Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 533
Alerts This Week
Warning Icon 1 533

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -8 articles for you...
89

Fedora 24: FEDORA-2016-6ab2d29fba Critical: npm Man-In-The-Middle Flaw

Update Node.js to the 5.x stable branch This update also includes a fix for a man-in-the-middle vulnerability in npm.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-6ab2d29fba 2016-04-06 14:05:38.729188 -------------------------------------------------------------------------------- Name : nodejs-libxmljs Product : Fedora 24 Version : 0.17.1 Release : 4.fc24 URL : https://github.com/libxmljs/libxmljs Summary : Node.js module that provides libxml bindings for the v8 javascript engine Description : Node.js module that provides libxml bindings for the v8 javascript engine. -------------------------------------------------------------------------------- Update Information: Update Node.js to the 5.x stable branch This update also includes a fix for a man-in-the-middle vulnerability in npm. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1300103 - nodejs-bl-1.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1300103 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update nodejs-libxmljs' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Fedora 24's latest Node.js enhancement addresses npm's vulnerability to man-in-the-middle attacks. Update your system and apply necessary patches using yum update for nodejs-libxmljs.. FedoraSecurity Update, NodeJS Man-in-the-middle Fix, npm Vulnerability Patch, System Update Guide, NodeJS LibxmlJS Fix. . LinuxSecurity.com Team

Calendar%202 Apr 06, 2016 Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200