Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
203
security advisorymoderatesecurity updateMageia 8: 2021-0586 Moderate: openssh vulnerabilities addressed
Multiple security issues affecting ldb, samba and sssd. See references for details. References: - https://bugs.mageia.org/show_bug.cgi?id=29641 . MGASA-2021-0585 - Updated samba packages fix security vulnerability Publication date: 26 Dec 2021 URL: https://advisories.mageia.org/MGASA-2021-0585.html Type: security Affected Mageia releases: 8 CVE: CVE-2016-2124, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25721, CVE-2020-25722, CVE-2021-3738, CVE-2021-23192 Multiple security issues affecting ldb, samba and sssd. See references for details. References: - https://bugs.mageia.org/show_bug.cgi?id=29641 - https://lists.debian.org/debian-security-announce/2021/msg00188.html - https://ubuntu.com/security/notices/USN-5142-1 - https://lists.suse.com/pipermail/sle-security-updates/2021-November/009716.html - - https://lists.suse.com/pipermail/sle-security-updates/2021-November/009724.html - - https://lists.fedoraproject.org/archives/list/
Dec 25, 2021
Mageia
202
security advisorymoderatesecurity updateopenSUSE Leap 15.3: 2021:1994-1 Moderate: PostgreSQL12 Security Update
An update that solves three vulnerabilities and has three fixes is now available. . openSUSE Security Update: Security update for postgresql12 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:1994-1 Rating: moderate References: #1179945 #1183118 #1183168 #1185924 #1185925 #1185926 Cross-References: CVE-2021-32027 CVE-2021-32028 CVE-2021-32029 CVSS scores: CVE-2021-32027 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2021-32027 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVE-2021-32028 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2021-32029 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has three fixes is now available. Description: This update for postgresql12 fixes the following issues: Upgrade to version 12.7: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations (bsc#1185924). - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists (bsc#1185925). - CVE-2021-32029: Fixed possibly-incorrect computation of UPDATE ... RETURNING outputs for joined cross-partition updates (bsc#1185926). - Don't use %_stop_on_removal, because it was meant to be private and got removed from openSUSE. %_restart_on_update is also private, but still supported and needed for now (bsc#1183168). - Re-enable build of the llvmjit subpackage on SLE, but it will only be delivered on PackageHub for now (bsc#1183118). - Disable icu for PostgreSQL 10 (and older) on TW (bsc#1179945). Patch Instructions: To install this openSUSE Security Update use the SUSErecommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-1994=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): postgresql12-12.7-8.20.1 postgresql12-contrib-12.7-8.20.1 postgresql12-contrib-debuginfo-12.7-8.20.1 postgresql12-debuginfo-12.7-8.20.1 postgresql12-debugsource-12.7-8.20.1 postgresql12-devel-12.7-8.20.1 postgresql12-devel-debuginfo-12.7-8.20.1 postgresql12-llvmjit-12.7-8.20.1 postgresql12-llvmjit-debuginfo-12.7-8.20.1 postgresql12-plperl-12.7-8.20.1 postgresql12-plperl-debuginfo-12.7-8.20.1 postgresql12-plpython-12.7-8.20.1 postgresql12-plpython-debuginfo-12.7-8.20.1 postgresql12-pltcl-12.7-8.20.1 postgresql12-pltcl-debuginfo-12.7-8.20.1 postgresql12-server-12.7-8.20.1 postgresql12-server-debuginfo-12.7-8.20.1 postgresql12-server-devel-12.7-8.20.1 postgresql12-server-devel-debuginfo-12.7-8.20.1 postgresql12-test-12.7-8.20.1 - openSUSE Leap 15.3 (noarch): postgresql12-docs-12.7-8.20.1 References: https://www.suse.com/security/cve/CVE-2021-32027.html https://www.suse.com/security/cve/CVE-2021-32028.html https://www.suse.com/security/cve/CVE-2021-32029.html https://bugzilla.suse.com/1179945 https://bugzilla.suse.com/1183118 https://bugzilla.suse.com/1183168 https://bugzilla.suse.com/1185924 https://bugzilla.suse.com/1185925 https://bugzilla.suse.com/1185926 . A critical announcement regarding openSUSE Leap 15.3 resolves concerns in postgresql12, delivering vital improvements in security.. Postgresql Update, OpenSUSE Security, Threat Management, Software Patches. . LinuxSecurity.com Team
Jul 10, 2021
OpenSUSE
100
security advisorymoderate severitycurl updateSUSE: 2018:3624-1 Moderate: Curl Update for Three Issues
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:3624-1 Rating: moderate References: #1112758 #1113660 Cross-References: CVE-2018-16839 CVE-2018-16840 CVE-2018-16842 Affected Products: SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for curl fixes the following issues: - CVE-2018-16839: A SASL password overflow via integer overflow was fixed which could lead to crashes (bsc#1112758) - CVE-2018-16840: A use-after-free in SASL handle close was fixed which could lead to crashes (bsc#1112758) - CVE-2018-16842: A Out-of-bounds Read in tool_msgs.c was fixed which could lead to crashes (bsc#1113660) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2018-2578=1 - SUSE Linux Enterprise Module for Basesystem 15: zypper in -t patch SUSE-SLE-Module-Basesystem-15-2018-2578=1 Package List: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (aarch64 ppc64le s390x x86_64): curl-mini-7.60.0-3.14.2 curl-mini-debuginfo-7.60.0-3.14.2 curl-mini-debugsource-7.60.0-3.14.2 libcurl-mini-devel-7.60.0-3.14.2 libcurl4-mini-7.60.0-3.14.2 libcurl4-mini-debuginfo-7.60.0-3.14.2 - SUSE Linux Enterprise Module for Basesystem 15(aarch64 ppc64le s390x x86_64): curl-7.60.0-3.14.3 curl-debuginfo-7.60.0-3.14.3 curl-debugsource-7.60.0-3.14.3 libcurl-devel-7.60.0-3.14.3 libcurl4-7.60.0-3.14.3 libcurl4-debuginfo-7.60.0-3.14.3 - SUSE Linux Enterprise Module for Basesystem 15 (x86_64): libcurl4-32bit-7.60.0-3.14.3 libcurl4-32bit-debuginfo-7.60.0-3.14.3 References: https://www.suse.com/security/cve/CVE-2018-16839.html https://www.suse.com/security/cve/CVE-2018-16840.html https://www.suse.com/security/cve/CVE-2018-16842.html https://bugzilla.suse.com/1112758 https://bugzilla.suse.com/1113660 _______________________________________________ sle-security-updates mailing list
Nov 05, 2018
SuSE
202
security advisoryupdatesoftware patchopenSUSE: 2014:1130-1 Important: Flash Player Security Update
An update that fixes 12 vulnerabilities is now available. An update that fixes 12 vulnerabilities is now available. An update that fixes 12 vulnerabilities is now available.. openSUSE Security Update: update flash-player to 11.2.202.40 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2014:1130-1 Rating: important References: #895856 Cross-References: CVE-2014-0547 CVE-2014-0548 CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 CVE-2014-0552 CVE-2014-0553 CVE-2014-0554 CVE-2014-0555 CVE-2014-0556 CVE-2014-0557 CVE-2014-0559 Affected Products: openSUSE 11.4 ______________________________________________________________________________ An update that fixes 12 vulnerabilities is now available. Description: Adobe Flash Player was updated to 11.2.202.406 (bnc#895856): * APSB14-21, CVE-2014-0547, CVE-2014-0548, CVE-2014-0549, CVE-2014-0550, CVE-2014-0551, CVE-2014-0552, CVE-2014-0553, CVE-2014-0554, CVE-2014-0555, CVE-2014-0556, CVE-2014-0557, CVE-2014-0559 More information can be found on: Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 11.4: zypper in -t patch 2014-83 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 11.4 (i586 x86_64): flash-player-11.2.202.406-127.1 flash-player-gnome-11.2.202.406-127.1 flash-player-kde4-11.2.202.406-127.1 References: https://www.suse.com/security/cve/CVE-2014-0547.html https://www.suse.com/security/cve/CVE-2014-0548.html https://www.suse.com/security/cve/CVE-2014-0549.html https://www.suse.com/security/cve/CVE-2014-0550.html https://www.suse.com/security/cve/CVE-2014-0551.html https://www.suse.com/security/cve/CVE-2014-0552.html https://www.suse.com/security/cve/CVE-2014-0553.html https://www.suse.com/security/cve/CVE-2014-0554.html https://www.suse.com/security/cve/CVE-2014-0555.html https://www.suse.com/security/cve/CVE-2014-0556.html https://www.suse.com/security/cve/CVE-2014-0557.html https://www.suse.com/security/cve/CVE-2014-0559.html . Enhance your environment by upgrading Java to version 8.301.12, which resolves several bugs and enhances overall stability for a better experience. OpenSUSE Flash Player, Software Update, Important Security Patch. . Severity: Important. LinuxSecurity.com Team
Sep 16, 2014
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!