Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
100
security advisorydenial of servicecode executionSUSE: 2016:2416-1 Important: Pidgin Update - Multiple Issues Resolved
An update that fixes 5 vulnerabilities is now available. An update that fixes 5 vulnerabilities is now available. An update that fixes 5 vulnerabilities is now available.. SUSE Security Update: Security update for pidgin ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:2416-1 Rating: important References: #991691 #991709 #991711 #991712 #991715 Cross-References: CVE-2016-2367 CVE-2016-2370 CVE-2016-2371 CVE-2016-2372 CVE-2016-2373 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for pidgin fixes the following issues: Security issues fixed: - CVE-2016-2367: Fixed a MXIT Avatar Length Memory Disclosure Vulnerability (bsc#991715). - CVE-2016-2370: Fixed a MXIT Custom Resource Denial of Service Vulnerability (bsc#991712). - CVE-2016-2371: Fixed a MXIT Extended Profiles Code Execution Vulnerability (bsc#991691). - CVE-2016-2372: Fixed a MXIT File Transfer Length Memory Disclosure Vulnerability (bsc#991711). - CVE-2016-2373: Fixed a MXIT Contact Mood Denial of Service Vulnerability (bsc#991709) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-pidgin-12767=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-pidgin-12767=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): finch-2.6.6-0.29.1 finch-devel-2.6.6-0.29.1 libpurple-2.6.6-0.29.1 libpurple-devel-2.6.6-0.29.1 libpurple-lang-2.6.6-0.29.1 pidgin-2.6.6-0.29.1 pidgin-devel-2.6.6-0.29.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): pidgin-debuginfo-2.6.6-0.29.1 pidgin-debugsource-2.6.6-0.29.1 References: https://www.suse.com/security/cve/CVE-2016-2367.html https://www.suse.com/security/cve/CVE-2016-2370.html https://www.suse.com/security/cve/CVE-2016-2371.html https://www.suse.com/security/cve/CVE-2016-2372.html https://www.suse.com/security/cve/CVE-2016-2373.html https://bugzilla.suse.com/991691 https://bugzilla.suse.com/991709 https://bugzilla.suse.com/991711 https://bugzilla.suse.com/991712 https://bugzilla.suse.com/991715 . SUSE has rolled out a security patch for pidgin addressing several vulnerabilities, including those that could lead to denial of service and memory leakage.. SUSE Security Update,Pidgin Software,SUSE Updates,Security Fixes. . Severity: Important. LinuxSecurity.com Team
Sep 29, 2016
•Important
SuSE
98
security advisorybug fixRed Hat Enterprise LinuxRed Hat Enterprise Linux Low Advisory RHSA-2011:0616-01 Pidgin YMSG Flaw
Updated pidgin packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Low: pidgin security and bug fix update Advisory ID: RHSA-2011:0616-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:0616.html Issue date: 2011-05-19 CVE Names: CVE-2011-1091 ==================================================================== 1. Summary: Updated pidgin packages that fix multiple security issues and various bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Multiple NULL pointer dereference flaws were found in the way the Pidgin Yahoo! Messenger Protocol plug-in handled malformed YMSG packets. A remote attacker could use these flaws to crash Pidgin via a specially-crafted notification message. (CVE-2011-1091) Red Hat would like to thank the Pidgin project for reporting these issues. Upstream acknowledges Marius Wachtler as the original reporter. This update also fixes the following bugs: * Previous versions of the pidgin package did notproperly clear certain data structures used in libpurple/cipher.c when attempting to free them. Partial information could potentially be extracted from the incorrectly cleared regions of the previously freed memory. With this update, data structures are properly cleared when freed. (BZ#684685) * This erratum upgrades Pidgin to upstream version 2.7.9. For a list of all changes addressed in this upgrade, refer to http://developer.pidgin.im/wiki/ChangeLog (BZ#616917) * Some incomplete translations for the kn_IN and ta_IN locales have been corrected. (BZ#633860, BZ#640170) Users of pidgin should upgrade to these updated packages, which resolve these issues. Pidgin must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (https://bugzilla.redhat.com/): 633860 - [kn_IN] Translation is not complete, untranslated message in Screenshot 640170 - [ta_IN] Translation need to review for "Add Account" 683031 - CVE-2011-1091 Pidgin: Multiple NULL pointer dereference flaws in Yahoo protocol plug-in 684685 - Cipher API information disclosure in pidgin 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: i386: libpurple-2.7.9-3.el6.i686.rpm pidgin-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm x86_64: libpurple-2.7.9-3.el6.i686.rpm libpurple-2.7.9-3.el6.x86_64.rpm pidgin-2.7.9-3.el6.x86_64.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v.6): Source: i386: finch-2.7.9-3.el6.i686.rpm finch-devel-2.7.9-3.el6.i686.rpm libpurple-devel-2.7.9-3.el6.i686.rpm libpurple-perl-2.7.9-3.el6.i686.rpm libpurple-tcl-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm pidgin-devel-2.7.9-3.el6.i686.rpm pidgin-docs-2.7.9-3.el6.i686.rpm pidgin-perl-2.7.9-3.el6.i686.rpm x86_64: finch-2.7.9-3.el6.i686.rpm finch-2.7.9-3.el6.x86_64.rpm finch-devel-2.7.9-3.el6.i686.rpm finch-devel-2.7.9-3.el6.x86_64.rpm libpurple-devel-2.7.9-3.el6.i686.rpm libpurple-devel-2.7.9-3.el6.x86_64.rpm libpurple-perl-2.7.9-3.el6.x86_64.rpm libpurple-tcl-2.7.9-3.el6.x86_64.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.x86_64.rpm pidgin-devel-2.7.9-3.el6.i686.rpm pidgin-devel-2.7.9-3.el6.x86_64.rpm pidgin-docs-2.7.9-3.el6.x86_64.rpm pidgin-perl-2.7.9-3.el6.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.6): Source: i386: finch-2.7.9-3.el6.i686.rpm finch-devel-2.7.9-3.el6.i686.rpm libpurple-2.7.9-3.el6.i686.rpm libpurple-devel-2.7.9-3.el6.i686.rpm libpurple-perl-2.7.9-3.el6.i686.rpm libpurple-tcl-2.7.9-3.el6.i686.rpm pidgin-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm pidgin-devel-2.7.9-3.el6.i686.rpm pidgin-docs-2.7.9-3.el6.i686.rpm pidgin-perl-2.7.9-3.el6.i686.rpm ppc64: finch-2.7.9-3.el6.ppc.rpm finch-2.7.9-3.el6.ppc64.rpm finch-devel-2.7.9-3.el6.ppc.rpm finch-devel-2.7.9-3.el6.ppc64.rpm libpurple-2.7.9-3.el6.ppc.rpm libpurple-2.7.9-3.el6.ppc64.rpm libpurple-devel-2.7.9-3.el6.ppc.rpm libpurple-devel-2.7.9-3.el6.ppc64.rpm libpurple-perl-2.7.9-3.el6.ppc64.rpm libpurple-tcl-2.7.9-3.el6.ppc64.rpm pidgin-2.7.9-3.el6.ppc64.rpm pidgin-debuginfo-2.7.9-3.el6.ppc.rpm pidgin-debuginfo-2.7.9-3.el6.ppc64.rpm pidgin-devel-2.7.9-3.el6.ppc.rpm pidgin-devel-2.7.9-3.el6.ppc64.rpm pidgin-docs-2.7.9-3.el6.ppc64.rpm pidgin-perl-2.7.9-3.el6.ppc64.rpm x86_64: finch-2.7.9-3.el6.i686.rpm finch-2.7.9-3.el6.x86_64.rpm finch-devel-2.7.9-3.el6.i686.rpm finch-devel-2.7.9-3.el6.x86_64.rpm libpurple-2.7.9-3.el6.i686.rpm libpurple-2.7.9-3.el6.x86_64.rpm libpurple-devel-2.7.9-3.el6.i686.rpm libpurple-devel-2.7.9-3.el6.x86_64.rpm libpurple-perl-2.7.9-3.el6.x86_64.rpm libpurple-tcl-2.7.9-3.el6.x86_64.rpm pidgin-2.7.9-3.el6.x86_64.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.x86_64.rpm pidgin-devel-2.7.9-3.el6.i686.rpm pidgin-devel-2.7.9-3.el6.x86_64.rpm pidgin-docs-2.7.9-3.el6.x86_64.rpm pidgin-perl-2.7.9-3.el6.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: libpurple-2.7.9-3.el6.i686.rpm pidgin-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm x86_64: libpurple-2.7.9-3.el6.i686.rpm libpurple-2.7.9-3.el6.x86_64.rpm pidgin-2.7.9-3.el6.x86_64.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.6): Source: i386: finch-2.7.9-3.el6.i686.rpm finch-devel-2.7.9-3.el6.i686.rpm libpurple-devel-2.7.9-3.el6.i686.rpm libpurple-perl-2.7.9-3.el6.i686.rpm libpurple-tcl-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm pidgin-devel-2.7.9-3.el6.i686.rpm pidgin-docs-2.7.9-3.el6.i686.rpm pidgin-perl-2.7.9-3.el6.i686.rpm x86_64: finch-2.7.9-3.el6.i686.rpm finch-2.7.9-3.el6.x86_64.rpm finch-devel-2.7.9-3.el6.i686.rpm finch-devel-2.7.9-3.el6.x86_64.rpm libpurple-devel-2.7.9-3.el6.i686.rpm libpurple-devel-2.7.9-3.el6.x86_64.rpm libpurple-perl-2.7.9-3.el6.x86_64.rpm libpurple-tcl-2.7.9-3.el6.x86_64.rpm pidgin-debuginfo-2.7.9-3.el6.i686.rpm pidgin-debuginfo-2.7.9-3.el6.x86_64.rpm pidgin-devel-2.7.9-3.el6.i686.rpm pidgin-devel-2.7.9-3.el6.x86_64.rpm pidgin-docs-2.7.9-3.el6.x86_64.rpm pidgin-perl-2.7.9-3.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2011-1091 https://access.redhat.com/security/updates/classification#low http://developer.pidgin.im/wiki/ChangeLog 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2011 Red Hat, Inc. . Pidgin updates released for RHEL address minor bugs and bolster security, including vulnerabilities related to YMSG.. Pidgin Update,Red Hat Advisory,Security Issues,Instant Messaging Fixes,Package Upgrades. . Severity: Low. LinuxSecurity.com Team
May 19, 2011
•Low
Red Hat
98
security advisorydirectory traversalremote attackRed Hat Enterprise Linux 4/5: RHSA-2010:0044-01 Important: Pidgin Update
Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team.. ==================================================================== Red Hat Security Advisory Synopsis: Important: pidgin security update Advisory ID: RHSA-2010:0044-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0044.html Issue date: 2010-01-14 CVE Names: CVE-2010-0013 ==================================================================== 1. Summary: Updated pidgin packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 RHEL Optional Productivity Applications (v. 5 server) - i386, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A directory traversal flaw was discovered in Pidgin's MSN protocol implementation. A remote attacker could send a specially-crafted emoticon image download request that would cause Pidgin to disclose an arbitrary file readable to the user running Pidgin. (CVE-2010-0013) These packages upgrade Pidgin to version 2.6.5. Refer to the Pidgin release notes for a full list of changes: http://developer.pidgin.im/wiki/ChangeLog All Pidgin users should upgrade to these updated packages, which correct this issue. Pidgin must be restarted for thisupdate to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 552483 - CVE-2010-0013 pidgin/libpurple: MSN custom smiley request directory traversal file disclosure 6. Package List: Red Hat Enterprise Linux AS version 4: Source: i386: finch-2.6.5-1.el4.1.i386.rpm finch-devel-2.6.5-1.el4.1.i386.rpm libpurple-2.6.5-1.el4.1.i386.rpm libpurple-devel-2.6.5-1.el4.1.i386.rpm libpurple-perl-2.6.5-1.el4.1.i386.rpm libpurple-tcl-2.6.5-1.el4.1.i386.rpm pidgin-2.6.5-1.el4.1.i386.rpm pidgin-debuginfo-2.6.5-1.el4.1.i386.rpm pidgin-devel-2.6.5-1.el4.1.i386.rpm pidgin-perl-2.6.5-1.el4.1.i386.rpm ia64: finch-2.6.5-1.el4.1.ia64.rpm finch-devel-2.6.5-1.el4.1.ia64.rpm libpurple-2.6.5-1.el4.1.ia64.rpm libpurple-devel-2.6.5-1.el4.1.ia64.rpm libpurple-perl-2.6.5-1.el4.1.ia64.rpm libpurple-tcl-2.6.5-1.el4.1.ia64.rpm pidgin-2.6.5-1.el4.1.ia64.rpm pidgin-debuginfo-2.6.5-1.el4.1.ia64.rpm pidgin-devel-2.6.5-1.el4.1.ia64.rpm pidgin-perl-2.6.5-1.el4.1.ia64.rpm ppc: finch-2.6.5-1.el4.1.ppc.rpm finch-devel-2.6.5-1.el4.1.ppc.rpm libpurple-2.6.5-1.el4.1.ppc.rpm libpurple-devel-2.6.5-1.el4.1.ppc.rpm libpurple-perl-2.6.5-1.el4.1.ppc.rpm libpurple-tcl-2.6.5-1.el4.1.ppc.rpm pidgin-2.6.5-1.el4.1.ppc.rpm pidgin-debuginfo-2.6.5-1.el4.1.ppc.rpm pidgin-devel-2.6.5-1.el4.1.ppc.rpm pidgin-perl-2.6.5-1.el4.1.ppc.rpm x86_64: finch-2.6.5-1.el4.1.x86_64.rpm finch-devel-2.6.5-1.el4.1.x86_64.rpm libpurple-2.6.5-1.el4.1.x86_64.rpm libpurple-devel-2.6.5-1.el4.1.x86_64.rpm libpurple-perl-2.6.5-1.el4.1.x86_64.rpm libpurple-tcl-2.6.5-1.el4.1.x86_64.rpm pidgin-2.6.5-1.el4.1.x86_64.rpm pidgin-debuginfo-2.6.5-1.el4.1.x86_64.rpm pidgin-devel-2.6.5-1.el4.1.x86_64.rpm pidgin-perl-2.6.5-1.el4.1.x86_64.rpm Red Hat Enterprise Linux Desktop version4: Source: i386: finch-2.6.5-1.el4.1.i386.rpm finch-devel-2.6.5-1.el4.1.i386.rpm libpurple-2.6.5-1.el4.1.i386.rpm libpurple-devel-2.6.5-1.el4.1.i386.rpm libpurple-perl-2.6.5-1.el4.1.i386.rpm libpurple-tcl-2.6.5-1.el4.1.i386.rpm pidgin-2.6.5-1.el4.1.i386.rpm pidgin-debuginfo-2.6.5-1.el4.1.i386.rpm pidgin-devel-2.6.5-1.el4.1.i386.rpm pidgin-perl-2.6.5-1.el4.1.i386.rpm x86_64: finch-2.6.5-1.el4.1.x86_64.rpm finch-devel-2.6.5-1.el4.1.x86_64.rpm libpurple-2.6.5-1.el4.1.x86_64.rpm libpurple-devel-2.6.5-1.el4.1.x86_64.rpm libpurple-perl-2.6.5-1.el4.1.x86_64.rpm libpurple-tcl-2.6.5-1.el4.1.x86_64.rpm pidgin-2.6.5-1.el4.1.x86_64.rpm pidgin-debuginfo-2.6.5-1.el4.1.x86_64.rpm pidgin-devel-2.6.5-1.el4.1.x86_64.rpm pidgin-perl-2.6.5-1.el4.1.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: finch-2.6.5-1.el4.1.i386.rpm finch-devel-2.6.5-1.el4.1.i386.rpm libpurple-2.6.5-1.el4.1.i386.rpm libpurple-devel-2.6.5-1.el4.1.i386.rpm libpurple-perl-2.6.5-1.el4.1.i386.rpm libpurple-tcl-2.6.5-1.el4.1.i386.rpm pidgin-2.6.5-1.el4.1.i386.rpm pidgin-debuginfo-2.6.5-1.el4.1.i386.rpm pidgin-devel-2.6.5-1.el4.1.i386.rpm pidgin-perl-2.6.5-1.el4.1.i386.rpm ia64: finch-2.6.5-1.el4.1.ia64.rpm finch-devel-2.6.5-1.el4.1.ia64.rpm libpurple-2.6.5-1.el4.1.ia64.rpm libpurple-devel-2.6.5-1.el4.1.ia64.rpm libpurple-perl-2.6.5-1.el4.1.ia64.rpm libpurple-tcl-2.6.5-1.el4.1.ia64.rpm pidgin-2.6.5-1.el4.1.ia64.rpm pidgin-debuginfo-2.6.5-1.el4.1.ia64.rpm pidgin-devel-2.6.5-1.el4.1.ia64.rpm pidgin-perl-2.6.5-1.el4.1.ia64.rpm x86_64: finch-2.6.5-1.el4.1.x86_64.rpm finch-devel-2.6.5-1.el4.1.x86_64.rpm libpurple-2.6.5-1.el4.1.x86_64.rpm libpurple-devel-2.6.5-1.el4.1.x86_64.rpm libpurple-perl-2.6.5-1.el4.1.x86_64.rpm libpurple-tcl-2.6.5-1.el4.1.x86_64.rpm pidgin-2.6.5-1.el4.1.x86_64.rpm pidgin-debuginfo-2.6.5-1.el4.1.x86_64.rpm pidgin-devel-2.6.5-1.el4.1.x86_64.rpm pidgin-perl-2.6.5-1.el4.1.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: finch-2.6.5-1.el4.1.i386.rpm finch-devel-2.6.5-1.el4.1.i386.rpm libpurple-2.6.5-1.el4.1.i386.rpm libpurple-devel-2.6.5-1.el4.1.i386.rpm libpurple-perl-2.6.5-1.el4.1.i386.rpm libpurple-tcl-2.6.5-1.el4.1.i386.rpm pidgin-2.6.5-1.el4.1.i386.rpm pidgin-debuginfo-2.6.5-1.el4.1.i386.rpm pidgin-devel-2.6.5-1.el4.1.i386.rpm pidgin-perl-2.6.5-1.el4.1.i386.rpm ia64: finch-2.6.5-1.el4.1.ia64.rpm finch-devel-2.6.5-1.el4.1.ia64.rpm libpurple-2.6.5-1.el4.1.ia64.rpm libpurple-devel-2.6.5-1.el4.1.ia64.rpm libpurple-perl-2.6.5-1.el4.1.ia64.rpm libpurple-tcl-2.6.5-1.el4.1.ia64.rpm pidgin-2.6.5-1.el4.1.ia64.rpm pidgin-debuginfo-2.6.5-1.el4.1.ia64.rpm pidgin-devel-2.6.5-1.el4.1.ia64.rpm pidgin-perl-2.6.5-1.el4.1.ia64.rpm x86_64: finch-2.6.5-1.el4.1.x86_64.rpm finch-devel-2.6.5-1.el4.1.x86_64.rpm libpurple-2.6.5-1.el4.1.x86_64.rpm libpurple-devel-2.6.5-1.el4.1.x86_64.rpm libpurple-perl-2.6.5-1.el4.1.x86_64.rpm libpurple-tcl-2.6.5-1.el4.1.x86_64.rpm pidgin-2.6.5-1.el4.1.x86_64.rpm pidgin-debuginfo-2.6.5-1.el4.1.x86_64.rpm pidgin-devel-2.6.5-1.el4.1.x86_64.rpm pidgin-perl-2.6.5-1.el4.1.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: finch-2.6.5-1.el5.i386.rpm libpurple-2.6.5-1.el5.i386.rpm libpurple-perl-2.6.5-1.el5.i386.rpm libpurple-tcl-2.6.5-1.el5.i386.rpm pidgin-2.6.5-1.el5.i386.rpm pidgin-debuginfo-2.6.5-1.el5.i386.rpm pidgin-perl-2.6.5-1.el5.i386.rpm x86_64: finch-2.6.5-1.el5.i386.rpm finch-2.6.5-1.el5.x86_64.rpm libpurple-2.6.5-1.el5.i386.rpm libpurple-2.6.5-1.el5.x86_64.rpm libpurple-perl-2.6.5-1.el5.x86_64.rpm libpurple-tcl-2.6.5-1.el5.x86_64.rpm pidgin-2.6.5-1.el5.i386.rpm pidgin-2.6.5-1.el5.x86_64.rpm pidgin-debuginfo-2.6.5-1.el5.i386.rpm pidgin-debuginfo-2.6.5-1.el5.x86_64.rpm pidgin-perl-2.6.5-1.el5.x86_64.rpm RHEL Desktop Workstation (v. 5client): Source: i386: finch-devel-2.6.5-1.el5.i386.rpm libpurple-devel-2.6.5-1.el5.i386.rpm pidgin-debuginfo-2.6.5-1.el5.i386.rpm pidgin-devel-2.6.5-1.el5.i386.rpm x86_64: finch-devel-2.6.5-1.el5.i386.rpm finch-devel-2.6.5-1.el5.x86_64.rpm libpurple-devel-2.6.5-1.el5.i386.rpm libpurple-devel-2.6.5-1.el5.x86_64.rpm pidgin-debuginfo-2.6.5-1.el5.i386.rpm pidgin-debuginfo-2.6.5-1.el5.x86_64.rpm pidgin-devel-2.6.5-1.el5.i386.rpm pidgin-devel-2.6.5-1.el5.x86_64.rpm RHEL Optional Productivity Applications (v. 5 server): Source: i386: finch-2.6.5-1.el5.i386.rpm finch-devel-2.6.5-1.el5.i386.rpm libpurple-2.6.5-1.el5.i386.rpm libpurple-devel-2.6.5-1.el5.i386.rpm libpurple-perl-2.6.5-1.el5.i386.rpm libpurple-tcl-2.6.5-1.el5.i386.rpm pidgin-2.6.5-1.el5.i386.rpm pidgin-debuginfo-2.6.5-1.el5.i386.rpm pidgin-devel-2.6.5-1.el5.i386.rpm pidgin-perl-2.6.5-1.el5.i386.rpm x86_64: finch-2.6.5-1.el5.i386.rpm finch-2.6.5-1.el5.x86_64.rpm finch-devel-2.6.5-1.el5.i386.rpm finch-devel-2.6.5-1.el5.x86_64.rpm libpurple-2.6.5-1.el5.i386.rpm libpurple-2.6.5-1.el5.x86_64.rpm libpurple-devel-2.6.5-1.el5.i386.rpm libpurple-devel-2.6.5-1.el5.x86_64.rpm libpurple-perl-2.6.5-1.el5.x86_64.rpm libpurple-tcl-2.6.5-1.el5.x86_64.rpm pidgin-2.6.5-1.el5.i386.rpm pidgin-2.6.5-1.el5.x86_64.rpm pidgin-debuginfo-2.6.5-1.el5.i386.rpm pidgin-debuginfo-2.6.5-1.el5.x86_64.rpm pidgin-devel-2.6.5-1.el5.i386.rpm pidgin-devel-2.6.5-1.el5.x86_64.rpm pidgin-perl-2.6.5-1.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2010-0013 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2010 Red Hat, Inc. . Critical notice regarding pidgin in Red Hat Enterprise Linux addresses vulnerability CVE-2010-0013. Upgradeimmediately!. pidgin security update, red hat advisory, directory traversal fix. . Severity: Important. LinuxSecurity.com Team
Jan 14, 2010
•Important
Red Hat
98
security advisorydenial of servicemoderate impactRed Hat Enterprise Linux 3: RHSA-2009:1535-01 Moderate: Pidgin DoS
An updated pidgin package that fixes several security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: pidgin security update Advisory ID: RHSA-2009:1535-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1535.html Issue date: 2009-10-29 CVE Names: CVE-2009-2703 CVE-2009-3083 CVE-2009-3615 ==================================================================== 1. Summary: An updated pidgin package that fixes several security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 3. Description: Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol implementation processed lists of contacts. A remote attacker could send a specially-crafted contact list to a user running Pidgin, causing Pidgin to crash. (CVE-2009-3615) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially-crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) A NULL pointer dereference flaw was found in the way the Pidgin MSN protocol plug-in handles improper MSNSLP invitations. A remote attacker could send a specially-craftedMSNSLP invitation request, which once accepted by a valid Pidgin user, would lead to a denial of service (Pidgin crash). (CVE-2009-3083) All Pidgin users should upgrade to this updated package, which contains backported patches to resolve these issues. Pidgin must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 521823 - CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS) 521832 - CVE-2009-3083 Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS) 529357 - CVE-2009-3615 Pidgin: Invalid pointer dereference (crash) after receiving contacts from SIM IM client 6. Package List: Red Hat Enterprise Linux AS version 3: Source: i386: pidgin-1.5.1-6.el3.i386.rpm pidgin-debuginfo-1.5.1-6.el3.i386.rpm ia64: pidgin-1.5.1-6.el3.ia64.rpm pidgin-debuginfo-1.5.1-6.el3.ia64.rpm ppc: pidgin-1.5.1-6.el3.ppc.rpm pidgin-debuginfo-1.5.1-6.el3.ppc.rpm s390: pidgin-1.5.1-6.el3.s390.rpm pidgin-debuginfo-1.5.1-6.el3.s390.rpm s390x: pidgin-1.5.1-6.el3.s390x.rpm pidgin-debuginfo-1.5.1-6.el3.s390x.rpm x86_64: pidgin-1.5.1-6.el3.x86_64.rpm pidgin-debuginfo-1.5.1-6.el3.x86_64.rpm Red Hat Desktop version 3: Source: i386: pidgin-1.5.1-6.el3.i386.rpm pidgin-debuginfo-1.5.1-6.el3.i386.rpm x86_64: pidgin-1.5.1-6.el3.x86_64.rpm pidgin-debuginfo-1.5.1-6.el3.x86_64.rpm Red Hat Enterprise Linux ES version 3: Source: i386: pidgin-1.5.1-6.el3.i386.rpm pidgin-debuginfo-1.5.1-6.el3.i386.rpm ia64: pidgin-1.5.1-6.el3.ia64.rpm pidgin-debuginfo-1.5.1-6.el3.ia64.rpm x86_64: pidgin-1.5.1-6.el3.x86_64.rpm pidgin-debuginfo-1.5.1-6.el3.x86_64.rpm Red Hat Enterprise Linux WS version3: Source: i386: pidgin-1.5.1-6.el3.i386.rpm pidgin-debuginfo-1.5.1-6.el3.i386.rpm ia64: pidgin-1.5.1-6.el3.ia64.rpm pidgin-debuginfo-1.5.1-6.el3.ia64.rpm x86_64: pidgin-1.5.1-6.el3.x86_64.rpm pidgin-debuginfo-1.5.1-6.el3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2009-2703 https://www.cve.org/CVERecord?id=CVE-2009-3083 https://www.cve.org/CVERecord?id=CVE-2009-3615 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2009 Red Hat, Inc. . Debian issued a significant security notice for Thunderbird responding to multiple vulnerabilities. Updating is crucial for protection.. Red Hat Pidgin Update, Pidgin DoS Fix, Moderate Security Advisory. . LinuxSecurity.com Team
Oct 29, 2009
Red Hat
98
security advisorybuffer overflowDoSRHEL: RHSA-2009:1060-02 Critical: Pidgin DoS and Buffer Overflow Issues
Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: pidgin security update Advisory ID: RHSA-2009:1060-02 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1060.html Issue date: 2009-05-22 CVE Names: CVE-2009-1373 CVE-2009-1374 CVE-2009-1375 CVE-2009-1376 ==================================================================== 1. Summary: Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 RHEL Desktop Workstation (v. 5 client) - i386, x86_64 3. Description: Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A buffer overflow flaw was found in the way Pidgin initiates file transferswhen using the Extensible Messaging and Presence Protocol (XMPP). If a Pidgin client initiates a file transfer, and the remote target sends a malformed response, it could cause Pidgin to crash or, potentially, execute arbitrary code with the permissions of the user running Pidgin. This flaw only affects accounts using XMPP, such as Jabber and Google Talk. (CVE-2009-1373) A denial of service flaw was found inPidgin's QQ protocol decryption handler. When the QQ protocol decrypts packet information, heap data can be overwritten, possibly causing Pidgin to crash. (CVE-2009-1374) A flaw was found in the way Pidgin's PurpleCircBuffer object is expanded. If the buffer is full when more data arrives, the data stored in this buffer becomes corrupted. This corrupted data could result in confusing or misleading data being presented to the user, or possibly crash Pidgin. (CVE-2009-1375) It was discovered that on 32-bit platforms, the Red Hat Security Advisory RHSA-2008:0584 provided an incomplete fix for the integer overflow flaw affecting Pidgin's MSN protocol handler. If a Pidgin client receives a specially-crafted MSN message, it may be possible to execute arbitrary code with the permissions of the user running Pidgin. (CVE-2009-1376) Note: By default, when using an MSN account, only users on your buddy list can send you messages. This prevents arbitrary MSN users from exploiting this flaw. All Pidgin users should upgrade to these updated packages, which contain backported patches to resolve these issues. Pidgin must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 500488 - CVE-2009-1373 pidgin file transfer buffer overflow 500490 - CVE-2009-1374 pidgin DoS when decrypting qq packets 500491 - CVE-2009-1375 pidgin PurpleCircBuffer corruption 500493 - CVE-2009-1376 pidgin incomplete fix for CVE-2008-2927 6. Package List: Red Hat Enterprise Linux AS version4: Source: i386: finch-2.5.5-2.el4.i386.rpm finch-devel-2.5.5-2.el4.i386.rpm libpurple-2.5.5-2.el4.i386.rpm libpurple-devel-2.5.5-2.el4.i386.rpm libpurple-perl-2.5.5-2.el4.i386.rpm libpurple-tcl-2.5.5-2.el4.i386.rpm pidgin-2.5.5-2.el4.i386.rpm pidgin-debuginfo-2.5.5-2.el4.i386.rpm pidgin-devel-2.5.5-2.el4.i386.rpm pidgin-perl-2.5.5-2.el4.i386.rpm ia64: finch-2.5.5-2.el4.ia64.rpm finch-devel-2.5.5-2.el4.ia64.rpm libpurple-2.5.5-2.el4.ia64.rpm libpurple-devel-2.5.5-2.el4.ia64.rpm libpurple-perl-2.5.5-2.el4.ia64.rpm libpurple-tcl-2.5.5-2.el4.ia64.rpm pidgin-2.5.5-2.el4.ia64.rpm pidgin-debuginfo-2.5.5-2.el4.ia64.rpm pidgin-devel-2.5.5-2.el4.ia64.rpm pidgin-perl-2.5.5-2.el4.ia64.rpm ppc: finch-2.5.5-2.el4.ppc.rpm finch-devel-2.5.5-2.el4.ppc.rpm libpurple-2.5.5-2.el4.ppc.rpm libpurple-devel-2.5.5-2.el4.ppc.rpm libpurple-perl-2.5.5-2.el4.ppc.rpm libpurple-tcl-2.5.5-2.el4.ppc.rpm pidgin-2.5.5-2.el4.ppc.rpm pidgin-debuginfo-2.5.5-2.el4.ppc.rpm pidgin-devel-2.5.5-2.el4.ppc.rpm pidgin-perl-2.5.5-2.el4.ppc.rpm x86_64: finch-2.5.5-2.el4.x86_64.rpm finch-devel-2.5.5-2.el4.x86_64.rpm libpurple-2.5.5-2.el4.x86_64.rpm libpurple-devel-2.5.5-2.el4.x86_64.rpm libpurple-perl-2.5.5-2.el4.x86_64.rpm libpurple-tcl-2.5.5-2.el4.x86_64.rpm pidgin-2.5.5-2.el4.x86_64.rpm pidgin-debuginfo-2.5.5-2.el4.x86_64.rpm pidgin-devel-2.5.5-2.el4.x86_64.rpm pidgin-perl-2.5.5-2.el4.x86_64.rpm Red Hat Enterprise Linux Desktop version4: Source: i386: finch-2.5.5-2.el4.i386.rpm finch-devel-2.5.5-2.el4.i386.rpm libpurple-2.5.5-2.el4.i386.rpm libpurple-devel-2.5.5-2.el4.i386.rpm libpurple-perl-2.5.5-2.el4.i386.rpm libpurple-tcl-2.5.5-2.el4.i386.rpm pidgin-2.5.5-2.el4.i386.rpm pidgin-debuginfo-2.5.5-2.el4.i386.rpm pidgin-devel-2.5.5-2.el4.i386.rpm pidgin-perl-2.5.5-2.el4.i386.rpm x86_64: finch-2.5.5-2.el4.x86_64.rpm finch-devel-2.5.5-2.el4.x86_64.rpm libpurple-2.5.5-2.el4.x86_64.rpm libpurple-devel-2.5.5-2.el4.x86_64.rpm libpurple-perl-2.5.5-2.el4.x86_64.rpm libpurple-tcl-2.5.5-2.el4.x86_64.rpm pidgin-2.5.5-2.el4.x86_64.rpm pidgin-debuginfo-2.5.5-2.el4.x86_64.rpm pidgin-devel-2.5.5-2.el4.x86_64.rpm pidgin-perl-2.5.5-2.el4.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: finch-2.5.5-2.el4.i386.rpm finch-devel-2.5.5-2.el4.i386.rpm libpurple-2.5.5-2.el4.i386.rpm libpurple-devel-2.5.5-2.el4.i386.rpm libpurple-perl-2.5.5-2.el4.i386.rpm libpurple-tcl-2.5.5-2.el4.i386.rpm pidgin-2.5.5-2.el4.i386.rpm pidgin-debuginfo-2.5.5-2.el4.i386.rpm pidgin-devel-2.5.5-2.el4.i386.rpm pidgin-perl-2.5.5-2.el4.i386.rpm ia64: finch-2.5.5-2.el4.ia64.rpm finch-devel-2.5.5-2.el4.ia64.rpm libpurple-2.5.5-2.el4.ia64.rpm libpurple-devel-2.5.5-2.el4.ia64.rpm libpurple-perl-2.5.5-2.el4.ia64.rpm libpurple-tcl-2.5.5-2.el4.ia64.rpm pidgin-2.5.5-2.el4.ia64.rpm pidgin-debuginfo-2.5.5-2.el4.ia64.rpm pidgin-devel-2.5.5-2.el4.ia64.rpm pidgin-perl-2.5.5-2.el4.ia64.rpm x86_64: finch-2.5.5-2.el4.x86_64.rpm finch-devel-2.5.5-2.el4.x86_64.rpm libpurple-2.5.5-2.el4.x86_64.rpm libpurple-devel-2.5.5-2.el4.x86_64.rpm libpurple-perl-2.5.5-2.el4.x86_64.rpm libpurple-tcl-2.5.5-2.el4.x86_64.rpm pidgin-2.5.5-2.el4.x86_64.rpm pidgin-debuginfo-2.5.5-2.el4.x86_64.rpm pidgin-devel-2.5.5-2.el4.x86_64.rpm pidgin-perl-2.5.5-2.el4.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: finch-2.5.5-2.el4.i386.rpm finch-devel-2.5.5-2.el4.i386.rpm libpurple-2.5.5-2.el4.i386.rpm libpurple-devel-2.5.5-2.el4.i386.rpm libpurple-perl-2.5.5-2.el4.i386.rpm libpurple-tcl-2.5.5-2.el4.i386.rpm pidgin-2.5.5-2.el4.i386.rpm pidgin-debuginfo-2.5.5-2.el4.i386.rpm pidgin-devel-2.5.5-2.el4.i386.rpm pidgin-perl-2.5.5-2.el4.i386.rpm ia64: finch-2.5.5-2.el4.ia64.rpm finch-devel-2.5.5-2.el4.ia64.rpm libpurple-2.5.5-2.el4.ia64.rpm libpurple-devel-2.5.5-2.el4.ia64.rpm libpurple-perl-2.5.5-2.el4.ia64.rpm libpurple-tcl-2.5.5-2.el4.ia64.rpm pidgin-2.5.5-2.el4.ia64.rpm pidgin-debuginfo-2.5.5-2.el4.ia64.rpm pidgin-devel-2.5.5-2.el4.ia64.rpm pidgin-perl-2.5.5-2.el4.ia64.rpm x86_64: finch-2.5.5-2.el4.x86_64.rpm finch-devel-2.5.5-2.el4.x86_64.rpm libpurple-2.5.5-2.el4.x86_64.rpm libpurple-devel-2.5.5-2.el4.x86_64.rpm libpurple-perl-2.5.5-2.el4.x86_64.rpm libpurple-tcl-2.5.5-2.el4.x86_64.rpm pidgin-2.5.5-2.el4.x86_64.rpm pidgin-debuginfo-2.5.5-2.el4.x86_64.rpm pidgin-devel-2.5.5-2.el4.x86_64.rpm pidgin-perl-2.5.5-2.el4.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: finch-2.5.5-3.el5.i386.rpm libpurple-2.5.5-3.el5.i386.rpm libpurple-perl-2.5.5-3.el5.i386.rpm libpurple-tcl-2.5.5-3.el5.i386.rpm pidgin-2.5.5-3.el5.i386.rpm pidgin-debuginfo-2.5.5-3.el5.i386.rpm pidgin-perl-2.5.5-3.el5.i386.rpm x86_64: finch-2.5.5-3.el5.i386.rpm finch-2.5.5-3.el5.x86_64.rpm libpurple-2.5.5-3.el5.i386.rpm libpurple-2.5.5-3.el5.x86_64.rpm libpurple-perl-2.5.5-3.el5.x86_64.rpm libpurple-tcl-2.5.5-3.el5.x86_64.rpm pidgin-2.5.5-3.el5.i386.rpm pidgin-2.5.5-3.el5.x86_64.rpm pidgin-debuginfo-2.5.5-3.el5.i386.rpm pidgin-debuginfo-2.5.5-3.el5.x86_64.rpm pidgin-perl-2.5.5-3.el5.x86_64.rpm RHEL Desktop Workstation (v. 5client): Source: i386: finch-devel-2.5.5-3.el5.i386.rpm libpurple-devel-2.5.5-3.el5.i386.rpm pidgin-debuginfo-2.5.5-3.el5.i386.rpm pidgin-devel-2.5.5-3.el5.i386.rpm x86_64: finch-devel-2.5.5-3.el5.i386.rpm finch-devel-2.5.5-3.el5.x86_64.rpm libpurple-devel-2.5.5-3.el5.i386.rpm libpurple-devel-2.5.5-3.el5.x86_64.rpm pidgin-debuginfo-2.5.5-3.el5.i386.rpm pidgin-debuginfo-2.5.5-3.el5.x86_64.rpm pidgin-devel-2.5.5-3.el5.i386.rpm pidgin-devel-2.5.5-3.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2009-1373 https://www.cve.org/CVERecord?id=CVE-2009-1374 https://www.cve.org/CVERecord?id=CVE-2009-1375 https://www.cve.org/CVERecord?id=CVE-2009-1376 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2009 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFKFpl3XlSAg2UNWIIRAnjrAJ9dxygMNAAe1kW+RzuliRGW5tGYMwCeIcUd 9GL+E9KmDvN/j1/0OWa8tnw=ypq1 -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
May 22, 2009
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!