Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
217
security advisorysecurity issuesoftware updateOracle Linux 7 ELSA-2022-5053 Important: xz Security Update
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-5052 https://linux.oracle.com/errata/ELSA-2022-5052.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: xz-5.2.2-2.el7_9.x86_64.rpm xz-compat-libs-5.2.2-2.el7_9.i686.rpm xz-compat-libs-5.2.2-2.el7_9.x86_64.rpm xz-devel-5.2.2-2.el7_9.i686.rpm xz-devel-5.2.2-2.el7_9.x86_64.rpm xz-libs-5.2.2-2.el7_9.i686.rpm xz-libs-5.2.2-2.el7_9.x86_64.rpm xz-lzma-compat-5.2.2-2.el7_9.x86_64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/xz-5.2.2-2.el7_9.src.rpm Related CVEs: CVE-2022-1271 Description of changes: [5.2.2-2] - Fix CVE-2022-1271 Resolves: CVE-2022-1271 _______________________________________________ El-errata mailing list
Jun 17, 2022
•Important
Oracle
98
security advisorysecurity updatebug fixRed Hat Enterprise Linux 8 RHSA-2021-4750 Important: Host Security Update
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.9] 0-day Advisory ID: RHSA-2021:4750-01 Product: Red Hat Virtualization Advisory URL: https://access.redhat.com/errata/RHSA-2021:4750 Issue date: 2021-11-19 CVE Names: CVE-2020-16135 CVE-2021-0512 CVE-2021-3620 CVE-2021-43267 ==================================================================== 1. Summary: An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: RHEL 8-based RHEV-H for RHEV 4 (build requirements) - noarch, x86_64 Red Hat Virtualization 4 Hypervisor for RHEL 8 - x86_64 3. Description: The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. Security Fix(es): * kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() ofhid-input.c (CVE-2021-0512) * Ansible: ansible-connection module discloses sensitive info in traceback error message (CVE-2021-3620) * kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type (CVE-2021-43267) * libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL (CVE-2020-16135) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Red Hat Virtualization Host now includes packages from Red Hat Enterprise Linux 8.5. (BZ#1958101) * Red Hat Virtualization Host now includes packages from RHGS-3.5.z on RHEL-8 Batch #5. (BZ#1975175) * Red Hat Virtualization Host now includes the packages needed for using Managed Block Devices via cinderlib. (BZ#1983021) * Red Hat Virtualization Host now includes openvswitch related packages from Fast Data Path 21.G release. (BZ#1998104) * Previously it was not possible to upgrade RHVH to version 4.4.8 when custom VDSM hooks were installed on RHVH. This was caused by the VDSM hooks dependency on the concrete version of VDSM. The current release allows users to maintain the VDSM dependency manually. In other words, if you want to upgrade from VDSM X.Y.Z to version A.B.C, you must upgrade all VDSM hooks to the same A.B.C version. (BZ#2004469) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891 5. Bugs fixed (https://bugzilla.redhat.com/): 1862456 - CVE-2020-16135 libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL 1953685 - The RHVH iso should not always remove the /root/anaconda-ks.cfg file. 1958101 - Rebase RHV-H 4.4.9 on RHEL 8.5 1974491 - CVE-2021-0512 kernel: out-of-bounds write due to a heap buffer overflow in __hidinput_change_resolution_multipliers() of hid-input.c 1975175 - Rebase RHV-H 4.4.9 on RHGS-3.5.z on RHEL-8 Batch #5 1975767 -CVE-2021-3620 Ansible: ansible-connection module discloses sensitive info in traceback error message 1983021 - [cinderlib] Provide cinderlib prerequisites in RHV-H 1998104 - Rebase RHV-H on FDP 21.G 2004469 - [RHV 4.4.8] Unable to upgrade RHVH if vdsm-hook-ethtool-options is installed 2020362 - CVE-2021-43267 kernel: Insufficient validation of user-supplied sizes for the MSG_CRYPTO message type 2024360 - RHV-H sssd-proxy installation fails due to higher versioned packages of sssd-* in repository then RHV 4.4.8 uses. 6. Package List: Red Hat Virtualization 4 Hypervisor for RHEL 8: Source: redhat-virtualization-host-4.4.9-202111172338_8.5.src.rpm x86_64: redhat-virtualization-host-image-update-4.4.9-202111172338_8.5.x86_64.rpm RHEL 8-based RHEV-H for RHEV 4 (build requirements): Source: redhat-release-virtualization-host-4.4.9-2.el8ev.src.rpm noarch: redhat-virtualization-host-image-update-placeholder-4.4.9-2.el8ev.noarch.rpm x86_64: redhat-release-virtualization-host-4.4.9-2.el8ev.x86_64.rpm redhat-release-virtualization-host-content-4.4.9-2.el8ev.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2020-16135 https://access.redhat.com/security/cve/CVE-2021-0512 https://access.redhat.com/security/cve/CVE-2021-3620 https://access.redhat.com/security/cve/CVE-2021-43267 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYZgL4tzjgjWX9erEAQjsNBAAiRBRvYPe7W4Qj9qffoUigCm0ZC2whb9y mY5AsAf0Q/2x6qR1LHHiIeK21U6Ob380C4+h7VkTUo/76fhthQAAZRaYeJ821SnK R1DRnUK5QxuridK7dUdcW8iRhq3q87KnPhK0WNsgMdevQB2O+xEK+qCUl3HgyGdy 6ikmyE/cCCk+FPdaRUSQgskCBv8OY2ton5e/VTby2VkxtRS40mCeg73wWkVVO64k vKStoUBdypyD9sZ7RlagCDLzK6fNGlHH5gom5Y9UsmfhXWtaIvLfkKGFryJfHOAe SrhpA48Kjs6UGJ95ravF5V8SpSGCzhEbl/vlFJJoceOhzGV8Wwa/cPWmLQJsaWoJ /Eg17zAy0YIDQcKIfhg86n3nesZuHNlfi8qylULv7NgfI/OnQKD8Q3qCMdU+dVtF l2M+P8nxDadSKyYTjmzAv64XISOWJAEGDGcPNZ0yRAxSPwPHaoArM8xjFNv9yQbw sNGMMxFqHlNt3ZmIhN0GkXzP43oXCM3cXEVAnqkCaHD0XFTYfHg2JRQOI0xKNh/y MYLtoJF/q3P5qL72RciKZMPkg3zUTmA0wMbUVcWdOKs21CIbEGwOuW/ZPK+4Ot9H 3NkZsbUz6IAPk0KXQB3+ApbIw4fvR2w+ADvBXWOapCR1uLiT6MYQqshAPNRvCOJY CJaoIac5aII=VWWF -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 19, 2021
•Important
Red Hat
100
security advisorycriticalimportantSUSE: 2012:1203-2 Important: QEMU VT100 Emulation Security Issue
An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.. SUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1203-2 Rating: important References: #777084 Cross-References: CVE-2012-3515 Affected Products: SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: The qemu vt100 emulation was affected by a problem where specific vt100 sequences could have been used by guest users to affect the host. (CVE-2012-3515 aka XSA-17). This has been fixed. Security Issue reference: * CVE-2012-3515 Package List: - SLE SDK 10 SP4 (i586 ia64 x86_64): qemu-0.8.2-37.14.1 References: https://www.suse.com/security/cve/CVE-2012-3515.html . Important SUSE patch for qemu resolves host vulnerability arising from vt100 emulation defect, guarantees operational reliability.. SUSE Update,qemu Security,SLE SDK 10 SP4,SUSE Important Update,hacking prevention. . Severity: Important. LinuxSecurity.com Team
Oct 25, 2012
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!