Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -2 articles for you...
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorysecurity updatemoderate severity

SciLinux: SLSA-2019:2047-1 Moderate: libcgroup Insecure Log Permissions

libcgroup: cgrulesengd creates log files with insecure permissions (CVE-2018-14348) SL7 x86_64 libcgroup-0.41-21.el7.i686.rpm libcgroup-tools-0.41-21.el7.x86_64.rpm libcgroup-0.41-21.el7.x86_64.rpm libcgroup-devel-0.41-21.el7.i686.rpm libcgroup-pam-0.41-21.el7.x86_64.rpm libcgroup-devel-0.41-21.el7.x86_64.rpm libcgroup-pam-0.41-21.el7.i686.rpm libcgroup-debug [More...]. Synopsis: Moderate: libcgroup security update Advisory ID: SLSA-2019:2047-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-14348 -- Security Fix(es): * libcgroup: cgrulesengd creates log files with insecure permissions (CVE-2018-14348) -- SL7 x86_64 libcgroup-0.41-21.el7.i686.rpm libcgroup-tools-0.41-21.el7.x86_64.rpm libcgroup-0.41-21.el7.x86_64.rpm libcgroup-devel-0.41-21.el7.i686.rpm libcgroup-pam-0.41-21.el7.x86_64.rpm libcgroup-devel-0.41-21.el7.x86_64.rpm libcgroup-pam-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm - Scientific Linux Development Team . Significant libcgroup patch SLSA-2019:2047-1 for SL7, rectifying unsafe logging settings. Review essential update information.. libcgroup, log permissions, security update, SL7, cgrulesengd. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 26, 2019 •Important Scientific Linux
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderatered hat

RedHat: RHSA-2019-2047-01 Moderate: Libcgroup Security Issue

An update for libcgroup is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: libcgroup security update Advisory ID: RHSA-2019:2047-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2047 Issue date: 2019-08-06 CVE Names: CVE-2018-14348 ==================================================================== 1. Summary: An update for libcgroup is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The libcgroup packages provide tools and libraries to control and monitor control groups. Security Fix(es): * libcgroup: cgrulesengd creates log files with insecure permissions (CVE-2018-14348) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to theCVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1611119 - CVE-2018-14348 libcgroup: cgrulesengd creates log files with insecure permissions 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: libcgroup-0.41-21.el7.src.rpm x86_64: libcgroup-0.41-21.el7.i686.rpm libcgroup-0.41-21.el7.x86_64.rpm libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm libcgroup-tools-0.41-21.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm libcgroup-devel-0.41-21.el7.i686.rpm libcgroup-devel-0.41-21.el7.x86_64.rpm libcgroup-pam-0.41-21.el7.i686.rpm libcgroup-pam-0.41-21.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: libcgroup-0.41-21.el7.src.rpm x86_64: libcgroup-0.41-21.el7.i686.rpm libcgroup-0.41-21.el7.x86_64.rpm libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm libcgroup-tools-0.41-21.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): x86_64: libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm libcgroup-devel-0.41-21.el7.i686.rpm libcgroup-devel-0.41-21.el7.x86_64.rpm libcgroup-pam-0.41-21.el7.i686.rpm libcgroup-pam-0.41-21.el7.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: libcgroup-0.41-21.el7.src.rpm ppc64: libcgroup-0.41-21.el7.ppc.rpm libcgroup-0.41-21.el7.ppc64.rpm libcgroup-debuginfo-0.41-21.el7.ppc.rpm libcgroup-debuginfo-0.41-21.el7.ppc64.rpm libcgroup-tools-0.41-21.el7.ppc64.rpm ppc64le: libcgroup-0.41-21.el7.ppc64le.rpm libcgroup-debuginfo-0.41-21.el7.ppc64le.rpm libcgroup-tools-0.41-21.el7.ppc64le.rpm s390x: libcgroup-0.41-21.el7.s390.rpm libcgroup-0.41-21.el7.s390x.rpm libcgroup-debuginfo-0.41-21.el7.s390.rpm libcgroup-debuginfo-0.41-21.el7.s390x.rpm libcgroup-tools-0.41-21.el7.s390x.rpm x86_64: libcgroup-0.41-21.el7.i686.rpm libcgroup-0.41-21.el7.x86_64.rpm libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm libcgroup-tools-0.41-21.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: libcgroup-debuginfo-0.41-21.el7.ppc.rpm libcgroup-debuginfo-0.41-21.el7.ppc64.rpm libcgroup-devel-0.41-21.el7.ppc.rpm libcgroup-devel-0.41-21.el7.ppc64.rpm libcgroup-pam-0.41-21.el7.ppc.rpm libcgroup-pam-0.41-21.el7.ppc64.rpm ppc64le: libcgroup-debuginfo-0.41-21.el7.ppc64le.rpm libcgroup-devel-0.41-21.el7.ppc64le.rpm libcgroup-pam-0.41-21.el7.ppc64le.rpm s390x: libcgroup-debuginfo-0.41-21.el7.s390.rpm libcgroup-debuginfo-0.41-21.el7.s390x.rpm libcgroup-devel-0.41-21.el7.s390.rpm libcgroup-devel-0.41-21.el7.s390x.rpm libcgroup-pam-0.41-21.el7.s390.rpm libcgroup-pam-0.41-21.el7.s390x.rpm x86_64: libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm libcgroup-devel-0.41-21.el7.i686.rpm libcgroup-devel-0.41-21.el7.x86_64.rpm libcgroup-pam-0.41-21.el7.i686.rpm libcgroup-pam-0.41-21.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: libcgroup-0.41-21.el7.src.rpm x86_64: libcgroup-0.41-21.el7.i686.rpm libcgroup-0.41-21.el7.x86_64.rpm libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm libcgroup-tools-0.41-21.el7.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.7): x86_64: libcgroup-debuginfo-0.41-21.el7.i686.rpm libcgroup-debuginfo-0.41-21.el7.x86_64.rpm libcgroup-devel-0.41-21.el7.i686.rpm libcgroup-devel-0.41-21.el7.x86_64.rpm libcgroup-pam-0.41-21.el7.i686.rpm libcgroup-pam-0.41-21.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-14348 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/7.7_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXUl3mdzjgjWX9erEAQiXEhAAkq5aiLsf23WX0YVPJ5dYFaghPR6zUlkF PCWw4kb6hXm62JwndHb0gJjarxBKAR6pDTjnovEQ8Go7AR7plpGQtQS+gLNTRTgj HpTW0yvW1jfrY3z4Dx6BO5FYQ9/MwgEsedUV9ub1VYz4DbR86M+p5JTZd1nsKvEH 5TuWaodPRKth9PWBNl9tqsuYLjFnwVT2D28JmOIhCyuirb5u3Pj25AwMKb2WPsTM Qj8wB7D1WB4e6CSbU61CtvefHbFg9TfQ6zE4hJe3Ki0dM08GFebdWs+Yq/MM49Ma FeQ/FOkLkHDAHIUvhiJYhYEQmwrbM71VLtd10yPjy3wewzty9ix8W1CfDC68U8QX hirgnosl5IoEoQXRRF5wtvdgJkpBOpzlAPtic9PesK7AOOIRnJ6GggnQYJyHeA6U BwTt6eY3BRZcbqnkzf56noFuRhrz9L8wXeHMd07UiM71+64JvqRa2ME5mWvikqHv 2xC193S2HcffaLCRvNOhK6U8wM7zFcoVooF6vfuR5P635Mz5wsE/0fXPbESVQgx3 kNbUZxMxzHAalJUs1TgOxlgwBqtQstwUigKU6FECqig/3s3eQFzrvaREHR8joqb5 n578bp37UO0AmWfQtZHZz+bQaNpuadakQ6M53FV8z2bFa5WgrJOMwfQL7biW8uu2 yJRQFo11TLc=FyUs -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Explore the latest libcgroup security patch for Red Hat Enterprise Linux 7, classified with a moderate severity level by Red Hat.. libcgroup update, Red Hat security, enterprise Linux advisory, system security update. . LinuxSecurity.com Team

Calendar%202 Aug 06, 2019 Red Hat
Banner 1 1028x280 1708121660 1771599717
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderatesecurity issue

SUSE: 2018:2468-1 Moderate: libcgroup Log Permission Issue

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libcgroup ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:2468-1 Rating: moderate References: #1100365 Cross-References: CVE-2018-14348 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcgroup fixes the following issues: Security issue fixed: - CVE-2018-14348: Fix daemon that creates /var/log/cgred with mode 0666 (bsc#1100365). This updates also sets the permissions of already existing log files to proper values. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-1732=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-1732=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-1732=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): libcgroup-debugsource-0.41.rc1-10.9.1 libcgroup-devel-0.41.rc1-10.9.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libcgroup-debugsource-0.41.rc1-10.9.1 libcgroup-tools-0.41.rc1-10.9.1 libcgroup-tools-debuginfo-0.41.rc1-10.9.1 libcgroup1-0.41.rc1-10.9.1 libcgroup1-debuginfo-0.41.rc1-10.9.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libcgroup-debugsource-0.41.rc1-10.9.1 libcgroup1-0.41.rc1-10.9.1 libcgroup1-debuginfo-0.41.rc1-10.9.1 References: https://www.suse.com/security/cve/CVE-2018-14348.html https://bugzilla.suse.com/1100365 . Ubuntu Security Notice regarding libcgroup mitigates risk related to log access permissions. Remediate CVE-2021-34527 promptly.. SUSE Linux libcgroup update, moderate risk, log permissions, security patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 21, 2018 •Important SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderatesystem update

openSUSE 42.3: 2018:2241-1 Moderate: libcgroup Permission Issue

An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for libcgroup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2241-1 Rating: moderate References: #1100365 Cross-References: CVE-2018-14348 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcgroup fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14348: Fixed a permission issue with /var/log/cgred. The permissions were not restrictive enough beforehand and ignored any umask setting. (boo#1100365) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-821=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libcgroup-debugsource-0.41-8.3.1 libcgroup-devel-0.41-8.3.1 libcgroup-tools-0.41-8.3.1 libcgroup-tools-debuginfo-0.41-8.3.1 libcgroup1-0.41-8.3.1 libcgroup1-debuginfo-0.41-8.3.1 - openSUSE Leap 42.3 (x86_64): libcgroup1-32bit-0.41-8.3.1 libcgroup1-debuginfo-32bit-0.41-8.3.1 References: https://www.suse.com/security/cve/CVE-2018-14348.html https://bugzilla.suse.com/1100365 -- . openSUSE Security Update: Security update for libcgroup ____________________________________________. update, security, fixes, vulnerability, opensuse. . LinuxSecurity.com Team

Calendar%202 Aug 07, 2018 OpenSUSE
Banner 1 1028x280 1708121660 1771599717
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateserver update

SUSE: 2018:2143-1 Moderate: Libcgroup Security Issue Fix

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libcgroup ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:2143-1 Rating: moderate References: #1100365 Cross-References: CVE-2018-14348 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcgroup fixes the following issues: Security issue fixed: - CVE-2018-14348: Fix daemon that creates /var/log/cgred with mode 0666 (bsc#1100365). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-1453=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-1453=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-1453=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): libcgroup-debugsource-0.41.rc1-10.3.1 libcgroup-devel-0.41.rc1-10.3.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libcgroup-debugsource-0.41.rc1-10.3.1 libcgroup-tools-0.41.rc1-10.3.1 libcgroup-tools-debuginfo-0.41.rc1-10.3.1 libcgroup1-0.41.rc1-10.3.1 libcgroup1-debuginfo-0.41.rc1-10.3.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libcgroup-debugsource-0.41.rc1-10.3.1 libcgroup1-0.41.rc1-10.3.1 libcgroup1-debuginfo-0.41.rc1-10.3.1 References: https://www.suse.com/security/cve/CVE-2018-14348.html https://bugzilla.suse.com/1100365 . An important security enhancement for libcgroup in SUSE Linux Enterprise has been announced, along with detailed guidance on how to apply the patches.. SUSE Linux Enterprise, libcgroup security, software update, moderate severity, vulnerability fix. . LinuxSecurity.com Team

Calendar%202 Jul 31, 2018 SuSE
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorybuffer overflowdebian

Debian: DSA-2193-1 Critical: libcgroup Buffer Overflow and Escalation

Several issues have been discovered in libcgroup, a library to control and monitor control groups: CVE-2011-1006 . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2193-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Thijs Kinkhorst March 16, 2011 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libcgroup Vulnerability : several Problem type : local Debian-specific: no CVE ID : CVE-2011-1006 CVE-2011-1022 Debian Bug : 615987 Several issues have been discovered in libcgroup, a library to control and monitor control groups: CVE-2011-1006 Heap-based buffer overflow by converting list of controllers for given task into an array of strings could lead to privilege escalation by a local attacker. CVE-2011-1022 libcgroup did not properly check the origin of Netlink messages, allowing a local attacker to send crafted Netlink messages which could lead to privilege escalation. The oldstable distribution (lenny) does not contain libgroup packages. For the stable distribution (squeeze), this problem has been fixed in version 0.36.2-3+squeeze1. For the testing distribution (wheezy) and unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your libcgroup packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu Security Notice USN-4621-1 tackles various vulnerabilities within libcgroup, posing serious risks of privilege escalation.. Libcgroup Security Update, Debian Advisory, Buffer Overflow Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 16, 2011 •Critical Debian
Banner 1 1028x280 1708121660 1771599717
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorybuffer overflowlocal exploit

Scientific Linux 6.x Security Advisory: Important Libcgroup Buffer Overflow

Important: libcgroup security update. Date: Fri, 4 Mar 2011 15:33:09 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Important: libcgroup on SL6.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Important: libcgroup security update Issue date: 2011-03-03 CVE Names: CVE-2011-1006 CVE-2011-1022 A heap-based buffer overflow flaw was found in the way libcgroup converted a list of user-provided controllers for a particular task into an array of strings. A local attacker could use this flaw to escalate their privileges via a specially-crafted list of controllers. (CVE-2011-1006) It was discovered that libcgroup did not properly check the origin of Netlink messages. A local attacker could use this flaw to send crafted Netlink messages to the cgrulesengd daemon, causing it to put processes into one or more existing control groups, based on the attacker's choosing, possibly allowing the particular tasks to run with more resources (memory, CPU, etc.) than originally intended. (CVE-2011-1022) SL 6.x SRPMS: libcgroup-0.36.1-6.el6_0.1.src.rpm i386: libcgroup-0.36.1-6.el6_0.1.i686.rpm libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm x86_64: libcgroup-0.36.1-6.el6_0.1.i686.rpm libcgroup-0.36.1-6.el6_0.1.x86_64.rpm libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm libcgroup-devel-0.36.1-6.el6_0.1.x86_64.rpm libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm libcgroup-pam-0.36.1-6.el6_0.1.x86_64.rpm -Connie Sieh -Troy Dawson . The latest Libcgroup patch resolves critical stack overflow vulnerabilities affecting SL7.x versions, enhancing system security and stability. libcgroup update, buffer overflow, Scientific Linux, security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 04, 2011 •Important Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics