Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian LTS openssl Important Use-After-Free NULL Pointer Issues DLA-4624-1

Calendar White Jun 09, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 alsa-lib Important Denial of Service Fix USN-8044-2

Calendar White Jun 09, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS node-shell-quote Important Denial of Service CVE-2026-9277

Calendar White Jun 09, 2026
Important
Mageia Large Esm H800
Mageia

Mageia 9 Suricata Critical Performance Security Issues MGASA-2026-0181

Calendar White Jun 09, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia 9 PackageKit Important TOCTOU Race Escalation CVE-2026-41651

Calendar White Jun 09, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 9 Unbound Critical Remote Code Execution Advisory 2026-0034

Calendar White Jun 09, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 LTS Netatalk Multiple Security Issues USN-8395-1

Calendar White Jun 09, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mingw-objfw 1.5.5 Update Security Fix FEDORA-2026-de23fedf3e

Calendar White Jun 08, 2026
Fedora Large Esm H900
Fedora

Fedora 43 objfw Important Update 1.5.5 Bug Fixes June 2026

Calendar White Jun 08, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisoryman-in-the-middlecertificate trust

Scientific Linux SL6: Important NSS and NSPR Update Against Attack

Important: nss, nss-util, and nspr security, bug fix, . Date: Fri, 1 Feb 2013 09:47:45 -0600 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Important: nss, nss-util, and nspr on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Important: nss, nss-util, and nspr security, bug fix, and enhancement update Issue Date: 2013-01-31 CVE Numbers: None -- It was found that a Certificate Authority (CA) mis-issued two intermediate certificates to customers. These certificates could be used to launch man-in-the-middle attacks. This update renders those certificates as untrusted. This covers all uses of the certificates, including SSL, S/MIME, and code signing. Note: This fix only applies to applications using the NSS Builtin Object Token. It does not render the certificates untrusted for applications that use the NSS library, but do not use the NSS Builtin Object Token. In addition, the nss package has been upgraded to upstream version 3.13.6, the nss-util package has been upgraded to upstream version 3.13.6, and the nspr package has been upgraded to upstream version 4.9.2. These updates provide a number of bug fixes and enhancements over the previous versions. After installing this update, applications using NSS, NSPR, or nss-util must be restarted for this update to take effect. -- SL6 x86_64 nspr-4.9.2-0.el6_3.1.i686.rpm nspr-4.9.2-0.el6_3.1.x86_64.rpm nspr-debuginfo-4.9.2-0.el6_3.1.i686.rpm nspr-debuginfo-4.9.2-0.el6_3.1.x86_64.rpm nss-3.13.6-2.el6_3.i686.rpm nss-3.13.6-2.el6_3.x86_64.rpm nss-debuginfo-3.13.6-2.el6_3.i686.rpm nss-debuginfo-3.13.6-2.el6_3.x86_64.rpm nss-sysinit-3.13.6-2.el6_3.x86_64.rpm nss-tools-3.13.6-2.el6_3.x86_64.rpm nss-util-3.13.6-1.el6_3.i686.rpm nss-util-3.13.6-1.el6_3.x86_64.rpm nss-util-debuginfo-3.13.6-1.el6_3.i686.rpm nss-util-debuginfo-3.13.6-1.el6_3.x86_64.rpm nspr-devel-4.9.2-0.el6_3.1.i686.rpm nspr-devel-4.9.2-0.el6_3.1.x86_64.rpm nss-devel-3.13.6-2.el6_3.i686.rpm nss-devel-3.13.6-2.el6_3.x86_64.rpm nss-pkcs11-devel-3.13.6-2.el6_3.i686.rpm nss-pkcs11-devel-3.13.6-2.el6_3.x86_64.rpm nss-util-devel-3.13.6-1.el6_3.i686.rpm nss-util-devel-3.13.6-1.el6_3.x86_64.rpm i386 nspr-4.9.2-0.el6_3.1.i686.rpm nspr-debuginfo-4.9.2-0.el6_3.1.i686.rpm nss-3.13.6-2.el6_3.i686.rpm nss-debuginfo-3.13.6-2.el6_3.i686.rpm nss-sysinit-3.13.6-2.el6_3.i686.rpm nss-tools-3.13.6-2.el6_3.i686.rpm nss-util-3.13.6-1.el6_3.i686.rpm nss-util-debuginfo-3.13.6-1.el6_3.i686.rpm nspr-devel-4.9.2-0.el6_3.1.i686.rpm nss-devel-3.13.6-2.el6_3.i686.rpm nss-pkcs11-devel-3.13.6-2.el6_3.i686.rpm nss-util-devel-3.13.6-1.el6_3.i686.rpm - Scientific Linux Development Team . Crucial revision tackles ISS encryption certificate validation flaws to strengthen defenses against interception threats.. NSS Update, NSPR Patch, Scientific Linux Security, Certificate Trust, System Security. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 01, 2013 •Important Scientific Linux
200
Ls Advisories Scientific Esm H240
Price Tag 1security advisoryModeratenss update

Scientific Linux: Moderate NSS, NSPR Update 09-58-50 Critical SSL Fix

Moderate: nss, nss-util, and nspr security, bug fix, and enhancement update. Date: Mon, 9 Jul 2012 09:58:50 -0500 Reply-To: This email address is being protected from spambots. You need JavaScript enabled to view it. Sender: Security Errata for Scientific Linux From: Patrick Riehecky Subject: Security ERRATA Moderate: nss, nss-util, and nspr on SL6.x i386/x86_64 Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. Synopsis: Moderate: nss, nss-util, and nspr security, bug fix, and enhancement update Issue Date: 2012-06-20 Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime (NSPR) provides platform independence for non-GUI operating system facilities. It was found that a Certificate Authority (CA) issued a subordinate CA certificate to its customer, that could be used to issue certificates for any name. This update renders the subordinate CA certificate as untrusted. Note: This fix only applies to applications using the NSS Builtin Object Token. It does not render the certificates untrusted for applications that use the NSS library, but do not use the NSS Builtin Object Token. The nspr package has been upgraded to upstream version 4.9, which provides a number of bug fixes and enhancements over the previous version. The nss-util package has been upgraded to upstream version 3.13.3, which provides a number of bug fixes and enhancements over the previous version. The nss package has been upgraded to upstream version 3.13.3, which provides numerous bug fixes and enhancements over the previous version. In particular, SSL 2.0 is now disabled by default, support for SHA-224 has been added, PORT_ErrorToString and PORT_ErrorToName now return the error message and symbolic name of an NSS error code, and NSS_GetVersion now returns the NSS version string. These updated nss, nss-util, and nspr packages also provide fixes for the following bugs: * A PEM module internal function did not clean up memory when detecting a non-existent file name. Consequently, memoryleaks in client code occurred. The code has been improved to deallocate such temporary objects and as a result the reported memory leakage is gone. * Recent changes to NSS re-introduced a problem where applications could not use multiple SSL client certificates in the same process. Therefore, any attempt to run commands that worked with multiple SSL client certificates, such as the "yum repolist" command, resulted in a re-negotiation handshake failure. With this update, a revised patch correcting this problem has been applied to NSS, and using multiple SSL client certificates in the same process is now possible again. * The PEM module did not fully initialize newly constructed objects with function pointers set to NULL. Consequently, a segmentation violation in libcurl was sometimes experienced while accessing a package repository. With this update, the code has been changed to fully initialize newly allocated objects. As a result, updates can now be installed without problems. * A lack-of-robustness flaw caused some administration servers to terminate unexpectedly because the mod_nss module made nss calls before initializing nss as per the documented API. With this update, nss protects itself against being called before it has been properly initialized by the caller. * Compilation errors occurred with some compilers when compiling code against NSS 3.13.1. The following error message was displayed: pkcs11n.h:365:26: warning: "__GNUC_MINOR" is not defined An upstream patch has been applied to improve the code and the problem no longer occurs. * Unexpected terminations were reported in the messaging daemon (qpidd) included in Red Hat Enterprise MRG after a recent update to nss. This occurred because qpidd made nss calls before initializing nss. These updated packages prevent qpidd and other affected processes that call nss without initializing as mandated by the API from crashing. Users of NSS, NSPR, and nss-util are advised to upgrade to these updated packages, which fix these issues and add theseenhancements. After installing this update, applications using NSS, NSPR, or nss-util must be restarted for this update to take effect. SL6: i386 nspr-4.9-1.el6.i686.rpm nspr-debuginfo-4.9-1.el6.i686.rpm nspr-devel-4.9-1.el6.i686.rpm nss-3.13.3-6.el6.i686.rpm nss-debuginfo-3.13.3-6.el6.i686.rpm nss-devel-3.13.3-6.el6.i686.rpm nss-pkcs11-devel-3.13.3-6.el6.i686.rpm nss-sysinit-3.13.3-6.el6.i686.rpm nss-tools-3.13.3-6.el6.i686.rpm nss-util-3.13.3-2.el6.i686.rpm nss-util-debuginfo-3.13.3-2.el6.i686.rpm nss-util-devel-3.13.3-2.el6.i686.rpm x86_64 nspr-4.9-1.el6.i686.rpm nspr-4.9-1.el6.x86_64.rpm nspr-debuginfo-4.9-1.el6.i686.rpm nspr-debuginfo-4.9-1.el6.x86_64.rpm nspr-devel-4.9-1.el6.i686.rpm nspr-devel-4.9-1.el6.x86_64.rpm nss-3.13.3-6.el6.i686.rpm nss-3.13.3-6.el6.x86_64.rpm nss-debuginfo-3.13.3-6.el6.i686.rpm nss-debuginfo-3.13.3-6.el6.x86_64.rpm nss-devel-3.13.3-6.el6.i686.rpm nss-devel-3.13.3-6.el6.x86_64.rpm nss-pkcs11-devel-3.13.3-6.el6.i686.rpm nss-pkcs11-devel-3.13.3-6.el6.x86_64.rpm nss-sysinit-3.13.3-6.el6.x86_64.rpm nss-tools-3.13.3-6.el6.x86_64.rpm nss-util-3.13.3-2.el6.i686.rpm nss-util-3.13.3-2.el6.x86_64.rpm nss-util-debuginfo-3.13.3-2.el6.i686.rpm nss-util-debuginfo-3.13.3-2.el6.x86_64.rpm nss-util-devel-3.13.3-2.el6.i686.rpm nss-util-devel-3.13.3-2.el6.x86_64.rpm - Scientific Linux Development Team . Improvements for OpenSSL, libssl, and libcrypto resolve vulnerabilities and boost TLS functionality on CentOS systems.. NSS Upgrade, NSPR Security, Scientific Linux Patch, SSL Improvement. . LinuxSecurity.com Team

Calendar 2 Jul 09, 2012 Scientific Linux
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here