Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
87

Debian Jessie DSA-3849-1 Critical: kde4libs Access Threats

Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems: . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3849-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso May 12, 2017 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : kde4libs CVE ID : CVE-2017-6410 CVE-2017-8422 Debian Bug : 856890 Several vulnerabilities were discovered in kde4libs, the core libraries for all KDE 4 applications. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2017-6410 Itzik Kotler, Yonatan Fridburg and Amit Klein of Safebreach Labs reported that URLs are not sanitized before passing them to FindProxyForURL, potentially allowing a remote attacker to obtain sensitive information via a crafted PAC file. CVE-2017-8422 Sebastian Krahmer from SUSE discovered that the KAuth framework contains a logic flaw in which the service invoking dbus is not properly checked. This flaw allows spoofing the identity of the caller and gaining root privileges from an unprivileged account. For the stable distribution (jessie), these problems have been fixed in version 4:4.14.2-5+deb8u2. For the unstable distribution (sid), these problems have been fixed in version 4:4.14.26-2. We recommend that you upgrade your kde4libs packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu Security Notice USN-4567-1 highlights vulnerabilities in libexample affecting data integrity and unauthorized access. Find out more.. Kde4libs, DebianSecurity Advisory, Remote Access Risk, Identity Spoofing, Security Update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 12, 2017 Critical Debian
172

Ubuntu 883-2 Moderate: Network-Manager-Indicator Identity Threat Alert

It was discovered that NetworkManager did not ensure that the Certification Authority (CA) certificate file remained present when using WPA Enterprise or 802.1x networks. A remote attacker could use this flaw to spoof the identity of a wireless network and view sensitive information. (CVE-2009-4144) [More...]. ==========================================================Ubuntu Security Notice USN-883-1 January 13, 2010 network-manager-applet vulnerabilities CVE-2009-4144, CVE-2009-4145 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.10: network-manager-gnome 0.7~~svn20081020t000444-0ubuntu1.8.10.3 Ubuntu 9.04: network-manager-gnome 0.7.1~rc4.1-0ubuntu2.1 After a standard system upgrade you need to restart your session to effect the necessary changes. Details follow: It was discovered that NetworkManager did not ensure that the Certification Authority (CA) certificate file remained present when using WPA Enterprise or 802.1x networks. A remote attacker could use this flaw to spoof the identity of a wireless network and view sensitive information. (CVE-2009-4144) It was discovered that the connection editor GUI would incorrectly export objects over D-Bus. A local user could read D-Bus signals to view other users' network connection passwords and pre-shared keys. (CVE-2009-4145) Updated packages for Ubuntu 8.10: Source archives: Size/MD5: 52472 b82ebcb1945e432b7141c51500cf54d0 Size/MD5: 1745 682f49446d481b1c47a9191a7e8863d0 Size/MD5: 668729 af829714605058afb3cf77c5d419ae83 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 314590 93926fe52218799bb9582a9937625ebc i386architecture (x86 compatible Intel/AMD): Size/MD5: 300692 e8130472fa267cd98d5696a660f7121b lpia architecture (Low Power Intel Architecture): Size/MD5: 299180 9b9c2a8e5577ede2474873c864dfb620 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 310850 051260d8bf82146f1533e10ec842db46 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 303226 0fcfffc3b7948a93d8c20a22a867b34e Updated packages for Ubuntu 9.04: Source archives: Size/MD5: 39587 f761e8d9cbe68d5ff1a1ef1f373d0855 Size/MD5: 1621 83c06ab153587c3d3ece6ec8d27e8fa6 Size/MD5: 812190 85177fb4f930e731187ad1f811f07888 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 381524 c8a4ece54773441228662a1d8f0b78c0 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 365622 13d6469d61d2323a6813e2ef763eccb2 lpia architecture (Low Power Intel Architecture): Size/MD5: 362318 17f179f208b66b13320543e806f7aaed powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 375036 32034d9e9af5d92a8a8174a2684f1ce2 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 368592 95d9b33243243701ecf97145d473043e . A security advisory detailing network-manager-applet flaws and their impact on wireless networks. Discover crucial updates here.. Network Manager Vulnerabilities, Ubuntu Security Notice, Wireless Security Issues, CA Certificate Threats. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 13, 2010 Important Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here