Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisorymoderateremote code execution

Scientific Linux: 2014:1390-2 Moderate: Luci Remote Code Execution

Moderate: luci security, bug fix, and enhancement update. Date: Mon, 3 Nov 2014 17:54:30 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: luci on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Moderate: luci security, bug fix, and enhancement update Advisory ID: SLSA-2014:1390-2 Issue Date: 2014-10-14 CVE Numbers: CVE-2014-3593 -- It was discovered that luci used eval() on inputs containing strings from the cluster configuration file when generating its web pages. An attacker with privileges to create or edit the cluster configuration could use this flaw to execute arbitrary code as the luci user on a host running luci. (CVE-2014-3593) -- SL6 x86_64 luci-0.26.0-63.el6.x86_64.rpm luci-debuginfo-0.26.0-63.el6.x86_64.rpm i386 luci-0.26.0-63.el6.i686.rpm luci-debuginfo-0.26.0-63.el6.i686.rpm - Scientific Linux Development Team . Luci patch released to fix a significant vulnerability and boost system efficiency on Scientific Linux. Find out more information here.. luci security, Scientific Linux, bug fix, moderate advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Nov 03, 2014 •Important Scientific Linux
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryRed Hatbug fix

Red Hat: RHSA-2014-1390-02 Moderate: Luci Security Update

Updated luci packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: luci security, bug fix, and enhancement update Advisory ID: RHSA-2014:1390-02 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2014:1390.html Issue date: 2014-10-14 CVE Names: CVE-2014-3593 ==================================================================== 1. Summary: Updated luci packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux High Availability (v. 6) - i386, x86_64 Red Hat Enterprise Linux Resilient Storage (v. 6) - i386, x86_64 3. Description: Luci is a web-based high availability administration application. It was discovered that luci used eval() on inputs containing strings from the cluster configuration file when generating its web pages. An attacker with privileges to create or edit the cluster configuration could use this flaw to execute arbitrary code as the luci user on a host running luci. (CVE-2014-3593) This issue was discovered by Jan Pokorný of Red Hat. These updated luci packages also include several bug fixes and multiple enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.6Technical Notes, linked to in the References section, for information on the most significant of these changes. All luci users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 855112 - Encode XML-unsafe characters from user input as XML entities 982771 - luci vs. sessions: check length of secret on startup 989005 - CVE-2014-3593 luci: privilege escalation through cluster with specially crafted configuration 1026374 - Add a custom luci launcher allowing sane Python runtime + SELinux coexistence 1100817 - luci to cope with virtual machine in both plain and service-like resource (incl. complex defs in cluster.conf) 1117398 - Sync luci with recent changes in the schema for RHEL 6.6 (RAs, FAs, rgmanager, fenced, ...) 6. Package List: Red Hat Enterprise Linux High Availability (v. 6): Source: luci-0.26.0-63.el6.src.rpm i386: luci-0.26.0-63.el6.i686.rpm luci-debuginfo-0.26.0-63.el6.i686.rpm x86_64: luci-0.26.0-63.el6.x86_64.rpm luci-debuginfo-0.26.0-63.el6.x86_64.rpm Red Hat Enterprise Linux Resilient Storage (v. 6): Source: luci-0.26.0-63.el6.src.rpm i386: luci-0.26.0-63.el6.i686.rpm luci-debuginfo-0.26.0-63.el6.i686.rpm x86_64: luci-0.26.0-63.el6.x86_64.rpm luci-debuginfo-0.26.0-63.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7.References: https://access.redhat.com/security/cve/CVE-2014-3593 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.6_Technical_Notes/luci.html#RHSA-2014-1390 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFUPKt2XlSAg2UNWIIRAuiaAKCDBBWeRR8ptKbXqtk/DD4cDObohgCeP4Po 2qIYoUbfGUHiCW/nfsCjZzQ=gw8U -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Revised luci modules for CentOS address vulnerabilities, errors, and improvements with moderate significance.. luci Security Update, Red Hat Advisory, Bug Fixes. . LinuxSecurity.com Team

Calendar 2 Oct 14, 2014 Red Hat
Banner 3 1028x280 1708121785 1771599793
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisorybug fixmoderate threat

Scientific Linux SL6.x: SLSA-2013:1603-2 Moderate: luci Authentication Flaw

Moderate: luci security, bug fix, and enhancement update. Date: Tue, 3 Dec 2013 20:08:09 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: luci on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Moderate: luci security, bug fix, and enhancement update Advisory ID: SLSA-2013:1603-2 Issue Date: 2013-11-21 CVE Numbers: CVE-2013-4481 CVE-2013-4482 -- A flaw was found in the way the luci service was initialized. If a system administrator started the luci service from a directory that was writable to by a local user, that user could use this flaw to execute arbitrary code as the root or luci user. (CVE-2013-4482) A flaw was found in the way luci generated its configuration file. The file was created as world readable for a short period of time, allowing a local user to gain access to the authentication secrets stored in the configuration file. (CVE-2013-4481) After installing this update, the luci service will be restarted automatically. -- SL6 x86_64 luci-0.26.0-48.el6.x86_64.rpm luci-debuginfo-0.26.0-48.el6.x86_64.rpm i386 luci-0.26.0-48.el6.i686.rpm luci-debuginfo-0.26.0-48.el6.i686.rpm - Scientific Linux Development Team . Details on a moderate security issue affecting luci on Scientific Linux SL6.x with solutions.. Scientific Linux, luci update, security advisory. . LinuxSecurity.com Team

Calendar 2 Dec 03, 2013 Scientific Linux
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorysecurity issuebug fix

Red Hat Enterprise Linux 6 RHSA-2013:1603-02 Moderate Luci Security Update

Updated luci packages that fix two security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: luci security, bug fix, and enhancement update Advisory ID: RHSA-2013:1603-02 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:1603.html Issue date: 2013-11-21 CVE Names: CVE-2013-4481 CVE-2013-4482 ==================================================================== 1. Summary: Updated luci packages that fix two security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux High Availability (v. 6) - i386, x86_64 Red Hat Enterprise Linux Resilient Storage (v. 6) - i386, x86_64 3. Description: Luci is a web-based high availability administration application. A flaw was found in the way the luci service was initialized. If a system administrator started the luci service from a directory that was writable to by a local user, that user could use this flaw to execute arbitrary code as the root or luci user. (CVE-2013-4482) A flaw was found in the way luci generated its configuration file. The file was created as world readable for a short period of time, allowing a local user to gain access to the authentication secrets stored in the configuration file. (CVE-2013-4481) These issues werediscovered by Jan Pokorný of Red Hat. These updated luci packages include numerous bug fixes and two enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.5 Technical Notes, linked to in the References, for information on the most significant of these changes. All luci users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements. After installing this update, the luci service will be restarted automatically. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 878149 - Cluster model unexpectedly empty when no node can be contacted 880363 - Error message displayed with letters separated by commas 883008 - Update support for "cmd_prompt", "login_timeout", "power_timeout", "retry_on", "shell_timeout", and "delay" fence agent attributes 886517 - luci should chkconfig ricci on as part of "enabling cluster services" 886576 - "Remove this instance" button has no effect 917747 - idrac, ilo2, ilo3, ilo4, and imm fence agents are not honored in luci 988998 - CVE-2013-4481 luci: short exposure of authentication secrets while generating configuration file 990321 - CVE-2013-4482 luci: paster hidden untrusted path and "command" (callable association) injection 1001835 - module_name parameter for fence_drac5 is optional, not required 1001836 - fence_ilo denoted as HP iLO / iLO2, but the latter has a separate entry 6. Package List: Red Hat Enterprise Linux High Availability (v. 6): Source: i386: luci-0.26.0-48.el6.i686.rpm luci-debuginfo-0.26.0-48.el6.i686.rpm x86_64: luci-0.26.0-48.el6.x86_64.rpm luci-debuginfo-0.26.0-48.el6.x86_64.rpm Red Hat Enterprise LinuxResilient Storage (v. 6): Source: i386: luci-0.26.0-48.el6.i686.rpm luci-debuginfo-0.26.0-48.el6.i686.rpm x86_64: luci-0.26.0-48.el6.x86_64.rpm luci-debuginfo-0.26.0-48.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2013-4481 https://access.redhat.com/security/cve/CVE-2013-4482 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.5_Technical_Notes/luci.html#RHSA-2013-1603 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2013 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFSjYwLXlSAg2UNWIIRAikwAJ43C2/cIdG7lVkcI+xMd++6GtExlgCfaBZw GHImUDx7gKas5ZufopZKJ9o=Nf7Z -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Recent enhancements for luci targeting vulnerabilities, fixing issues, and introducing new functionalities on Red Hat Enterprise Linux platforms.. luci Security Fix, Red Hat Update, Enterprise Linux, Moderate Security Advisory. . LinuxSecurity.com Team

Calendar 2 Nov 21, 2013 Red Hat
Banner 3 1028x280 1708121785 1771599793
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisoryprivilege escalationremote access

Scientific Linux: Important Conga Update for Privilege Escalation Issue

Important: conga security update. Date: Thu, 31 Mar 2011 15:10:50 -0500 Reply-To: Jason Harrington Sender: Security Errata for Scientific Linux From: Jason Harrington Subject: Security ERRATA Important: conga on SL4.x i386/x86_64 Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. Mime-Version: 1.0 (Apple Message framework v1082) Synopsis: Important: conga security update Issue date: 2011-03-28 CVE Names: CVE-2011-0720 The conga packages provide a web-based administration tool for remote cluster and storage management. A privilege escalation flaw was found in luci, the Conga web-based administration application. A remote attacker could possibly use this flaw to obtain administrative access, allowing them to read, create, or modify the content of the luci application. (CVE-2011-0720) Users of Conga are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue. After installing the updated packages, luci must be restarted ("service luci restart") for the update to take effect. SL 4x SRPMS: conga-0.11.2-4.el4.2.src.rpm i386: luci-0.11.2-4.el4.2.i386.rpm ricci-0.11.2-4.el4.2.i386.rpm Dependencies for SL 40-43: oddjob-0.26-1.1.i386.rpm oddjob-devel-0.26-1.1.i386.rpm oddjob-libs-0.26-1.1.i386.rpm x86_64: luci-0.11.2-4.el4.2.x86_64.rpm ricci-0.11.2-4.el4.2.x86_64.rpm Dependencies for SL 40-43: oddjob-0.26-1.1.x86_64.rpm oddjob-devel-0.26-1.1.x86_64.rpm oddjob-libs-0.26-1.1.x86_64.rpm - Scientific Linux Development Team lastline . Conga security patch resolves a privilege escalation vulnerability in Scientific Linux SL4.x, enabling possible remote exploitation.. Conga Update, Scientific Linux, Remote Access, Privilege Escalation. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 31, 2011 •Important Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here