Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98

Red Hat: RHSA-2011:1165-01 Critical: Thunderbird HTML/JS Issues

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Critical: thunderbird security update Advisory ID: RHSA-2011:1165-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:1165.html Issue date: 2011-08-16 CVE Names: CVE-2011-2982 CVE-2011-2983 ==================================================================== 1. Summary: An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: RHEL Optional Productivity Applications (v. 5 server) - i386, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2011-2982) A flaw was found in the way Thunderbird handled malformed JavaScript. Malicious content could cause Thunderbird to access already freed memory, causing Thunderbird to crash or, potentially, execute arbitrary code with theprivileges of the user running Thunderbird. (CVE-2011-2983) Note: This update disables support for Scalable Vector Graphics (SVG) images in Thunderbird on Red Hat Enterprise Linux 5. All Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 730518 - CVE-2011-2982 Mozilla: Miscellaneous memory safety hazards 730523 - CVE-2011-2983 Mozilla: Private data leakage using RegExp.input 6. Package List: Red Hat Enterprise Linux AS version 4: Source: i386: thunderbird-1.5.0.12-40.el4.i386.rpm thunderbird-debuginfo-1.5.0.12-40.el4.i386.rpm ia64: thunderbird-1.5.0.12-40.el4.ia64.rpm thunderbird-debuginfo-1.5.0.12-40.el4.ia64.rpm ppc: thunderbird-1.5.0.12-40.el4.ppc.rpm thunderbird-debuginfo-1.5.0.12-40.el4.ppc.rpm s390: thunderbird-1.5.0.12-40.el4.s390.rpm thunderbird-debuginfo-1.5.0.12-40.el4.s390.rpm s390x: thunderbird-1.5.0.12-40.el4.s390x.rpm thunderbird-debuginfo-1.5.0.12-40.el4.s390x.rpm x86_64: thunderbird-1.5.0.12-40.el4.x86_64.rpm thunderbird-debuginfo-1.5.0.12-40.el4.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: Source: i386: thunderbird-1.5.0.12-40.el4.i386.rpm thunderbird-debuginfo-1.5.0.12-40.el4.i386.rpm x86_64: thunderbird-1.5.0.12-40.el4.x86_64.rpm thunderbird-debuginfo-1.5.0.12-40.el4.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: thunderbird-1.5.0.12-40.el4.i386.rpm thunderbird-debuginfo-1.5.0.12-40.el4.i386.rpm ia64: thunderbird-1.5.0.12-40.el4.ia64.rpm thunderbird-debuginfo-1.5.0.12-40.el4.ia64.rpm x86_64: thunderbird-1.5.0.12-40.el4.x86_64.rpm thunderbird-debuginfo-1.5.0.12-40.el4.x86_64.rpm RedHat Enterprise Linux WS version 4: Source: i386: thunderbird-1.5.0.12-40.el4.i386.rpm thunderbird-debuginfo-1.5.0.12-40.el4.i386.rpm ia64: thunderbird-1.5.0.12-40.el4.ia64.rpm thunderbird-debuginfo-1.5.0.12-40.el4.ia64.rpm x86_64: thunderbird-1.5.0.12-40.el4.x86_64.rpm thunderbird-debuginfo-1.5.0.12-40.el4.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: thunderbird-2.0.0.24-21.el5.i386.rpm thunderbird-debuginfo-2.0.0.24-21.el5.i386.rpm x86_64: thunderbird-2.0.0.24-21.el5.x86_64.rpm thunderbird-debuginfo-2.0.0.24-21.el5.x86_64.rpm RHEL Optional Productivity Applications (v. 5 server): Source: i386: thunderbird-2.0.0.24-21.el5.i386.rpm thunderbird-debuginfo-2.0.0.24-21.el5.i386.rpm x86_64: thunderbird-2.0.0.24-21.el5.x86_64.rpm thunderbird-debuginfo-2.0.0.24-21.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2011-2982 https://access.redhat.com/security/cve/CVE-2011-2983 https://access.redhat.com/security/updates/classification/#critical 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2011 Red Hat, Inc. . Update Thunderbird on Red Hat Linux versions 4 and 5 to rectify severe vulnerabilities related to HTML and JavaScript interpretation.. Red Hat Enterprise Linux, Thunderbird Security Update, Mozilla Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 16, 2011 Critical Red Hat
87

Debian: DSA-1562-1 Moderate: Iceape Arbitrary Code Execution

It was discovered that crashes in the Javascript engine of Iceape, an unbranded version of the Seamonkey internet suite could potentially lead to the execution of arbitrary code.. - ------------------------------------------------------------------------Debian Security Advisory DSA-1562-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Moritz Muehlenhoff April 28, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------Package : iceape Vulnerability : programming error Problem type : remote Debian-specific: no CVE Id(s) : CVE-2008-1380 It was discovered that crashes in the Javascript engine of Iceape, an unbranded version of the Seamonkey internet suite could potentially lead to the execution of arbitrary code. For the stable distribution (etch), this problem has been fixed in version 1.0.13~pre080323b-0etch3. For the unstable distribution (sid), this problem has been fixed in version 1.1.9-2. We recommend that you upgrade your iceape packages. Upgrade instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian 4.0 (stable) - -------------------Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 272290 65a6cc900463ab3324a42250ce39c10b Size/MD5 checksum: 42900009 f2a3c50d814f6e7015f779b10494fac8 Size/MD5 checksum: 1439 7e71d648dcc53a64aa9e8675c09021f8 Architecture independent packages: Size/MD5 checksum: 27638 9ea252e567314297df273d1d0565c081 Size/MD5 checksum: 27636 19e71b334df21b23b2f511830972a0d4 Size/MD5 checksum: 27682 7bfcf10a1034eefac22ae8657dee9bd2 Size/MD5 checksum: 27772 36a3464a2d8fd4fc3847039b82dd1f5f Size/MD5 checksum: 29034 a9f31dc27b4b17c63b783f07c3f8fd2c Size/MD5 checksum: 27650 6894ea2d406646086f60a29c1aba9cbe Size/MD5 checksum: 3928844 9a28456f31b2b5a06c6e69b175183ab9 Size/MD5 checksum: 28606 6e89267d545052a9b053c0b17b02d265 Size/MD5 checksum: 27676 fed0fa97fb88ec0c975c432003dffaea Size/MD5 checksum: 282388 f6e5876a2562123eb182f44a9d28c0f5 Size/MD5 checksum: 27644 97fd6c82d0386ed6f1ed8c2b45391634 Size/MD5 checksum: 27658 67afa911887af3df5a081d9bcaeb9e7b alpha architecture (DEC Alpha) Size/MD5 checksum: 2281694 6688ce20712749da04e7bc0e1f63b531 Size/MD5 checksum: 55052 d14150e730a8357b0e2ef81542eb604b Size/MD5 checksum: 60657374 ebc2656e676b129223a0d7b060205d32 Size/MD5 checksum: 12886440 aa35edb178dc8812275a005cb0449e7b Size/MD5 checksum: 627600 a7801c7ba516484aa2028c91646c2504 Size/MD5 checksum: 199118 44501f7751ab5a2b0e7cab912a132200 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 195524 d36d3e4cf9f7442bb550f5e8675b3036 Size/MD5 checksum: 614288 f1396dbd501a98b181cca52d5ba8e2a8 Size/MD5 checksum: 59660176 f90d321b0a4599135fe16f53338b362f Size/MD5 checksum: 2100064 c626d518a1becbf76a23aa064a3ee2eb Size/MD5 checksum: 11692364 6b191980ebc9d493f703b5fedc65081b Size/MD5 checksum: 53836 8695a98820343b899364083a40b03c1a arm architecture (ARM) Size/MD5 checksum: 58799260 c243477696e8ea19c4263d2656d97c0c Size/MD5 checksum: 586712 0c8a041b5a1d7d41263fa2c27575d607 Size/MD5 checksum: 1917016 7ceb3becd5be4a158bcd28151bd7ab51 Size/MD5 checksum: 47860 e65b19737b893676a310b8256e4b3b38 Size/MD5 checksum: 104261742d5f6458ed8aca7ee0f8c5ec643c9964 Size/MD5 checksum: 187162 a08b63a8fb7f448664b01e52f8de9ffb hppa architecture (HP PA RISC) Size/MD5 checksum: 12992154 d00f8b54c176ce496f4728c7198d004a Size/MD5 checksum: 2349904 356528663fc19599701944ee30afe6ff Size/MD5 checksum: 55244 3edf68481a15575131f426a569a171d4 Size/MD5 checksum: 198650 b7f9775322181a1fd944dd8b3b90681d Size/MD5 checksum: 60520216 cf8581572da5dedbbd3696ebbb793ba3 Size/MD5 checksum: 619710 ef8266cbebfdfdcf659999c8e67ecbaf i386 architecture (Intel ia32) Size/MD5 checksum: 190234 f3f876cbc5cf3efec5ceb50a2c23d8dd Size/MD5 checksum: 58741446 e2afabfab01c0a75295864916a20f0ca Size/MD5 checksum: 10481106 9f7420c8033d5783cbfdd40ec9dc91ff Size/MD5 checksum: 48872 226a49cb7be9ba105ed34ec974dd59c4 Size/MD5 checksum: 589458 3de29c0ae9e2a230ffbfcd5126822f4a Size/MD5 checksum: 1892130 05cccfec539b244127470556c51984e5 ia64 architecture (Intel ia64) Size/MD5 checksum: 662418 ae517af1ffb77c7b51235872f7d80312 Size/MD5 checksum: 15794624 93cc77d14a609e82d121e56cc2c27bfc Size/MD5 checksum: 2817276 41d813a7f813ac4f4b0f41a456cc02f7 Size/MD5 checksum: 62370 b097cd29fa93c5529673cb6b51dc9fad Size/MD5 checksum: 59920168 46992c61685020d55a2d3f5954f4c1dd Size/MD5 checksum: 205156 235d6ba67f58d4796d75375ee0c9d488 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 50344 34df46c921c10427bd2be8f81a588b67 Size/MD5 checksum: 1959720 6d82bdd9b96c072b4f693fe578c9366f Size/MD5 checksum: 599894 deea3ff0702f70c48628d34dc63c373b Size/MD5 checksum: 61515672 e493c5a6ac2fca145163c27dddfbeb44 Size/MD5 checksum: 191488 63738c541fadb3092eead2f3e5f1cd26 Size/MD5 checksum: 11157416 e39b38cad58bfca703d7d3a332a63d1b mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 191704 36ee86fdbd01a7d250ecb028bca5ad5b Size/MD5 checksum: 5986404465cb18ae21e9231db157d41b5d91f12c Size/MD5 checksum: 1942838 94c7f270fd6fdc8142d41b202df8eefd Size/MD5 checksum: 50204 3243edf82c2bcbd7784393cda8a2c1e6 Size/MD5 checksum: 10911166 7d75c7d1918658e1a6f6435780e0885d Size/MD5 checksum: 596506 62a92a8f8a703393df92d595250c5669 powerpc architecture (PowerPC) Size/MD5 checksum: 61652008 2891f06dc14d01571cd67c63391aabc2 Size/MD5 checksum: 596662 5a7f977f5e1ebb9e27d3f1faf969a573 Size/MD5 checksum: 2006874 aa7cf8f2b5bd5091b889185f55460a40 Size/MD5 checksum: 49666 0a376f9b57ed80972ba170533623fb7f Size/MD5 checksum: 192472 494082cc73ee91c15d8c102015e27357 Size/MD5 checksum: 11310932 7995d14bb7fb8ccc76c7b70e9ce93204 s390 architecture (IBM S/390) Size/MD5 checksum: 54436 685ac8c473a6d6f2f33d31c74a334238 Size/MD5 checksum: 2186280 5db2c2e519c5f8e76061ce6c48d851a3 Size/MD5 checksum: 60408272 b141b0de2b3e3e9cd2bef50b0a956050 Size/MD5 checksum: 12288534 1b3cd06388c789d7a977fe9b284b19ab Size/MD5 checksum: 197338 8981bee198dad3399e7e5bc293785537 Size/MD5 checksum: 612218 be67de61abb2e447a34c0eaf706498df sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 1896522 7212773ff30ee7f0c9c268738f022e46 Size/MD5 checksum: 190132 8731cfeb8d89d4006f5b53836f25f02b Size/MD5 checksum: 48478 d131f30545b3aa2ca2008e983ad4ef9f Size/MD5 checksum: 585808 352c0eb180728a70c5b805839b5a7e67 Size/MD5 checksum: 58543536 92de9dc46e407a7c23f95023ad3a4a91 Size/MD5 checksum: 10660224 c21e2625875cf929b9a01767c203c9cd These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . To mitigate risks associated with theexecution of arbitrary code stemming from javascript engine failures, please ensure all Iceape packages are thoroughly updated on your Debian systems.. Iceape Arbitrary Code Execution, Debian Software Update, Javascript Flaw. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Apr 28, 2008 Important Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here