Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisoryFedorasecurity fixFedora 38: FEDORA-2023-8a2d9c4a89 Critical: netstat Buffer Overflow
Update to 3.14. Security fix for CVE-2023-38403. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-5f3b4c0b97 2023-07-29 01:19:19.579526 -------------------------------------------------------------------------------- Name : iperf3 Product : Fedora 37 Version : 3.14 Release : 1.fc37 URL : https://github.com/esnet/iperf Summary : Measurement tool for TCP/UDP bandwidth performance Description : Iperf is a tool to measure maximum TCP bandwidth, allowing the tuning of various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, data-gram loss. -------------------------------------------------------------------------------- Update Information: Update to 3.14. Security fix for CVE-2023-38403 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 18 2023 Jonathan Wright - 3.14-1 - update to 3.14 rhbz#2183634 - Security fix for CVE-2023-38403 rhbz#2222204 rhbz#2223495 * Mon Feb 20 2023 Jonathan Wright - 3.13-1 - update to 3.13 rhbz#2170949 * Thu Jan 19 2023 Fedora Release Engineering - 3.12-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Mon Dec 12 2022 Jonathan Wright - 3.12-1 - Update to 3.12 rhbz#2131418 * Tue Sep 27 2022 Davide Cavalca - 3.11-3 - Backport PR#1278: Report number of reorder_seen. Fixes: rhbz#2063959 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2223495 - TRIAGE iperf3: memory allocation hazard and crash [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2223495 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-5f3b4c0b97' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 29, 2023
•Critical
Fedora
89
security advisorysoftware updateFedoraFedora 37: FEDORA-2022-b2be5ddbb8 Moderate: Enhancements for Cacti-Spine
- Update to 1.2.22. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-b2be5ddbb8 2022-11-10 22:04:44.632893 --------------------------------------------------------------------------------Name : cacti-spine Product : Fedora 37 Version : 1.2.22 Release : 1.fc37 URL : Summary : Threaded poller for Cacti written in C Description : Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance. --------------------------------------------------------------------------------Update Information: - Update to 1.2.22 --------------------------------------------------------------------------------ChangeLog: * Sat Oct 22 2022 Morten Stevens - 1.2.22-1 - Update to 1.2.22 --------------------------------------------------------------------------------References: [ 1 ] Bug #2118247 - cacti-1.2.22 is available https://bugzilla.redhat.com/show_bug.cgi?id=2118247 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-b2be5ddbb8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Nov 10, 2022
Fedora
172
security advisorydenial of serviceinformation leakUbuntu 12.10 USN-1945-1 Critical: Linux Kernel OMAP4 Denial Of Service
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-1945-1 September 06, 2013 linux-ti-omap4 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.10 Summary: Several security issues were fixed in the kernel. Software Description: - linux-ti-omap4: Linux kernel for OMAP4 Details: A denial of service flaw was discovered in the Btrfs file system in the Linux kernel. A local user could cause a denial of service by creating a large number of files with names that have the same CRC32 hash value. (CVE-2012-5374) A denial of service flaw was discovered in the Btrfs file system in the Linux kernel. A local user could cause a denial of service (prevent file creation) for a victim, by creating a file with a specific CRC32C hash value in a directory important to the victim. (CVE-2012-5375) Vasily Kulikov discovered a flaw in the Linux Kernel's perf tool that allows for privilege escalation. A local user could exploit this flaw to run commands as root when using the perf tool. (CVE-2013-1060) A flaw was discovered in the Xen subsystem of the Linux kernel when it provides read-only access to a disk that supports TRIM or SCSI UNMAP to a guest OS. A privileged user in the guest OS could exploit this flaw to destroy data on the disk, even though the guest OS should not be able to write to the disk. (CVE-2013-2140) A flaw was discovered in the Linux kernel when an IPv6 socket is used to connect to an IPv4 destination. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2013-2232) An information leak was discovered in the IPSec key_socket implementation in the Linux kernel. An local user could exploit this flaw to examine potentially sensitive information in kernel memory. (CVE-2013-2234) Hannes FredericSowa discovered a flaw in setsockopt UDP_CORK option in the Linux kernel's IPv6 stack. A local user could exploit this flaw to cause a denial of service (system crash). (CVE-2013-4162) Hannes Frederic Sowa discovered a flaw in the IPv6 subsystem of the Linux kernel when the IPV6_MTU setsockopt option has been specified in combination with the UDP_CORK option. A local user could exploit this flaw to cause a denial of service (system crash). (CVE-2013-4163) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.10: linux-image-3.5.0-232-omap4 3.5.0-232.48 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-1945-1 CVE-2012-5374, CVE-2012-5375, CVE-2013-1060, CVE-2013-2140, CVE-2013-2232, CVE-2013-2234, CVE-2013-4162, CVE-2013-4163 Package Information: https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.5.0-232.48 . Ubuntu Security Notice USN-1945-1 addresses kernel vulnerabilities in linux-ti-omap4 that may allow unauthorized access, stressing urgent patch application.. Linux Kernel Security, OMAP4 Denial Services, Ubuntu Kernel Issues. . Severity: Critical. LinuxSecurity.com Team
Sep 06, 2013
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!