Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
217

Oracle Linux 8 ELSA-2024-0769 Important: Libxml2 Security Fix

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-0768 https://linux.oracle.com/errata/ELSA-2024-0768.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: libmaxminddb-1.2.0-10.el8_9.1.i686.rpm libmaxminddb-1.2.0-10.el8_9.1.x86_64.rpm libmaxminddb-devel-1.2.0-10.el8_9.1.i686.rpm libmaxminddb-devel-1.2.0-10.el8_9.1.x86_64.rpm aarch64: libmaxminddb-1.2.0-10.el8_9.1.aarch64.rpm libmaxminddb-devel-1.2.0-10.el8_9.1.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates//libmaxminddb-1.2.0-10.el8_9.1.src.rpm Related CVEs: CVE-2020-28241 Description of changes: [1.2.0-10.1] - Resolves: RHEL-20594 - improper initialization in dump_entry_data_list() in maxminddb.c _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Security Update ELSA-2024-0768: Critical libmaxminddb security enhancement ready for Oracle Linux 8.. Oracle Linux 8, libmaxminddb update, moderate security patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 13, 2024 Important Oracle
89

Fedora 33: FEDORA-2020-8a8f8b244f Critical Issue with libmaxminddb Init

New version 1.4.3. Security fix for CVE-2020-28241.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-8a8f8b244f 2020-12-26 01:36:12.488305 --------------------------------------------------------------------------------Name : libmaxminddb Product : Fedora 33 Version : 1.4.3 Release : 1.fc33 URL : https://maxmind.github.io/libmaxminddb/ Summary : C library for the MaxMind DB file format Description : The package contains libmaxminddb library. --------------------------------------------------------------------------------Update Information: New version 1.4.3. Security fix for CVE-2020-28241. --------------------------------------------------------------------------------ChangeLog: * Thu Dec 10 2020 Michal Ruprich - 1.4.3-1 - Update to 1.4.3 - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64 - Fix for CVE-2020-28241 --------------------------------------------------------------------------------References: [ 1 ] Bug #1895379 - CVE-2020-28241 libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c https://bugzilla.redhat.com/show_bug.cgi?id=1895379 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-8a8f8b244f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora 33 has been updated with a crucial security patch for libmaxminddb that resolves problems related to improper initialization.. Fedora Update, Libmaxminddb, Security Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Dec 25, 2020 Critical Fedora
89

Fedora 32 Update: FEDORA-2020-1fb1785fa1 High Severity Security Fix

New version 1.4.3. Security fix for CVE-2020-28241.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-1fb1785fa1 2020-12-26 01:18:31.225513 --------------------------------------------------------------------------------Name : libmaxminddb Product : Fedora 32 Version : 1.4.3 Release : 1.fc32 URL : https://maxmind.github.io/libmaxminddb/ Summary : C library for the MaxMind DB file format Description : The package contains libmaxminddb library. --------------------------------------------------------------------------------Update Information: New version 1.4.3. Security fix for CVE-2020-28241. --------------------------------------------------------------------------------ChangeLog: * Thu Dec 10 2020 Michal Ruprich - 1.4.3-1 - Update to 1.4.3 - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64 - Fix for CVE-2020-28241 --------------------------------------------------------------------------------References: [ 1 ] Bug #1895379 - CVE-2020-28241 libmaxminddb: improper initialization in dump_entry_data_list() in maxminddb.c https://bugzilla.redhat.com/show_bug.cgi?id=1895379 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-1fb1785fa1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Explore the Fedora 32 enhancement for libmaxminddb, featuring crucial security updates that tackle CVE-2020-28241 effectively.. Fedora Security, Libmaxminddb Update, Software Fix. . LinuxSecurity.com Team

Calendar%202 Dec 25, 2020 Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":16.67,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":50,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":33.33,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200