Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
217

Oracle Linux 8 ELSA-2022-0290 Critical: Parfait Buffer Overflow

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-0290 https://linux.oracle.com/errata/ELSA-2022-0290.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: parfait-0.5.4-4.module+el8.5.0+20480+407d1823.noarch.rpm parfait-examples-0.5.4-4.module+el8.5.0+20480+407d1823.noarch.rpm parfait-javadoc-0.5.4-4.module+el8.5.0+20480+407d1823.noarch.rpm pcp-parfait-agent-0.5.4-4.module+el8.5.0+20480+407d1823.noarch.rpm si-units-0.6.5-2.module+el8+5163+abb6ece5.noarch.rpm si-units-javadoc-0.6.5-2.module+el8+5163+abb6ece5.noarch.rpm unit-api-1.0-5.module+el8+5163+abb6ece5.noarch.rpm unit-api-javadoc-1.0-5.module+el8+5163+abb6ece5.noarch.rpm uom-lib-1.0.1-6.module+el8+5163+abb6ece5.noarch.rpm uom-lib-javadoc-1.0.1-6.module+el8+5163+abb6ece5.noarch.rpm uom-parent-1.0.3-3.module+el8+5163+abb6ece5.noarch.rpm uom-se-1.0.4-3.module+el8+5163+abb6ece5.noarch.rpm uom-se-javadoc-1.0.4-3.module+el8+5163+abb6ece5.noarch.rpm uom-systems-0.7-1.module+el8+5163+abb6ece5.noarch.rpm uom-systems-javadoc-0.7-1.module+el8+5163+abb6ece5.noarch.rpm aarch64: parfait-0.5.4-4.module+el8.5.0+20480+407d1823.noarch.rpm parfait-examples-0.5.4-4.module+el8.5.0+20480+407d1823.noarch.rpm parfait-javadoc-0.5.4-4.module+el8.5.0+20480+407d1823.noarch.rpm pcp-parfait-agent-0.5.4-4.module+el8.5.0+20480+407d1823.noarch.rpm si-units-0.6.5-2.module+el8+5163+abb6ece5.noarch.rpm si-units-javadoc-0.6.5-2.module+el8+5163+abb6ece5.noarch.rpm unit-api-1.0-5.module+el8+5163+abb6ece5.noarch.rpm unit-api-javadoc-1.0-5.module+el8+5163+abb6ece5.noarch.rpm uom-lib-1.0.1-6.module+el8+5163+abb6ece5.noarch.rpm uom-lib-javadoc-1.0.1-6.module+el8+5163+abb6ece5.noarch.rpm uom-parent-1.0.3-3.module+el8+5163+abb6ece5.noarch.rpm uom-se-1.0.4-3.module+el8+5163+abb6ece5.noarch.rpm uom-se-javadoc-1.0.4-3.module+el8+5163+abb6ece5.noarch.rpm uom-systems-0.7-1.module+el8+5163+abb6ece5.noarch.rpm uom-systems-javadoc-0.7-1.module+el8+5163+abb6ece5.noarch.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates/parfait-0.5.4-4.module+el8.5.0+20480+407d1823.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates/si-units-0.6.5-2.module+el8+5163+abb6ece5.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates/unit-api-1.0-5.module+el8+5163+abb6ece5.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates/uom-lib-1.0.1-6.module+el8+5163+abb6ece5.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates/uom-parent-1.0.3-3.module+el8+5163+abb6ece5.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates/uom-se-1.0.4-3.module+el8+5163+abb6ece5.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates/uom-systems-0.7-1.module+el8+5163+abb6ece5.src.rpm Related CVEs: CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 Description of changes: parfait [0.5.4-4] - Obsolete (remove) vulnerable versions of log4j12 (NVR < 1.2.17-23) when upgrading to parfait 0.5.4-4 (CVE-2021-4104) [0.5.4-3] - Drop all code explicitly using Log4J (BZ 2032158) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 8 enhancements target security issues. Major threats patched. Discover additional information.. Oracle Linux, Parfait Update, Security Advisory, Critical Threats, Important Security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 27, 2022 Critical Oracle
98

Red Hat Enterprise Linux 8.4 RHSA-2022:0289-01 Critical: Remote Code Risk

An update for the parfait:0.5 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: parfait:0.5 security update Advisory ID: RHSA-2022:0289-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:0289 Issue date: 2022-01-26 CVE Names: CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 ==================================================================== 1. Summary: An update for the parfait:0.5 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v.8.4) - noarch 3. Description: Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs. It provides APIs for extracting performance metrics from the JVM and other sources. It interfaces to Performance Co-Pilot (PCP) using the Memory Mapped Value (MMV) machinery for extremely lightweight instrumentation. Security Fix(es): * log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender (CVE-2022-23305) * log4j: Unsafe deserialization flaw in Chainsaw log viewer (CVE-2022-23307) * log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender (CVE-2021-4104) * log4j: Remote code execution in Log4j 1.x when applicationis configured to use JMSSink (CVE-2022-23302) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2031667 - CVE-2021-4104 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender 2041949 - CVE-2022-23302 log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink 2041959 - CVE-2022-23305 log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender 2041967 - CVE-2022-23307 log4j: Unsafe deserialization flaw in Chainsaw log viewer 6. Package List: Red Hat Enterprise Linux AppStream EUS(v.8.4): Source: parfait-0.5.4-4.module+el8.4.0+13998+1b70e2b7.src.rpm si-units-0.6.5-2.module+el8+2463+615f6896.src.rpm unit-api-1.0-5.module+el8+2463+615f6896.src.rpm uom-lib-1.0.1-6.module+el8+2463+615f6896.src.rpm uom-parent-1.0.3-3.module+el8+2463+615f6896.src.rpm uom-se-1.0.4-3.module+el8+2463+615f6896.src.rpm uom-systems-0.7-1.module+el8+2463+615f6896.src.rpm noarch: parfait-0.5.4-4.module+el8.4.0+13998+1b70e2b7.noarch.rpm parfait-examples-0.5.4-4.module+el8.4.0+13998+1b70e2b7.noarch.rpm parfait-javadoc-0.5.4-4.module+el8.4.0+13998+1b70e2b7.noarch.rpm pcp-parfait-agent-0.5.4-4.module+el8.4.0+13998+1b70e2b7.noarch.rpm si-units-0.6.5-2.module+el8+2463+615f6896.noarch.rpm si-units-javadoc-0.6.5-2.module+el8+2463+615f6896.noarch.rpm unit-api-1.0-5.module+el8+2463+615f6896.noarch.rpm unit-api-javadoc-1.0-5.module+el8+2463+615f6896.noarch.rpm uom-lib-1.0.1-6.module+el8+2463+615f6896.noarch.rpm uom-lib-javadoc-1.0.1-6.module+el8+2463+615f6896.noarch.rpm uom-parent-1.0.3-3.module+el8+2463+615f6896.noarch.rpm uom-se-1.0.4-3.module+el8+2463+615f6896.noarch.rpm uom-se-javadoc-1.0.4-3.module+el8+2463+615f6896.noarch.rpm uom-systems-0.7-1.module+el8+2463+615f6896.noarch.rpm uom-systems-javadoc-0.7-1.module+el8+2463+615f6896.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-4104 https://access.redhat.com/security/cve/CVE-2022-23302 https://access.redhat.com/security/cve/CVE-2022-23305 https://access.redhat.com/security/cve/CVE-2022-23307 https://access.redhat.com/security/updates/classification#important https://access.redhat.com/security/vulnerabilities/RHSB-2021-009 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYfGCutzjgjWX9erEAQiE6RAAiOXk4/PwLzAZv08JsWyU4lqBYvm3wlb1 HZlWUXkuXQeKIQQ+znKhv+VvSmruDrptSoRGaLE2xvxW+QNzKYK+nR/+zQpodRGw SlNm7197OgOC5i2E242pYR+4G9CY53stcudfzi9QjsdY1In7UJXlkxTVxgxwgm0R mwqgsWoX33/lkH621Hp3BV9awfgZH0HDaLQBKJVFuX3LCGtlgay8vmWZT6+BQ4F2 FWw9MBW/+S/pTAvfZz23JvJ7/GOC0PdtC7N5saoU0Mp887g5736MSQCSLZ+MiZhI +r/pW8Bzj5EiFgPPv/KpmgdHcwTYlromCTRQf2leIb69b3oX0UxyhLd3PtaQEkHu TdyHCZUA0Cwq4vhTp6darBX64D5FX0vbriEsLkbXmLIk3xW7no071t5QlFtk0BmA Gpo9KHxbQEn9d5ZOztAdvYc7I2fclM6Nz9T4zyO0m/MFmjooOl/w2Z6oNy0pPqIO 71gbCaiesaKV7wG0qtmzIu2Y/d9RqH9Hnja73f8GpJF7eF9680P/fjSQ29tEzfWD wDZ+kZfAaV13j4VxI2N6SEokTE5mqwWEeB6CxChSQUsL/saKMgOT/Pv0ap/5KSJI K2/mrxndhXJJ8ZXBV/AVv0UsUM/LB3PpkAstvotHSNh4cDWDNce6mvAjPw+BroGt apALW/8Bdn8=G/h3 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu's essential patch for beta:1.3 module resolves severe vulnerabilities. Implement updates to safeguard your environment.. Red Hat Security, Parfait Module, Remote Code Execution, Log4j Issues. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 26, 2022 Important Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here