Stay Vigilant with Timely Linux Security Advisories

Refine advisories

X Clear Filters

Important (4)

Dovecot (141)

debian (8034)

denial of service (18299)

important (27751)

information leak (1384)

security advisory (114945)

critical (18622)

gsasl (5)

security update (9017)

SuSE (3977)

Gentoo (1)

Published Date Range

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Advisory Watch

Linux Security Week

Community Poll

More Polls

What got you started with Linux?

Message!

Self-taught through trial and error
Formal training or courses
A job that required it
Other

No answer selected. Please try again.

Please select either existing option or enter your own, however not both.

Please select minimum {0} answer(s).

Please select maximum {0} answer(s).

/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json

150

radio

Self-taught through trial and error (78.51%)

78.51% votes

Formal training or courses (4.3%)

4.3% votes

A job that required it (4.87%)

4.87% votes

Other (12.32%)

12.32% votes

[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

bottom 200

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Explore Latest Linux Security advisories

We found -4 articles for you...

security advisoryhigh severitygentoo

Gentoo 202401-29 High: Sudo Memory Manipulation Execution Threat

A vulnerability has been discovered in sudo which can lead to execution manipulation through rowhammer-style memory manipulation.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202401-29 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: sudo: Memory Manipulation Date: January 24, 2024 Bugs: #920510 ID: 202401-29 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in sudo which can lead to execution manipulation through rowhammer-style memory manipulation. Background ========== sudo allows a system administrator to give users the ability to run commands as other users. Affected packages ================= Package Vulnerable Unaffected -------------- ------------ ------------ app-admin/sudo < 1.9.15_p2 > = 1.9.15_p2 Description =========== Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details. Impact ====== Stack/register variables can be flipped via fault injection, affecting execution flow in security-sensitive code. Workaround ========== There is no known workaround at this time. Resolution ========== All sudo users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-admin/sudo-1.9.15_p2" References ========== [ 1 ] CVE-2023-42465 https://nvd.nist.gov/vuln/detail/CVE-2023-42465 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202401-29 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importanceto us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2024 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . Critical sudo vulnerability detected in Gentoo Linux demands immediate response. Upgrade promptly to enhance system protection.. Gentoo Linux, Sudo Exploit, Memory Manipulation, High Risk, Security Update. . LinuxSecurity.com Team

Jan 24, 2024 Gentoo

200

security advisorykernel updatearbitrary write

SciLinux: SLSA-2019-3872-1 Important Kernel Update - Arbitrary Memory Write

hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write (CVE-2019-0155) SL7 x86_64 bpftool-3.10.0-1062.4.3.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1062.4.3.el7.x86_64.rpm kernel-3.10.0-1062.4.3.el7.x86_64.rpm kernel-debug-3.10.0-1062.4.3.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.4.3.el7.x86_64.rpm kernel-debug-devel-3.10.0-1062.4.3.el7. [More...]. Synopsis: Important: kernel security update Advisory ID: SLSA-2019:3872-1 Issue Date: 2019-11-14 CVE Numbers: None -- Security Fix(es): * hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write (CVE-2019-0155) -- SL7 x86_64 bpftool-3.10.0-1062.4.3.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1062.4.3.el7.x86_64.rpm kernel-3.10.0-1062.4.3.el7.x86_64.rpm kernel-debug-3.10.0-1062.4.3.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1062.4.3.el7.x86_64.rpm kernel-debug-devel-3.10.0-1062.4.3.el7.x86_64.rpm kernel-debuginfo-3.10.0-1062.4.3.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1062.4.3.el7.x86_64.rpm kernel-devel-3.10.0-1062.4.3.el7.x86_64.rpm kernel-headers-3.10.0-1062.4.3.el7.x86_64.rpm kernel-tools-3.10.0-1062.4.3.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1062.4.3.el7.x86_64.rpm kernel-tools-libs-3.10.0-1062.4.3.el7.x86_64.rpm perf-3.10.0-1062.4.3.el7.x86_64.rpm perf-debuginfo-3.10.0-1062.4.3.el7.x86_64.rpm python-perf-3.10.0-1062.4.3.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1062.4.3.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-1062.4.3.el7.x86_64.rpm noarch kernel-abi-whitelists-3.10.0-1062.4.3.el7.noarch.rpm kernel-doc-3.10.0-1062.4.3.el7.noarch.rpm - Scientific Linux Development Team . Critical patch released for SL7 targeting vulnerabilities in kernel memory write processes. Affected applications listed for user awareness.. kernel Security Update, SL7 Kernel Patch, Intel GPU Issue, Memory Write Protection. . Severity: Important. LinuxSecurity.com Team

Nov 14, 2019 •Important Scientific Linux

200

security advisorykernelarbitrary write

SciLinux: SLSA-2019-3878-1 Important Security Update for Kernel

hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write (CVE-2019-0155) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. SL6 x86_64 kernel-2.6.32-754.24.3.el6.x86_64.rpm kernel-debug-2.6.32-754.24.3.el6.x86_64.rpm ke [More...]. Synopsis: Important: kernel security update Advisory ID: SLSA-2019:3878-1 Issue Date: 2019-11-14 CVE Numbers: CVE-2019-0155 -- Security Fix(es): * hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write (CVE-2019-0155) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. -- SL6 x86_64 kernel-2.6.32-754.24.3.el6.x86_64.rpm kernel-debug-2.6.32-754.24.3.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-754.24.3.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.24.3.el6.x86_64.rpm kernel-debug-devel-2.6.32-754.24.3.el6.i686.rpm kernel-debug-devel-2.6.32-754.24.3.el6.x86_64.rpm kernel-debuginfo-2.6.32-754.24.3.el6.i686.rpm kernel-debuginfo-2.6.32-754.24.3.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-754.24.3.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-754.24.3.el6.x86_64.rpm kernel-devel-2.6.32-754.24.3.el6.x86_64.rpm kernel-headers-2.6.32-754.24.3.el6.x86_64.rpm perf-2.6.32-754.24.3.el6.x86_64.rpm perf-debuginfo-2.6.32-754.24.3.el6.i686.rpm perf-debuginfo-2.6.32-754.24.3.el6.x86_64.rpm python-perf-debuginfo-2.6.32-754.24.3.el6.i686.rpm python-perf-debuginfo-2.6.32-754.24.3.el6.x86_64.rpm python-perf-2.6.32-754.24.3.el6.x86_64.rpm i386 kernel-2.6.32-754.24.3.el6.i686.rpm kernel-debug-2.6.32-754.24.3.el6.i686.rpm kernel-debug-debuginfo-2.6.32-754.24.3.el6.i686.rpm kernel-debug-devel-2.6.32-754.24.3.el6.i686.rpm kernel-debuginfo-2.6.32-754.24.3.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-754.24.3.el6.i686.rpm kernel-devel-2.6.32-754.24.3.el6.i686.rpm kernel-headers-2.6.32-754.24.3.el6.i686.rpm perf-2.6.32-754.24.3.el6.i686.rpm perf-debuginfo-2.6.32-754.24.3.el6.i686.rpm python-perf-debuginfo-2.6.32-754.24.3.el6.i686.rpm python-perf-2.6.32-754.24.3.el6.i686.rpm noarch kernel-abi-whitelists-2.6.32-754.24.3.el6.noarch.rpm kernel-doc-2.6.32-754.24.3.el6.noarch.rpm kernel-firmware-2.6.32-754.24.3.el6.noarch.rpm - Scientific Linux Development Team . SL6 kernel security patch resolves Intel GPU memory management vulnerabilities. Critical advisory details provided.. kernel security update, Intel memory manipulation, SL6 kernel patch, arbitrary write issue. . Severity: Important. LinuxSecurity.com Team

Nov 14, 2019 •Important Scientific Linux

security advisoryred hatimportant

RedHat Enterprise Linux 7.5: RHSA-2019-3889-01 Important Security Update

An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, . -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2019:3889-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:3889 Issue date: 2019-11-14 CVE Names: CVE-2019-0155 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) - x86_64 Red Hat Enterprise Linux Server EUS (v. 7.5) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 7.5) - ppc64, ppc64le, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write (CVE-2019-0155) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1724398 - CVE-2019-0155 hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write 6. Package List: Red Hat Enterprise Linux ComputeNode EUS (v. 7.5): Source: kernel-3.10.0-862.43.3.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-862.43.3.el7.noarch.rpm kernel-doc-3.10.0-862.43.3.el7.noarch.rpm x86_64: kernel-3.10.0-862.43.3.el7.x86_64.rpm kernel-debug-3.10.0-862.43.3.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-debug-devel-3.10.0-862.43.3.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.43.3.el7.x86_64.rpm kernel-devel-3.10.0-862.43.3.el7.x86_64.rpm kernel-headers-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-libs-3.10.0-862.43.3.el7.x86_64.rpm perf-3.10.0-862.43.3.el7.x86_64.rpm perf-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm python-perf-3.10.0-862.43.3.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5): x86_64: kernel-debug-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-862.43.3.el7.x86_64.rpm perf-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm Red Hat Enterprise Linux Server EUS (v.7.5): Source: kernel-3.10.0-862.43.3.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-862.43.3.el7.noarch.rpm kernel-doc-3.10.0-862.43.3.el7.noarch.rpm ppc64: kernel-3.10.0-862.43.3.el7.ppc64.rpm kernel-bootwrapper-3.10.0-862.43.3.el7.ppc64.rpm kernel-debug-3.10.0-862.43.3.el7.ppc64.rpm kernel-debug-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm kernel-debug-devel-3.10.0-862.43.3.el7.ppc64.rpm kernel-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-862.43.3.el7.ppc64.rpm kernel-devel-3.10.0-862.43.3.el7.ppc64.rpm kernel-headers-3.10.0-862.43.3.el7.ppc64.rpm kernel-tools-3.10.0-862.43.3.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm kernel-tools-libs-3.10.0-862.43.3.el7.ppc64.rpm perf-3.10.0-862.43.3.el7.ppc64.rpm perf-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm python-perf-3.10.0-862.43.3.el7.ppc64.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm ppc64le: kernel-3.10.0-862.43.3.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-862.43.3.el7.ppc64le.rpm kernel-debug-3.10.0-862.43.3.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm kernel-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-862.43.3.el7.ppc64le.rpm kernel-devel-3.10.0-862.43.3.el7.ppc64le.rpm kernel-headers-3.10.0-862.43.3.el7.ppc64le.rpm kernel-tools-3.10.0-862.43.3.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm kernel-tools-libs-3.10.0-862.43.3.el7.ppc64le.rpm perf-3.10.0-862.43.3.el7.ppc64le.rpm perf-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm python-perf-3.10.0-862.43.3.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm s390x: kernel-3.10.0-862.43.3.el7.s390x.rpm kernel-debug-3.10.0-862.43.3.el7.s390x.rpm kernel-debug-debuginfo-3.10.0-862.43.3.el7.s390x.rpm kernel-debug-devel-3.10.0-862.43.3.el7.s390x.rpm kernel-debuginfo-3.10.0-862.43.3.el7.s390x.rpm kernel-debuginfo-common-s390x-3.10.0-862.43.3.el7.s390x.rpm kernel-devel-3.10.0-862.43.3.el7.s390x.rpm kernel-headers-3.10.0-862.43.3.el7.s390x.rpm kernel-kdump-3.10.0-862.43.3.el7.s390x.rpm kernel-kdump-debuginfo-3.10.0-862.43.3.el7.s390x.rpm kernel-kdump-devel-3.10.0-862.43.3.el7.s390x.rpm perf-3.10.0-862.43.3.el7.s390x.rpm perf-debuginfo-3.10.0-862.43.3.el7.s390x.rpm python-perf-3.10.0-862.43.3.el7.s390x.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.s390x.rpm x86_64: kernel-3.10.0-862.43.3.el7.x86_64.rpm kernel-debug-3.10.0-862.43.3.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-debug-devel-3.10.0-862.43.3.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.43.3.el7.x86_64.rpm kernel-devel-3.10.0-862.43.3.el7.x86_64.rpm kernel-headers-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-libs-3.10.0-862.43.3.el7.x86_64.rpm perf-3.10.0-862.43.3.el7.x86_64.rpm perf-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm python-perf-3.10.0-862.43.3.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional EUS (v.7.5): ppc64: kernel-debug-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm kernel-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-862.43.3.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm kernel-tools-libs-devel-3.10.0-862.43.3.el7.ppc64.rpm perf-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.ppc64.rpm ppc64le: kernel-debug-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm kernel-debug-devel-3.10.0-862.43.3.el7.ppc64le.rpm kernel-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-862.43.3.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-862.43.3.el7.ppc64le.rpm perf-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.ppc64le.rpm x86_64: kernel-debug-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-862.43.3.el7.x86_64.rpm perf-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm python-perf-debuginfo-3.10.0-862.43.3.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-0155 https://access.redhat.com/security/updates/classification#important https://access.redhat.com/solutions/i915-graphics 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE-----Version: GnuPGv1 iQIVAwUBXc2SqNzjgjWX9erEAQj+gg//d+pJVq92WMvwFaO8buFaOnApfnv6+OsB DD0z3u79iy5SQK7aoPdeZrXMQPpIk5lB57ZkB4/gclIyZ94C7XNVIDodFJGv+rNj TDsVoDDAC/USCo0AIMD9x7SNKiCwAXNdHp1Y+0LDj+jfmPIq8yeSZK0uaMzvrgsh ZY5sa8oolUDvofCrYE6UsYVh6ukWARDABQLDlS1Bb2G2QsCbQBdzuL5Hi78N124/ XHFGMoTyu2mTD+xk4qCe8TCKSXs9cFaug4dE0dzZRb0muVlt9iggT+z7JOdW3oBq 4F3jUTbOOM/liCIf1wpHBLXh1iqaJZuStS+4mBVYaVuvJUoSW3jLfGxj1QlGiCaA 8pWGFQqLOr1KjdggwAb03FriSYlklLAjHohRaXRoHnjkjMjwDcmwmCSEg4F+2kwy Tp4PI7t7Ik1lgTgpzXLi8tPfOQaIoZwj7nZFo70CvsxEmPYhxb0aJao0V6gUjTyQ g5u75d6+SexTYfHZKK6FPHHucSRigr09dltw4WeYiOp6t5ypWpB/atYYpXrW2InD MrqheMB1es/ygPECS3IjTUTl2cDwIijctARO5WoqsR+fKmgHJheWx67L77XOWWaH Ns4q4KQE1Ff85HIpgMZXQAfX3AM2qU8MqDBRH+To6rUFjBW1LPX+ROIIvz2Urz/g k729BbU/2oM=gvIs -----END PGP SIGNATURE-------RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Oracle has announced an essential patch for its Linux 8.4 version, tackling severe vulnerabilities related to network security.. Red Hat Kernel Update, Security Advisory, EUS Linux Support, Memory Manipulation Fix. . Severity: Important. LinuxSecurity.com Team

Nov 14, 2019 •Important Red Hat

security advisorydenial of serviceRed Hat

Red Hat 5: RHSA-2010:0633-01 Important: Qspice Denial of Service

Updated qspice packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: qspice security update Advisory ID: RHSA-2010:0633-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0633.html Issue date: 2010-08-19 CVE Names: CVE-2010-0428 CVE-2010-0429 ==================================================================== 1. Summary: Updated qspice packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: RHEL Desktop Multi OS (v. 5 client) - x86_64 RHEL Virtualization (v. 5 server) - x86_64 3. Description: The Simple Protocol for Independent Computing Environments (SPICE) is a remote display protocol used in Red Hat Enterprise Linux for viewing virtualized guests running on the Kernel-based Virtual Machine (KVM) hypervisor, or on Red Hat Enterprise Virtualization Hypervisor. It was found that the libspice component of QEMU-KVM on the host did not validate all pointers provided from a guest system's QXL graphics card driver. A privileged guest user could use this flaw to cause the host to dereference an invalid pointer, causing the guest to crash (denial of service) or, possibly, resulting in the privileged guest user escalating their privileges on the host. (CVE-2010-0428) It was found that the libspice component of QEMU-KVM on the host couldbe forced to perform certain memory management operations on memory addresses controlled by a guest. A privileged guest user could use this flaw to crash the guest (denial of service) or, possibly, escalate their privileges on the host. (CVE-2010-0429) All qspice users should upgrade to these updated packages, which contain backported patches to correct these issues. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 568699 - CVE-2010-0428 libspice: Insufficient guest provided pointers validation 568701 - CVE-2010-0429 libspice: Relying on guest provided data structures to indicate memory allocation 6. Package List: RHEL Desktop Multi OS (v. 5 client): Source: x86_64: qspice-0.3.0-54.el5_5.2.x86_64.rpm qspice-debuginfo-0.3.0-54.el5_5.2.x86_64.rpm qspice-libs-0.3.0-54.el5_5.2.x86_64.rpm qspice-libs-devel-0.3.0-54.el5_5.2.x86_64.rpm RHEL Virtualization (v. 5 server): Source: x86_64: qspice-0.3.0-54.el5_5.2.x86_64.rpm qspice-debuginfo-0.3.0-54.el5_5.2.x86_64.rpm qspice-libs-0.3.0-54.el5_5.2.x86_64.rpm qspice-libs-devel-0.3.0-54.el5_5.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2010-0428 https://access.redhat.com/security/cve/CVE-2010-0429 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2010 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFMbavKXlSAg2UNWIIRAn41AKCGLir3Qo2+bn0Q2QmxCP90Cosn8ACgvnUk ZMHG9QH1BCCev0Xy3clQC5E=3YaG -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Important notice for Red Hat users: qspice fixes significant vulnerabilities in its packages. Upgrade is advised to ensure system security.. Red Hat Update,Qspice Security Patch,Remote Protocol Update. . Severity: Important. LinuxSecurity.com Team

Aug 19, 2010 •Important Red Hat

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Advisory Watch

Linux Security Week

Community Poll

More Polls

What got you started with Linux?

Message!

Self-taught through trial and error
Formal training or courses
A job that required it
Other

No answer selected. Please try again.

Please select either existing option or enter your own, however not both.

Please select minimum {0} answer(s).

Please select maximum {0} answer(s).

/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json

150

radio

Self-taught through trial and error (78.51%)

78.51% votes

Formal training or courses (4.3%)

4.3% votes

A job that required it (4.87%)

4.87% votes

Other (12.32%)

12.32% votes

bottom 200

Stay Secure with the Latest Linux Advisories

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Refine advisories

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Explore Latest Linux Security advisories

Gentoo 202401-29 High: Sudo Memory Manipulation Execution Threat

SciLinux: SLSA-2019-3872-1 Important Kernel Update - Arbitrary Memory Write

SciLinux: SLSA-2019-3878-1 Important Security Update for Kernel

RedHat Enterprise Linux 7.5: RHSA-2019-3889-01 Important Security Update

Red Hat 5: RHSA-2010:0633-01 Important: Qspice Denial of Service

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Ubuntu 25.10 kmod Critical Algif_aead Privilege Escalation USN-8226-1

Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

Ubuntu 26.04 Docker Critical Security Threats USN-8230-1 CVE-2026-33747

Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Stay Secure with the Latest Linux Advisories

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Refine advisories

severity

Topics

Distro

Published Date

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Explore Latest Linux Security advisories

Get the latest News and Insights

Community Poll

What got you started with Linux?

Trending News

Search Topics

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!