Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":546,"type":"x","order":1,"pct":78.45,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.31,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.36,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -1 articles for you...
100

SUSE: 2025:01975-1 important: xwayland integer overflow issues

* bsc#1244082 * bsc#1244084 * bsc#1244085 * bsc#1244087 * bsc#1244089 . # Security update for xwayland Announcement ID: SUSE-SU-2025:01975-1 Release Date: 2025-06-17T15:28:53Z Rating: important References: * bsc#1244082 * bsc#1244084 * bsc#1244085 * bsc#1244087 * bsc#1244089 * bsc#1244090 Cross-References: * CVE-2025-49175 * CVE-2025-49176 * CVE-2025-49177 * CVE-2025-49178 * CVE-2025-49179 * CVE-2025-49180 CVSS scores: * CVE-2025-49175 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-49175 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2025-49175 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-49176 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-49176 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-49176 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2025-49177 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-49177 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-49177 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-49178 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-49178 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-49178 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-49179 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-49179 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-49179 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2025-49180 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-49180 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-49180 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082) * CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084) * CVE-2025-49177: Data leak in XFIXES Extension 6 (XFixesSetClientDisconnectMode) (bsc#1244085) * CVE-2025-49178: Unprocessed client request via bytes to ignore (bsc#1244087) * CVE-2025-49179: Integer overflow in X Record extension (bsc#1244089) * CVE-2025-49180: Integer overflow in RandR extension (RRChangeProviderProperty) (bsc#1244090) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2025-1975=1 ## Package List: * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * xwayland-debugsource-24.1.5-150700.3.3.1 * xwayland-debuginfo-24.1.5-150700.3.3.1 * xwayland-24.1.5-150700.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-49175.html * https://www.suse.com/security/cve/CVE-2025-49176.html * https://www.suse.com/security/cve/CVE-2025-49177.html * https://www.suse.com/security/cve/CVE-2025-49178.html * https://www.suse.com/security/cve/CVE-2025-49179.html * https://www.suse.com/security/cve/CVE-2025-49180.html * https://bugzilla.suse.com/show_bug.cgi?id=1244082 * https://bugzilla.suse.com/show_bug.cgi?id=1244084 * https://bugzilla.suse.com/show_bug.cgi?id=1244085 * https://bugzilla.suse.com/show_bug.cgi?id=1244087 *https://bugzilla.suse.com/show_bug.cgi?id=1244089 * https://bugzilla.suse.com/show_bug.cgi?id=1244090 . Xwayland's latest update addresses critical vulnerabilities, enhancing overall safety with multiple suggested setup techniques to elevate system robustness.. Xwayland Update, SUSE Security Patch, Important Vulnerability Fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 17, 2025 Important SuSE
219

Rocky Linux 8 RLSA-2022:7928 Important: Device-Mapper-Multipath Update

Important: device-mapper-multipath security update. {"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2022:7928","synopsis":"Important: device-mapper-multipath security update","severity":"SEVERITY_IMPORTANT","topic":"An update for device-mapper-multipath is now available for Rocky Linux 8.\nRocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","description":"The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2138959","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2138959","description":"CVE-2022-3787 device-mapper-multipath: Regression of CVE-2022-41974 fix in Red Hat Enterprise Linux"}],"cves":[{"name":"CVE-2022-3787","sourceBy":"Red Hat","sourceLink":"https:\/\/access.redhat.com\/hydra\/rest\/securitydata\/cve\/CVE-2022-3787.json","cvss3ScoringVector":"CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H","cvss3BaseScore":"8.4","cwe":"CWE-285"}],"references":[],"publishedAt":"2023-01-30T05:22:09.707228Z","rpms":{},"rebootSuggested":false,"buildReferences":[]}. Critical security enhancement for device-mapper-multipath in Rocky Linux classified as important. Discover insights on the CVE and the remedies provided.. Rocky Linux Update, Device-Mapper-Multipath Update, Security Issue, Device Manager. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 30, 2023 Important Rocky Linux
217

Oracle Linux 8 ELSA-2022-7928 Urgent: Device Mapper Multipath Patch

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-7928 https://linux.oracle.com/errata/ELSA-2022-7928.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: device-mapper-multipath-0.8.4-28.el8_7.1.x86_64.rpm device-mapper-multipath-libs-0.8.4-28.el8_7.1.i686.rpm device-mapper-multipath-libs-0.8.4-28.el8_7.1.x86_64.rpm kpartx-0.8.4-28.el8_7.1.x86_64.rpm libdmmp-0.8.4-28.el8_7.1.i686.rpm libdmmp-0.8.4-28.el8_7.1.x86_64.rpm device-mapper-multipath-devel-0.8.4-28.el8_7.1.i686.rpm device-mapper-multipath-devel-0.8.4-28.el8_7.1.x86_64.rpm aarch64: device-mapper-multipath-0.8.4-28.el8_7.1.aarch64.rpm device-mapper-multipath-libs-0.8.4-28.el8_7.1.aarch64.rpm kpartx-0.8.4-28.el8_7.1.aarch64.rpm libdmmp-0.8.4-28.el8_7.1.aarch64.rpm device-mapper-multipath-devel-0.8.4-28.el8_7.1.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates/device-mapper-multipath-0.8.4-28.el8_7.1.src.rpm Related CVEs: CVE-2022-3787 Description of changes: [0.8.4-28.1] - Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133995 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Security Announcement ELSA-2022-7928 provides critical enhancements for the device-mapper-multipath component, addressing various security vulnerabilities.. Oracle Linux Updates, Device Mapper, Multipath Security, Security Fixes. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Nov 24, 2022 Important Oracle
217

Oracle7: ELSA-2022-7186 Critical Update: Device-Mapper-Multipath

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-7186 https://linux.oracle.com/errata/ELSA-2022-7186.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: aarch64: device-mapper-multipath-0.4.9-136.0.1.el7_9.aarch64.rpm device-mapper-multipath-libs-0.4.9-136.0.1.el7_9.aarch64.rpm kpartx-0.4.9-136.0.1.el7_9.aarch64.rpm device-mapper-multipath-devel-0.4.9-136.0.1.el7_9.aarch64.rpm device-mapper-multipath-sysvinit-0.4.9-136.0.1.el7_9.aarch64.rpm libdmmp-0.4.9-136.0.1.el7_9.aarch64.rpm libdmmp-devel-0.4.9-136.0.1.el7_9.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/device-mapper-multipath-0.4.9-136.0.1.el7_9.src.rpm Related CVEs: CVE-2022-41974 Description of changes: [0.4.9-136.0.1] - mpathpersist: Fix Register and Ignore with 0x00 SARK [Orabug: 32696195] - mpathpersist: update prkeys file on changing registrations [Orabug: 32696195] - Keep upstream patch 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch * fix segfault with disable_changed_wwids for orabug 29469903 (This email address is being protected from spambots. You need JavaScript enabled to view it.) [0.4.9-136] - Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . The recent Oracle Linux patch ELSA-2022-7186 concerning device-mapper-multipath resolves significant security vulnerabilities.. Oracle Linux Update, Device Mapper, Security Patch, Multipath. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 27, 2022 Critical Oracle
217

Oracle Linux 9 ELSA-2022-7185 Critical: Device-Mapper Multipath Update

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-7185 https://linux.oracle.com/errata/ELSA-2022-7185.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: device-mapper-multipath-0.8.7-7.el9_0.1.x86_64.rpm device-mapper-multipath-libs-0.8.7-7.el9_0.1.i686.rpm device-mapper-multipath-libs-0.8.7-7.el9_0.1.x86_64.rpm kpartx-0.8.7-7.el9_0.1.x86_64.rpm device-mapper-multipath-devel-0.8.7-7.el9_0.1.i686.rpm device-mapper-multipath-devel-0.8.7-7.el9_0.1.x86_64.rpm aarch64: device-mapper-multipath-0.8.7-7.el9_0.1.aarch64.rpm device-mapper-multipath-libs-0.8.7-7.el9_0.1.aarch64.rpm kpartx-0.8.7-7.el9_0.1.aarch64.rpm device-mapper-multipath-devel-0.8.7-7.el9_0.1.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol9/SRPMS-updates/device-mapper-multipath-0.8.7-7.el9_0.1.src.rpm Related CVEs: CVE-2022-41974 Description of changes: [0.8.7-7.1] - Add 0044-multipathd-ignore-duplicated-multipathd-command-keys.patch - Resolves: bz #2133997 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 9 has implemented essential security enhancements for the device-mapper multipath module, resolving significant vulnerabilities. Discover further details here.. Oracle Linux, Device Mapper, Security Advisory, Important Update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 26, 2022 Critical Oracle
217

Oracle Linux 7: ELSA-2022-7186 Critical: Device-Mapper-Multipath Update

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-7186 https://linux.oracle.com/errata/ELSA-2022-7186.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: device-mapper-multipath-0.4.9-136.0.1.el7_9.x86_64.rpm device-mapper-multipath-devel-0.4.9-136.0.1.el7_9.i686.rpm device-mapper-multipath-devel-0.4.9-136.0.1.el7_9.x86_64.rpm device-mapper-multipath-libs-0.4.9-136.0.1.el7_9.i686.rpm device-mapper-multipath-libs-0.4.9-136.0.1.el7_9.x86_64.rpm device-mapper-multipath-sysvinit-0.4.9-136.0.1.el7_9.x86_64.rpm kpartx-0.4.9-136.0.1.el7_9.x86_64.rpm libdmmp-0.4.9-136.0.1.el7_9.i686.rpm libdmmp-0.4.9-136.0.1.el7_9.x86_64.rpm libdmmp-devel-0.4.9-136.0.1.el7_9.i686.rpm libdmmp-devel-0.4.9-136.0.1.el7_9.x86_64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/device-mapper-multipath-0.4.9-136.0.1.el7_9.src.rpm Related CVEs: CVE-2022-41974 Description of changes: [0.4.9-136.0.1] - mpathpersist: Fix Register and Ignore with 0x00 SARK [Orabug: 32696195] - mpathpersist: update prkeys file on changing registrations [Orabug: 32696195] - Keep upstream patch 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch * fix segfault with disable_changed_wwids for orabug 29469903 (This email address is being protected from spambots. You need JavaScript enabled to view it.) [0.4.9-136] - Add 0274-UP-no-duplicate-command-keys.patch - Resolves: bz #2134905 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Advisory ELSA-2023-8412 delivers essential enhancements for kernel packages. Discover further details.. Oracle Linux, Device Mapper, Security Update, Multipath Configuration. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 26, 2022 Critical Oracle
89

Fedora 9: 2009-3453 Moderate: Device-Mapper-Multipath Sock Fix

Fix insecure permissions on multipathd.sock (CVE-2009-0115). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-3453 2009-04-09 15:25:22 --------------------------------------------------------------------------------Name : device-mapper-multipath Product : Fedora 9 Version : 0.4.7 Release : 17.fc9 URL : http://christophe.varoqui.free.fr/ Summary : Tools to manage multipath devices using device-mapper Description : device-mapper-multipath provides tools to manage multipath devices by instructing the device-mapper multipath kernel module what to do. The tools are : * multipath : Scan the system for multipath devices and assemble them. * multipathd : Detects when paths fail and execs multipath to update things. --------------------------------------------------------------------------------Update Information: Fix insecure permissions on multipathd.sock (CVE-2009-0115) --------------------------------------------------------------------------------ChangeLog: * Tue Apr 7 2009 Milan Broz - 0.4.8-17 - Fix insecure permissions on multipathd.sock (CVE-2009-0115) * Mon Jun 23 2008 Benjamin Marzinski -0.4.7-16 - Fix for bz #451415 - /sbin/multipath.static in no longer a symlink to the non-static version. However, it still dynamically loads all libraries except libsysfs. libsysfs is now statically linked. * Wed May 21 2008 Benjamin Marzinski -0.4.7-15 - Switch multipath to check "subsystem" instead of "bus" - Make static versions of multipath and kpartx symlinks to non-static versions * Fri Feb 29 2008 Tom "spot" Callaway - 0.4.7-14 - fix sparc64 - fix license tag * Tue Feb 19 2008 Fedora Release Engineering - 0.4.7-13 - Autorebuild for GCC 4.3 * Wed Nov 14 2007 Benjamin Marzinski - 0.4.7-12 - Fixed the dist tag so building will work properly. --------------------------------------------------------------------------------References: [ 1 ] Bug #493330 -CVE-2009-0115 device-mapper-multipath: insecure permissions on multipathd.sock https://bugzilla.redhat.com/show_bug.cgi?id=493330 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update device-mapper-multipath' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Correction implemented to address vulnerable access rights concerning multipathd.sock within the device-mapper-multipath package for Fedora environments.. Device Mapper, Multipath Update, Fedora Security Fix. . LinuxSecurity.com Team

Calendar 2 Apr 09, 2009 Fedora
98

Red Hat: RHSA-2009-0411 Moderate: Device-Mapper-Multipath Access Issue

Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: device-mapper-multipath security update Advisory ID: RHSA-2009:0411-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:0411.html Issue date: 2009-04-07 CVE Names: CVE-2009-0115 ==================================================================== 1. Summary: Updated device-mapper-multipath packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: The device-mapper multipath packages provide tools to manage multipath devices by issuing instructions to the device-mapper multipath kernel module, and by managing the creation and removal of partitions for device-mapper devices. It was discovered that the multipathd daemon set incorrect permissions on the socket used to communicate with command line clients. An unprivileged, local user could use this flaw to send commands to multipathd, resulting in access disruptions to storage devices accessible via multiple paths and, possibly, file system corruption on these devices. (CVE-2009-0115) Users ofdevice-mapper-multipath are advised to upgrade to these updated packages, which contain a backported patch to resolve this issue. The multipathd service must be restarted for the changes to take effect. Important: the version of the multipathd daemon in Red Hat Enterprise Linux 5 has a known issue which may cause a machine to become unresponsive when the multipathd service is stopped. This issue is tracked in the Bugzilla bug #494582; a link is provided in the References section of this erratum. Until this issue is resolved, we recommend restarting the multipathd service by issuing the following commands in sequence: # killall -KILL multipathd # service multipathd restart 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 493330 - CVE-2009-0115 device-mapper-multipath: insecure permissions on multipathd.sock 6. Package List: Red Hat Enterprise Linux AS version 4: Source: i386: device-mapper-multipath-0.4.5-31.el4_7.1.i386.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.i386.rpm ia64: device-mapper-multipath-0.4.5-31.el4_7.1.ia64.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.ia64.rpm ppc: device-mapper-multipath-0.4.5-31.el4_7.1.ppc.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.ppc.rpm s390: device-mapper-multipath-0.4.5-31.el4_7.1.s390.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.s390.rpm s390x: device-mapper-multipath-0.4.5-31.el4_7.1.s390x.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.s390x.rpm x86_64: device-mapper-multipath-0.4.5-31.el4_7.1.x86_64.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.x86_64.rpm Red Hat Enterprise Linux Desktop version4: Source: i386: device-mapper-multipath-0.4.5-31.el4_7.1.i386.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.i386.rpm x86_64: device-mapper-multipath-0.4.5-31.el4_7.1.x86_64.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: device-mapper-multipath-0.4.5-31.el4_7.1.i386.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.i386.rpm ia64: device-mapper-multipath-0.4.5-31.el4_7.1.ia64.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.ia64.rpm x86_64: device-mapper-multipath-0.4.5-31.el4_7.1.x86_64.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.x86_64.rpm Red Hat Enterprise Linux WS version 4: Source: i386: device-mapper-multipath-0.4.5-31.el4_7.1.i386.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.i386.rpm ia64: device-mapper-multipath-0.4.5-31.el4_7.1.ia64.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.ia64.rpm x86_64: device-mapper-multipath-0.4.5-31.el4_7.1.x86_64.rpm device-mapper-multipath-debuginfo-0.4.5-31.el4_7.1.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: device-mapper-multipath-0.4.7-23.el5_3.2.i386.rpm device-mapper-multipath-debuginfo-0.4.7-23.el5_3.2.i386.rpm kpartx-0.4.7-23.el5_3.2.i386.rpm x86_64: device-mapper-multipath-0.4.7-23.el5_3.2.x86_64.rpm device-mapper-multipath-debuginfo-0.4.7-23.el5_3.2.x86_64.rpm kpartx-0.4.7-23.el5_3.2.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: device-mapper-multipath-0.4.7-23.el5_3.2.i386.rpm device-mapper-multipath-debuginfo-0.4.7-23.el5_3.2.i386.rpm kpartx-0.4.7-23.el5_3.2.i386.rpm ia64: device-mapper-multipath-0.4.7-23.el5_3.2.ia64.rpm device-mapper-multipath-debuginfo-0.4.7-23.el5_3.2.ia64.rpm kpartx-0.4.7-23.el5_3.2.ia64.rpm ppc: device-mapper-multipath-0.4.7-23.el5_3.2.ppc.rpm device-mapper-multipath-debuginfo-0.4.7-23.el5_3.2.ppc.rpm kpartx-0.4.7-23.el5_3.2.ppc.rpm s390x: device-mapper-multipath-0.4.7-23.el5_3.2.s390x.rpm device-mapper-multipath-debuginfo-0.4.7-23.el5_3.2.s390x.rpm kpartx-0.4.7-23.el5_3.2.s390x.rpm x86_64: device-mapper-multipath-0.4.7-23.el5_3.2.x86_64.rpm device-mapper-multipath-debuginfo-0.4.7-23.el5_3.2.x86_64.rpm kpartx-0.4.7-23.el5_3.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2009-0115 https://access.redhat.com/security/updates/classification#moderate https://bugzilla.redhat.com/show_bug.cgi?id=494582 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2009 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFJ26TjXlSAg2UNWIIRAnW7AJ4tUnBrI4MY67KDkm1s/8otbCkBIgCeIG5L k0Qd+xIu8PF3oLGHw61yKbE=AdN9 -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . A significant security patch resolves socket access concerns in device-mapper-multipath for CentOS Stream.. device-mapper,multipath,security,red hat. . LinuxSecurity.com Team

Calendar 2 Apr 07, 2009 Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":546,"type":"x","order":1,"pct":78.45,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.31,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.36,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here