Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
87

Debian: DSA-2381-1 Critical: Squid3 Invalid Pointer Daemon Crash

It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. . -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1 - -------------------------------------------------------------------------Debian Security Advisory DSA-2381-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Florian Weimer January 06, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------Package : squid3 Vulnerability : invalid memory deallocation Problem type : remote Debian-specific: no CVE ID : CVE-2011-4096 It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. The squid package and the version of squid3 shipped in lenny lack IPv6 support and are not affected by this issue. For the stable distribution (squeeze), this problem has been fixed in version 3.1.6-1.2+squeeze2. For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 3.1.18-1. We recommend that you upgrade your squid3 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Important notice for squid3 users on Debian pertaining to improper pointer management that results in potential service interruption. An update is strongly advised.. squid3 update, debian security advisory, invalid memory handling, networking issues. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 25, 2020 Critical Debian
200

Scientific Linux: Enhanced Boost Security Advisory Low Severity

Low: boost security and bug fix update. Date: Wed, 21 Mar 2012 16:24:56 -0500 Reply-To: This email address is being protected from spambots. You need JavaScript enabled to view it. Sender: Security Errata for Scientific Linux From: Patrick Riehecky Subject: Security ERRATA Low: boost on SL5.x i386/x86_64 Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. Synopsis: Low: boost security and bug fix update Issue Date: 2012-02-21 CVE Numbers: CVE-2008-0171 CVE-2008-0172 The boost packages provide free, peer-reviewed, portable C++ source libraries with emphasis on libraries which work well with the C++ Standard Library. Invalid pointer dereference flaws were found in the way the Boost regular expression library processed certain, invalid expressions. An attacker able to make an application using the Boost library process a specially-crafted regular expression could cause that application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2008-0171) NULL pointer dereference flaws were found in the way the Boost regular expression library processed certain, invalid expressions. An attacker able to make an application using the Boost library process a specially-crafted regular expression could cause that application to crash. (CVE-2008-0172) This update also fixes the following bugs: * Prior to this update, the construction of a regular expression object could fail when several regular expression objects were created simultaneously, such as in a multi-threaded program. With this update, the object variables have been moved from the shared memory to the stack. Now, the constructing function is thread safe. * Prior to this update, header files in several Boost libraries contained preprocessor directives that the GNU Compiler Collection (GCC) 4.4 could not handle. This update instead uses equivalent constructs that are standard C. All users of boost are advised to upgrade to these updated packages, which fix these issues. SL5: i386 boost-1.33.1-15.el5.i386.rpm boost-debuginfo-1.33.1-15.el5.i386.rpm boost-devel-1.33.1-15.el5.i386.rpm boost-doc-1.33.1-15.el5.i386.rpm x86_64 boost-1.33.1-15.el5.i386.rpm boost-1.33.1-15.el5.x86_64.rpm boost-debuginfo-1.33.1-15.el5.i386.rpm boost-debuginfo-1.33.1-15.el5.x86_64.rpm boost-devel-1.33.1-15.el5.i386.rpm boost-devel-1.33.1-15.el5.x86_64.rpm boost-doc-1.33.1-15.el5.x86_64.rpm - Scientific Linux Development Team . Enhancements in the Boost framework address minor vulnerabilities within Scientific Linux SL5.x. It is recommended to update for optimal security.. boost library update, scientific linux advisory, security improvements. . Severity: Low. LinuxSecurity.com Team

Calendar 2 Mar 21, 2012 Low Scientific Linux
98

Red Hat Enterprise Linux: RHSA-2009-1536-01 Moderate: Pidgin Crash

Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: pidgin security update Advisory ID: RHSA-2009:1536-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1536.html Issue date: 2009-10-29 CVE Names: CVE-2009-3615 ==================================================================== 1. Summary: Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 RHEL Optional Productivity Applications (v. 5 server) - i386, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for Communication in Realtime (OSCAR) protocol is used by the AOL ICQ and AIM instant messaging systems. An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol implementation processed lists of contacts. A remote attacker could send a specially-crafted contact list to a user running Pidgin, causing Pidgin to crash. (CVE-2009-3615) These packages upgrade Pidgin to version 2.6.3. Refer to the Pidgin release notes for a full list of changes:http://developer.pidgin.im/wiki/ChangeLog All Pidgin users should upgrade to these updated packages, which correct this issue. Pidgin must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 529357 - CVE-2009-3615 Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client 6. Package List: Red Hat Enterprise Linux AS version 4: Source: i386: finch-2.6.3-2.el4.i386.rpm finch-devel-2.6.3-2.el4.i386.rpm libpurple-2.6.3-2.el4.i386.rpm libpurple-devel-2.6.3-2.el4.i386.rpm libpurple-perl-2.6.3-2.el4.i386.rpm libpurple-tcl-2.6.3-2.el4.i386.rpm pidgin-2.6.3-2.el4.i386.rpm pidgin-debuginfo-2.6.3-2.el4.i386.rpm pidgin-devel-2.6.3-2.el4.i386.rpm pidgin-perl-2.6.3-2.el4.i386.rpm ia64: finch-2.6.3-2.el4.ia64.rpm finch-devel-2.6.3-2.el4.ia64.rpm libpurple-2.6.3-2.el4.ia64.rpm libpurple-devel-2.6.3-2.el4.ia64.rpm libpurple-perl-2.6.3-2.el4.ia64.rpm libpurple-tcl-2.6.3-2.el4.ia64.rpm pidgin-2.6.3-2.el4.ia64.rpm pidgin-debuginfo-2.6.3-2.el4.ia64.rpm pidgin-devel-2.6.3-2.el4.ia64.rpm pidgin-perl-2.6.3-2.el4.ia64.rpm ppc: finch-2.6.3-2.el4.ppc.rpm finch-devel-2.6.3-2.el4.ppc.rpm libpurple-2.6.3-2.el4.ppc.rpm libpurple-devel-2.6.3-2.el4.ppc.rpm libpurple-perl-2.6.3-2.el4.ppc.rpm libpurple-tcl-2.6.3-2.el4.ppc.rpm pidgin-2.6.3-2.el4.ppc.rpm pidgin-debuginfo-2.6.3-2.el4.ppc.rpm pidgin-devel-2.6.3-2.el4.ppc.rpm pidgin-perl-2.6.3-2.el4.ppc.rpm x86_64: finch-2.6.3-2.el4.x86_64.rpm finch-devel-2.6.3-2.el4.x86_64.rpm libpurple-2.6.3-2.el4.x86_64.rpm libpurple-devel-2.6.3-2.el4.x86_64.rpm libpurple-perl-2.6.3-2.el4.x86_64.rpm libpurple-tcl-2.6.3-2.el4.x86_64.rpm pidgin-2.6.3-2.el4.x86_64.rpm pidgin-debuginfo-2.6.3-2.el4.x86_64.rpm pidgin-devel-2.6.3-2.el4.x86_64.rpm pidgin-perl-2.6.3-2.el4.x86_64.rpm Red HatEnterprise Linux Desktop version 4: Source: i386: finch-2.6.3-2.el4.i386.rpm finch-devel-2.6.3-2.el4.i386.rpm libpurple-2.6.3-2.el4.i386.rpm libpurple-devel-2.6.3-2.el4.i386.rpm libpurple-perl-2.6.3-2.el4.i386.rpm libpurple-tcl-2.6.3-2.el4.i386.rpm pidgin-2.6.3-2.el4.i386.rpm pidgin-debuginfo-2.6.3-2.el4.i386.rpm pidgin-devel-2.6.3-2.el4.i386.rpm pidgin-perl-2.6.3-2.el4.i386.rpm x86_64: finch-2.6.3-2.el4.x86_64.rpm finch-devel-2.6.3-2.el4.x86_64.rpm libpurple-2.6.3-2.el4.x86_64.rpm libpurple-devel-2.6.3-2.el4.x86_64.rpm libpurple-perl-2.6.3-2.el4.x86_64.rpm libpurple-tcl-2.6.3-2.el4.x86_64.rpm pidgin-2.6.3-2.el4.x86_64.rpm pidgin-debuginfo-2.6.3-2.el4.x86_64.rpm pidgin-devel-2.6.3-2.el4.x86_64.rpm pidgin-perl-2.6.3-2.el4.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: finch-2.6.3-2.el4.i386.rpm finch-devel-2.6.3-2.el4.i386.rpm libpurple-2.6.3-2.el4.i386.rpm libpurple-devel-2.6.3-2.el4.i386.rpm libpurple-perl-2.6.3-2.el4.i386.rpm libpurple-tcl-2.6.3-2.el4.i386.rpm pidgin-2.6.3-2.el4.i386.rpm pidgin-debuginfo-2.6.3-2.el4.i386.rpm pidgin-devel-2.6.3-2.el4.i386.rpm pidgin-perl-2.6.3-2.el4.i386.rpm ia64: finch-2.6.3-2.el4.ia64.rpm finch-devel-2.6.3-2.el4.ia64.rpm libpurple-2.6.3-2.el4.ia64.rpm libpurple-devel-2.6.3-2.el4.ia64.rpm libpurple-perl-2.6.3-2.el4.ia64.rpm libpurple-tcl-2.6.3-2.el4.ia64.rpm pidgin-2.6.3-2.el4.ia64.rpm pidgin-debuginfo-2.6.3-2.el4.ia64.rpm pidgin-devel-2.6.3-2.el4.ia64.rpm pidgin-perl-2.6.3-2.el4.ia64.rpm x86_64: finch-2.6.3-2.el4.x86_64.rpm finch-devel-2.6.3-2.el4.x86_64.rpm libpurple-2.6.3-2.el4.x86_64.rpm libpurple-devel-2.6.3-2.el4.x86_64.rpm libpurple-perl-2.6.3-2.el4.x86_64.rpm libpurple-tcl-2.6.3-2.el4.x86_64.rpm pidgin-2.6.3-2.el4.x86_64.rpm pidgin-debuginfo-2.6.3-2.el4.x86_64.rpm pidgin-devel-2.6.3-2.el4.x86_64.rpm pidgin-perl-2.6.3-2.el4.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: finch-2.6.3-2.el4.i386.rpm finch-devel-2.6.3-2.el4.i386.rpm libpurple-2.6.3-2.el4.i386.rpm libpurple-devel-2.6.3-2.el4.i386.rpm libpurple-perl-2.6.3-2.el4.i386.rpm libpurple-tcl-2.6.3-2.el4.i386.rpm pidgin-2.6.3-2.el4.i386.rpm pidgin-debuginfo-2.6.3-2.el4.i386.rpm pidgin-devel-2.6.3-2.el4.i386.rpm pidgin-perl-2.6.3-2.el4.i386.rpm ia64: finch-2.6.3-2.el4.ia64.rpm finch-devel-2.6.3-2.el4.ia64.rpm libpurple-2.6.3-2.el4.ia64.rpm libpurple-devel-2.6.3-2.el4.ia64.rpm libpurple-perl-2.6.3-2.el4.ia64.rpm libpurple-tcl-2.6.3-2.el4.ia64.rpm pidgin-2.6.3-2.el4.ia64.rpm pidgin-debuginfo-2.6.3-2.el4.ia64.rpm pidgin-devel-2.6.3-2.el4.ia64.rpm pidgin-perl-2.6.3-2.el4.ia64.rpm x86_64: finch-2.6.3-2.el4.x86_64.rpm finch-devel-2.6.3-2.el4.x86_64.rpm libpurple-2.6.3-2.el4.x86_64.rpm libpurple-devel-2.6.3-2.el4.x86_64.rpm libpurple-perl-2.6.3-2.el4.x86_64.rpm libpurple-tcl-2.6.3-2.el4.x86_64.rpm pidgin-2.6.3-2.el4.x86_64.rpm pidgin-debuginfo-2.6.3-2.el4.x86_64.rpm pidgin-devel-2.6.3-2.el4.x86_64.rpm pidgin-perl-2.6.3-2.el4.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: finch-2.6.3-2.el5.i386.rpm libpurple-2.6.3-2.el5.i386.rpm libpurple-perl-2.6.3-2.el5.i386.rpm libpurple-tcl-2.6.3-2.el5.i386.rpm pidgin-2.6.3-2.el5.i386.rpm pidgin-debuginfo-2.6.3-2.el5.i386.rpm pidgin-perl-2.6.3-2.el5.i386.rpm x86_64: finch-2.6.3-2.el5.i386.rpm finch-2.6.3-2.el5.x86_64.rpm libpurple-2.6.3-2.el5.i386.rpm libpurple-2.6.3-2.el5.x86_64.rpm libpurple-perl-2.6.3-2.el5.x86_64.rpm libpurple-tcl-2.6.3-2.el5.x86_64.rpm pidgin-2.6.3-2.el5.i386.rpm pidgin-2.6.3-2.el5.x86_64.rpm pidgin-debuginfo-2.6.3-2.el5.i386.rpm pidgin-debuginfo-2.6.3-2.el5.x86_64.rpm pidgin-perl-2.6.3-2.el5.x86_64.rpm RHEL Desktop Workstation (v. 5client): Source: i386: finch-devel-2.6.3-2.el5.i386.rpm libpurple-devel-2.6.3-2.el5.i386.rpm pidgin-debuginfo-2.6.3-2.el5.i386.rpm pidgin-devel-2.6.3-2.el5.i386.rpm x86_64: finch-devel-2.6.3-2.el5.i386.rpm finch-devel-2.6.3-2.el5.x86_64.rpm libpurple-devel-2.6.3-2.el5.i386.rpm libpurple-devel-2.6.3-2.el5.x86_64.rpm pidgin-debuginfo-2.6.3-2.el5.i386.rpm pidgin-debuginfo-2.6.3-2.el5.x86_64.rpm pidgin-devel-2.6.3-2.el5.i386.rpm pidgin-devel-2.6.3-2.el5.x86_64.rpm RHEL Optional Productivity Applications (v. 5 server): Source: i386: finch-2.6.3-2.el5.i386.rpm finch-devel-2.6.3-2.el5.i386.rpm libpurple-2.6.3-2.el5.i386.rpm libpurple-devel-2.6.3-2.el5.i386.rpm libpurple-perl-2.6.3-2.el5.i386.rpm libpurple-tcl-2.6.3-2.el5.i386.rpm pidgin-2.6.3-2.el5.i386.rpm pidgin-debuginfo-2.6.3-2.el5.i386.rpm pidgin-devel-2.6.3-2.el5.i386.rpm pidgin-perl-2.6.3-2.el5.i386.rpm x86_64: finch-2.6.3-2.el5.i386.rpm finch-2.6.3-2.el5.x86_64.rpm finch-devel-2.6.3-2.el5.i386.rpm finch-devel-2.6.3-2.el5.x86_64.rpm libpurple-2.6.3-2.el5.i386.rpm libpurple-2.6.3-2.el5.x86_64.rpm libpurple-devel-2.6.3-2.el5.i386.rpm libpurple-devel-2.6.3-2.el5.x86_64.rpm libpurple-perl-2.6.3-2.el5.x86_64.rpm libpurple-tcl-2.6.3-2.el5.x86_64.rpm pidgin-2.6.3-2.el5.i386.rpm pidgin-2.6.3-2.el5.x86_64.rpm pidgin-debuginfo-2.6.3-2.el5.i386.rpm pidgin-debuginfo-2.6.3-2.el5.x86_64.rpm pidgin-devel-2.6.3-2.el5.i386.rpm pidgin-devel-2.6.3-2.el5.x86_64.rpm pidgin-perl-2.6.3-2.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2009-3615 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2009 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4(GNU/Linux) iD8DBQFK6allXlSAg2UNWIIRAkAKAJ9Nj5F13lc9+yi9UL9Wm/Dw4DAVpwCfVqQE 88xBuQhXhZRY0JOWOO5lBic=Lj/Y -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . An important patch has been released for Red Hat Enterprise Linux pidgin packages, addressing a failure caused by incorrect pointer usage.. Pidgin Security Update, Red Hat Enterprise 4/5, Software Crash. . LinuxSecurity.com Team

Calendar 2 Oct 29, 2009 Red Hat
200

Scientific Linux: unzip Security Update CVE-2008-0888 Moderate Risk

Moderate: unzip security update. Date: Tue, 18 Mar 2008 16:35:29 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for unzip on SL3.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Moderate: unzip security update Issue date: 2008-03-18 CVE Names: CVE-2008-0888 An invalid pointer flaw was found in unzip. If a user ran unzip on a specially crafted file, an attacker could execute arbitrary code with that user's privileges. (CVE-2008-0888) SL 3.0.x SRPMS: unzip-5.50-36.EL3.src.rpm i386: unzip-5.50-36.EL3.i386.rpm x86_64: unzip-5.50-36.EL3.x86_64.rpm -Connie Sieh -Troy Dawson . A minor patch for zip extraction tools addresses a faulty pointer issue that could enable remote code execution.. Scientific Linux Security, unzip Update, Moderate Security Advisory. . LinuxSecurity.com Team

Calendar 2 Mar 18, 2008 Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here