Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
200

Scientific Linux: OPENAFS-SA-2018-001 moderate: OpenAFS Major Issues

OPENAFS-SA-2018-001 Multiple vulnerabilities. . Synopsis: Moderate: OpenAFS Advisory ID: OPENAFS-SA-2018-001:2:3 Issue Date: 2018-09-11 CVE Numbers: None --These releases include fixes for three security advisories, OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, and OPENAFS-SA-2018-003. OPENAFS-SA-2018-001 only affects deployments that run the 'butc' utility as part of the in-tree backup system, but is of high severity for those sites which are affected -- an anonymous attacker could replace entire volumes with attacker-controlled contents. OPENAFS-SA-2018-002 is for information leakage over the network via uninitialized RPC output variables. A number of RPCs are affected, some of which require the caller to be authenticated, but in some cases hundreds of bytes of data can be leaked per call. Of note is that cache managers are also subject to (kernel) memory leakage via AFSCB_ RPCs. OPENAFS-SA-2018-003 is a denial of service whereby anonymous attackers can cause server processes to consume large quantities of memory for a sustained period of time. The changes to fix OPENAFS-SA-2018-001 require behavior change in both butc(8) and backup(8) to use authenticated connections; old and new versions of these utilities will not interoperate absent specific configuration of the new tool to use the old (insecure) behavior. These changes also are expected to cause backup(8)'s interactive mode to be limited to only butc connections requiring (or not requiring) authentication within a given interactive session, based on the initial arguments selected. --SL6 x86_64 kmod-openafs-754-1.6.23-289.sl6.754.3.5.x86_64.rpm openafs-1.6.23-289.sl6.x86_64.rpm openafs-authlibs-1.6.23-289.sl6.x86_64.rpm openafs-authlibs-devel-1.6.23-289.sl6.x86_64.rpm openafs-client-1.6.23-289.sl6.x86_64.rpm openafs-compat-1.6.23-289.sl6.x86_64.rpm openafs-debuginfo-1.6.23-289.sl6.x86_64.rpm openafs-devel-1.6.23-289.sl6.x86_64.rpm openafs-kernel-source-1.6.23-289.sl6.x86_64.rpm openafs-kpasswd-1.6.23-289.sl6.x86_64.rpm openafs-krb5-1.6.23-289.sl6.x86_64.rpm openafs-module-tools-1.6.23-289.sl6.x86_64.rpm openafs-plumbing-tools-1.6.23-289.sl6.x86_64.rpm openafs-server-1.6.23-289.sl6.x86_64.rpm i386 kmod-openafs-754-1.6.23-289.sl6.754.3.5.i686.rpm openafs-1.6.23-289.sl6.i686.rpm openafs-authlibs-1.6.23-289.sl6.i686.rpm openafs-authlibs-devel-1.6.23-289.sl6.i686.rpm openafs-client-1.6.23-289.sl6.i686.rpm openafs-compat-1.6.23-289.sl6.i686.rpm openafs-debuginfo-1.6.23-289.sl6.i686.rpm openafs-devel-1.6.23-289.sl6.i686.rpm openafs-kernel-source-1.6.23-289.sl6.i686.rpm openafs-kpasswd-1.6.23-289.sl6.i686.rpm openafs-krb5-1.6.23-289.sl6.i686.rpm openafs-module-tools-1.6.23-289.sl6.i686.rpm openafs-plumbing-tools-1.6.23-289.sl6.i686.rpm openafs-server-1.6.23-289.sl6.i686.rpm SL7 x86_64 openafs-1.6-sl-server-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-plumbing-tools-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-client-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-kernel-source-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-devel-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-module-tools-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-compat-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-authlibs-1.6.23-289.sl7.x86_64.rpm kmod-openafs-1.6-sl-862-debuginfo-1.6.23-289.sl7.862.11.6.x86_64.rpm openafs-1.6-sl-debuginfo-1.6.23-289.sl7.x86_64.rpm kmod-openafs-1.6-sl-862-1.6.23-289.sl7.862.11.6.x86_64.rpm openafs-1.6-sl-krb5-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-kpasswd-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-authlibs-devel-1.6.23-289.sl7.x86_64.rpm openafs-1.6-sl-1.6.23-289.sl7.x86_64.rpm - Scientific Linux Development Team . Recent OpenAFS advisory uncovers security flaws including data exposure risks and service disruption issues affecting Scientific Linux platforms.. OpenAFS Advisory, Scientific LinuxSecurity, Information Leak, Denial of Service, OpenAFS Issues. . LinuxSecurity.com Team

Calendar 2 Sep 12, 2018 Scientific Linux
200

Scientific Linux: Moderate Apr and Apr-Util Security Update, DoS Risk

Moderate: apr and apr-util security update. Date: Tue, 11 Aug 2009 14:33:44 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Moderate: apr and apr-util on SL4.x, SL5.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Moderate: apr and apr-util security update Issue date: 2009-08-10 CVE Names: CVE-2009-2412 CVE-2009-2412 apr, apr-util: Integer overflows in memory pool (apr) and relocatable memory (apr-util) management Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way the Apache Portable Runtime (APR) manages memory pool and relocatable memory allocations. An attacker could use these flaws to issue a specially-crafted request for memory allocation, which would lead to a denial of service (application crash) or, potentially, execute arbitrary code with the privileges of an application using the APR libraries. (CVE-2009-2412) Applications using the APR libraries, such as httpd, must be restarted for this update to take effect. SL 4.x SRPMS: apr-0.9.4-24.9.el4_8.2.src.rpm apr-util-0.9.4-22.el4_8.2.src.rpm i386: apr-0.9.4-24.9.el4_8.2.i386.rpm apr-devel-0.9.4-24.9.el4_8.2.i386.rpm apr-util-0.9.4-22.el4_8.2.i386.rpm apr-util-devel-0.9.4-22.el4_8.2.i386.rpm x86_64: apr-0.9.4-24.9.el4_8.2.i386.rpm apr-0.9.4-24.9.el4_8.2.x86_64.rpm apr-devel-0.9.4-24.9.el4_8.2.x86_64.rpm apr-util-0.9.4-22.el4_8.2.x86_64.rpm apr-util-devel-0.9.4-22.el4_8.2.x86_64.rpm SL 5.x SRPMS: apr-1.2.7-11.el5_3.1.src.rpm apr-util-1.2.7-7.el5_3.2.src.rpm i386: apr-1.2.7-11.el5_3.1.i386.rpm apr-devel-1.2.7-11.el5_3.1.i386.rpm apr-docs-1.2.7-11.el5_3.1.i386.rpm apr-util-1.2.7-7.el5_3.2.i386.rpm apr-util-devel-1.2.7-7.el5_3.2.i386.rpm apr-util-docs-1.2.7-7.el5_3.2.i386.rpm x86_64: apr-1.2.7-11.el5_3.1.i386.rpm apr-1.2.7-11.el5_3.1.x86_64.rpm apr-devel-1.2.7-11.el5_3.1.i386.rpm apr-devel-1.2.7-11.el5_3.1.x86_64.rpm apr-docs-1.2.7-11.el5_3.1.x86_64.rpm apr-util-1.2.7-7.el5_3.2.i386.rpm apr-util-1.2.7-7.el5_3.2.x86_64.rpm apr-util-devel-1.2.7-7.el5_3.2.i386.rpm apr-util-devel-1.2.7-7.el5_3.2.x86_64.rpm apr-util-docs-1.2.7-7.el5_3.2.x86_64.rpm -Connie Sieh -Troy Dawson . A noteworthy patch for apr and apr-util mitigates potential integer overflow vulnerabilities that could result in Denial of Service (DoS) attacks or unintended execution of code.. apr update, scientific linux errata, memory management flaw. . LinuxSecurity.com Team

Calendar 2 Aug 11, 2009 Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here