:976:display_popup:_curses.error: addnwstr() returned ERR https://bugzilla.redhat.com/show_bug.cgi?id=2282299 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-af1f06c79c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 02, 2024
Fedora
89
security advisorycriticalFedoraUbuntu 24.04: 2024-a9d672gyd3 High: Monitoring Error Disclosure
Security fix for CVE-2024-21501. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-b8e474fbd3 2024-06-02 01:21:00.959089 -------------------------------------------------------------------------------- Name : glances Product : Fedora 40 Version : 4.0.5 Release : 2.fc40 URL : https://nicolargo.github.io/glances/ Summary : A cross-platform system monitoring tool Description : Glances is a cross-platform monitoring tool which aims to present a large amount of monitoring information through a curses or Web based interface. The information dynamically adapts depending on the size of the user interface It can also work in client/server mode. Remote monitoring could be done via terminal, Web interface or API (XML-RPC and RESTful). Stats can also be exported to files or external time/value databases. Glances is written in Python and uses libraries to grab information from your system. It is based on an open architecture where developers can add new plugins or exports modules. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2024-21501 -------------------------------------------------------------------------------- ChangeLog: * Fri May 24 2024 Ali Erdinc Koroglu - 4.0.5-1 - Update to 4.0.5 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2207804 - glances-4.0.5 is available https://bugzilla.redhat.com/show_bug.cgi?id=2207804 [ 2 ] Bug #2248802 - [abrt] glances: end(): glances_curses.py:514:end:_curses.error: nocbreak() returned ERR https://bugzilla.redhat.com/show_bug.cgi?id=2248802 [ 3 ] Bug #2266116 - TRIAGE CVE-2024-21501 glances: sanitize-html: Information Exposure when used on the backend [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266116 [ 4 ] Bug #2282299 - [abrt] glances: display_popup():glances_curses.py:976:display_popup:_curses.error: addnwstr() returned ERR https://bugzilla.redhat.com/show_bug.cgi?id=2282299 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-b8e474fbd3' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 02, 2024
Fedora
91
security advisorygentoocode executionGentoo: GLSA-202402-31 Critical: Glances Remote Code Exec Flaw Found
A vulnerability has been found in Glances which may lead to arbitrary code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202402-30 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Glances: Arbitrary Code Execution Date: February 26, 2024 Bugs: #791565 ID: 202402-30 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been found in Glances which may lead to arbitrary code execution. Background ========== Glances is an open-source system cross-platform monitoring tool. It allows real-time monitoring of various aspects of your system such as CPU, memory, disk, network usage etc. Affected packages ================= Package Vulnerable Unaffected ------------------- ------------ ------------ sys-process/glances < 3.1.7 > = 3.1.7 Description =========== A vulnerability in XML parsing may lead to a variety of XML attacks. Impact ====== A vulnerability in XML parsing may lead to a variety of XML attacks. Workaround ========== There is no known workaround at this time. Resolution ========== All Glances users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =sys-process/glances-3.1.7" References ========== Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202402-30 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Feb 26, 2024
•Critical
Gentoo
203
security advisorymoderatesecurity updateMageia 8 MGASA-2023-0215 Moderate: Glances Regex Denial of Service
Regular Expression Denial of Service (ReDoS) in angular (CVE-2022-25844) References: - https://bugs.mageia.org/show_bug.cgi?id=31059 - https://lists.fedoraproject.org/archives/list/
Jul 07, 2023
Mageia
89
security advisoryupdateFedoraFedora 36 glances-3.3.0.1 moderate update addresses ReDoS Vulnerability
Update to 3.3.0.1 and CVE-2022-25844. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-e016e6f445 2022-10-28 11:14:58.467234 --------------------------------------------------------------------------------Name : glances Product : Fedora 36 Version : 3.3.0.1 Release : 2.fc36 URL : https://nicolargo.github.io/glances/ Summary : A cross-platform curses-based monitoring tool Description : Glances is a cross-platform monitoring tool which aims to present a large amount of monitoring information through a curses or Web based interface. The information dynamically adapts depending on the size of the user interface It can also work in client/server mode. Remote monitoring could be done via terminal, Web interface or API (XML-RPC and RESTful). Stats can also be exported to files or external time/value databases. Glances is written in Python and uses libraries to grab information from your system. It is based on an open architecture where developers can add new plugins or exports modules. --------------------------------------------------------------------------------Update Information: Update to 3.3.0.1 and CVE-2022-25844 --------------------------------------------------------------------------------ChangeLog: * Thu Oct 20 2022 aekoroglu 3.3.0.1-2 - Rebuilt for ppc64le * Thu Oct 20 2022 aekoroglu 3.3.0.1-1 - Update to 3.3.0.1 and CVE-2022-25844 (#2082542) * Tue Aug 2 2022 aekoroglu 3.2.7-1 - update to 3.2.7 * Thu Jul 21 2022 Fedora Release Engineering 3.2.6.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #2082542 - CVE-2022-25844 glances: angular: Regular Expression Denial of Service (ReDoS) in angular [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2082542 [ 2 ] Bug #2135228 - glances-3.3.0.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2135228 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-e016e6f445' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Oct 28, 2022
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!