Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
217
security advisoryupdatesecurity fixOracle Linux 8 ELSA-2022-0368 Moderate RPM Security Advisory
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-0368 https://linux.oracle.com/errata/ELSA-2022-0368.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: python3-rpm-4.14.3-19.el8_5.2.x86_64.rpm rpm-4.14.3-19.el8_5.2.x86_64.rpm rpm-apidocs-4.14.3-19.el8_5.2.noarch.rpm rpm-build-4.14.3-19.el8_5.2.x86_64.rpm rpm-build-libs-4.14.3-19.el8_5.2.i686.rpm rpm-build-libs-4.14.3-19.el8_5.2.x86_64.rpm rpm-cron-4.14.3-19.el8_5.2.noarch.rpm rpm-devel-4.14.3-19.el8_5.2.i686.rpm rpm-devel-4.14.3-19.el8_5.2.x86_64.rpm rpm-libs-4.14.3-19.el8_5.2.i686.rpm rpm-libs-4.14.3-19.el8_5.2.x86_64.rpm rpm-plugin-fapolicyd-4.14.3-19.el8_5.2.x86_64.rpm rpm-plugin-ima-4.14.3-19.el8_5.2.x86_64.rpm rpm-plugin-prioreset-4.14.3-19.el8_5.2.x86_64.rpm rpm-plugin-selinux-4.14.3-19.el8_5.2.x86_64.rpm rpm-plugin-syslog-4.14.3-19.el8_5.2.x86_64.rpm rpm-plugin-systemd-inhibit-4.14.3-19.el8_5.2.x86_64.rpm rpm-sign-4.14.3-19.el8_5.2.x86_64.rpm aarch64: python3-rpm-4.14.3-19.el8_5.2.aarch64.rpm rpm-4.14.3-19.el8_5.2.aarch64.rpm rpm-apidocs-4.14.3-19.el8_5.2.noarch.rpm rpm-build-4.14.3-19.el8_5.2.aarch64.rpm rpm-build-libs-4.14.3-19.el8_5.2.aarch64.rpm rpm-cron-4.14.3-19.el8_5.2.noarch.rpm rpm-devel-4.14.3-19.el8_5.2.aarch64.rpm rpm-libs-4.14.3-19.el8_5.2.aarch64.rpm rpm-plugin-fapolicyd-4.14.3-19.el8_5.2.aarch64.rpm rpm-plugin-ima-4.14.3-19.el8_5.2.aarch64.rpm rpm-plugin-prioreset-4.14.3-19.el8_5.2.aarch64.rpm rpm-plugin-selinux-4.14.3-19.el8_5.2.aarch64.rpm rpm-plugin-syslog-4.14.3-19.el8_5.2.aarch64.rpm rpm-plugin-systemd-inhibit-4.14.3-19.el8_5.2.aarch64.rpm rpm-sign-4.14.3-19.el8_5.2.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates/rpm-4.14.3-19.el8_5.2.src.rpm Related CVEs: CVE-2021-3521 Description of changes: [4.14.3-19.2] - Address covscan issues in binding sigs validation patch (#2022537) [4.14.3-19.1] - Validate and require subkey binding sigs on PGP pubkeys(#2022537) - Fixes CVE-2021-3521 _______________________________________________ El-errata mailing list
Feb 02, 2022
•Important
Oracle
98
security advisorybuffer overrunimportantRed Hat Enterprise Linux: RHSA-2021-2390-01 Critical Postgresql Update
An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: postgresql:10 security update Advisory ID: RHSA-2021:2390-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:2390 Issue date: 2021-06-14 CVE Names: CVE-2021-32027 CVE-2021-32028 ==================================================================== 1. Summary: An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v. 8.2) - aarch64, ppc64le, s390x, x86_64 3. Description: PostgreSQL is an advanced object-relational database management system (DBMS). The following packages have been upgraded to a later upstream version: postgresql (10.17) Security Fix(es): * postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027) * postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE (CVE-2021-32028) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 If the postgresql service is running, it will be automatically restarted after installing this update. 5. Bugs fixed (https://bugzilla.redhat.com/): 1956876 - CVE-2021-32027 postgresql: Buffer overrun from integer overflow in array subscripting calculations 1956877 - CVE-2021-32028 postgresql: Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.8.2): Source: postgresql-10.17-1.module+el8.2.0+11247+01f3c012.src.rpm aarch64: postgresql-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-contrib-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-contrib-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-debugsource-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-docs-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-docs-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-plperl-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-plperl-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-plpython3-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-plpython3-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-pltcl-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-pltcl-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-server-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-server-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-server-devel-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-server-devel-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-static-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-test-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-test-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-test-rpm-macros-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-upgrade-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-upgrade-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-upgrade-devel-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm postgresql-upgrade-devel-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.aarch64.rpm ppc64le: postgresql-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-contrib-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-contrib-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-debugsource-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-docs-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-docs-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-plperl-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-plperl-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-plpython3-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-plpython3-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-pltcl-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-pltcl-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-server-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-server-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-server-devel-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-server-devel-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-static-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-test-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-test-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-test-rpm-macros-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-upgrade-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-upgrade-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-upgrade-devel-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm postgresql-upgrade-devel-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.ppc64le.rpm s390x: postgresql-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-contrib-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-contrib-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-debugsource-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-docs-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-docs-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-plperl-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-plperl-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-plpython3-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-plpython3-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-pltcl-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-pltcl-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-server-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-server-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-server-devel-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-server-devel-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-static-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-test-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-test-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-test-rpm-macros-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-upgrade-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-upgrade-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-upgrade-devel-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm postgresql-upgrade-devel-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.s390x.rpm x86_64: postgresql-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-contrib-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-contrib-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-debugsource-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-docs-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-docs-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-plperl-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-plperl-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-plpython3-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-plpython3-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-pltcl-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-pltcl-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-server-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-server-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-server-devel-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-server-devel-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-static-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-test-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-test-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-test-rpm-macros-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-upgrade-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-upgrade-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-upgrade-devel-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm postgresql-upgrade-devel-debuginfo-10.17-1.module+el8.2.0+11247+01f3c012.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-32027 https://access.redhat.com/security/cve/CVE-2021-32028 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYMccg9zjgjWX9erEAQgFrRAApMH3xWzOWkB9eSKgoDJGOdi921x8l44D WNuw6TZmWZuabiSHW7F/Y5fQhfUV9uhHzZ0NCOkBHbqxlzck55YhXKdfXuqc11gk CSTAcR3gtGUC3duu5HAeqtgjDYCqZc7BBEdc3a6LmNDdO87t1a1Hq1eV9a5iotPR Yv19Djb5xVmxWy8MaJShnuTBnHd/70XT1vnXvqTcKLk+LO19U0jh+PRrf8p2cLGR tfhlC6Vs9c9TyLlrsWBtHTIi6u0cY8nKO8cloRySsquTedw2tF7FG3HPPh/zgDqg xvqSZd/+o53b1kbagvaiRaefn3evNt2GvL75SGvMTc4MZH/e6SlQpVrwi7phTcwf JWGeKvvMDMBA0Rinuqfr6sW3mchAbg8fgPvGXyQobs5pfBuvp+DvzT5fWZF8LvnA YpqZNT/MXzLqAcgUi1Mv298Kr8vqFcLt8/LUlSfljLEq1zL5YTqxspPSoWicaVF5 25cSqbs9vsPM9oo8zGGs4i0cMdW/SWENs+xXO+LgYfYNkBXysqdOzfK7gCnuzo54 QFTUzlBrLPU9kvo3Fp1wtqcvfB0Q9XjDWuKBGznHb2FKUd1F+7cTjuuu+zZ42qpz GSuAkDhbj64G6o9Bs6MlSaAsYGx3N2zB9PL/TdPRcr8ybxARYahS8yWVXqAvKRzA fVrqzuz/0l8=FDzq -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jun 14, 2021
•Important
Red Hat
100
security advisoryimportantsuseSUSE: 2019:2245-1 Important: Apache-Commons-Beanutils Classloader Threat
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for apache-commons-beanutils ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:2245-1 Rating: important References: #1146657 Cross-References: CVE-2019-10086 Affected Products: SUSE Linux Enterprise Module for Web Scripting 15-SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache-commons-beanutils fixes the following issues: Security issue fixed: - CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects (bsc#1146657). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Web Scripting 15-SP1: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP1-2019-2245=1 - SUSE Linux Enterprise Module for Web Scripting 15: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-2019-2245=1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2245=1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2019-2245=1 Package List: - SUSE Linux Enterprise Module for Web Scripting15-SP1 (noarch): apache-commons-beanutils-1.9.2-4.3.1 - SUSE Linux Enterprise Module for Web Scripting 15 (noarch): apache-commons-beanutils-1.9.2-4.3.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (noarch): apache-commons-beanutils-javadoc-1.9.2-4.3.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (noarch): apache-commons-beanutils-javadoc-1.9.2-4.3.1 References: https://www.suse.com/security/cve/CVE-2019-10086.html https://bugzilla.suse.com/1146657 _______________________________________________ sle-security-updates mailing list
Aug 28, 2019
•Important
SuSE
89
security advisoryFedoraDoSFedora 26: python-jsonrpclib Security Update For Electrum DoS
Depenency for Electrum that have a security issue in all the releases.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-92de33f3b9 2018-01-10 20:51:05.568058 --------------------------------------------------------------------------------Name : python-jsonrpclib Product : Fedora 26 Version : 0.3.1 Release : 1.fc26 URL : https://github.com/tcalmant/jsonrpclib/ Summary : JSON-RPC v2.0 client library for Python Description : This project is an implementation of the JSON-RPC v2.0 specification (backwards-compatible) as a client library, for Python 2.7 and Python 3. This version is a fork of jsonrpclib by Josh Marshall, usable with Pelix remote services. --------------------------------------------------------------------------------Update Information: Depenency for Electrum that have a security issue in all the releases. --------------------------------------------------------------------------------References: [ 1 ] Bug #1532555 - electrum: Unprotected JSON-RPC interface [fedora-26] https://bugzilla.redhat.com/show_bug.cgi?id=1532555 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade python-jsonrpclib' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jan 10, 2018
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!