Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
198

Arch Linux: 202110-15 High: kube-controller-manager Inadequate Check

The package kube-apiserver before version 1.21.1-1 is vulnerable to insufficient validation. . Arch Linux Security Advisory ASA-202106-29 ========================================= Severity: Low Date : 2021-06-09 CVE-ID : CVE-2021-25737 Package : kube-apiserver Type : insufficient validation Remote : Yes Link : https://security.archlinux.org/AVG-1970 Summary ====== The package kube-apiserver before version 1.21.1-1 is vulnerable to insufficient validation. Resolution ========= Upgrade to 1.21.1-1. # pacman -Syu "kube-apiserver> =1.21.1-1" The problem has been fixed upstream in version 1.21.1. Workaround ========= To mitigate this vulnerability without upgrading kube-apiserver, you can create a validating admission webhook that prevents EndpointSlices with endpoint addresses in the 127.0.0.0/8 and 169.254.0.0/16 ranges. If you have an existing admission policy mechanism (like OPA Gatekeeper) you can create a policy that enforces this restriction. Description ========== A security issue was discovered in kube-apiserver before version 1.21.1 where a user may be able to redirect pod traffic to private networks on a node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs. Impact ===== A user could redirect pod traffic to private networks on a node. References ========= https://github.com/kubernetes/kubernetes/issues/102106 https://github.com/kubernetes/kubernetes/pull/101084 https://github.com/kubernetes/kubernetes/commit/233c8d6eeef9e7a259c39dd1db096479044820ae https://security.archlinux.org/CVE-2021-25737 . The Arch Security Bulletin indicates vulnerabilities in kube-apiserver due to improper validation. Users are urged to update for enhanced protection.. kube-apiserver Security Advisory, Arch Linux Insufficient Validation, Remote Access Risk. . LinuxSecurity.com Team

Calendar 2 Jun 11, 2021 ArchLinux
98

Red Hat: RHSA-2010:0020-01 Critical: Kernel DoS Risk Update

Updated kernel packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2010:0020-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0020.html Issue date: 2010-01-07 CVE Names: CVE-2009-4536 CVE-2009-4537 CVE-2009-4538 ==================================================================== 1. Summary: Updated kernel packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4 - i386, ia64, noarch, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, noarch, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, noarch, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, noarch, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: * a flaw was found in each of the following Intel PRO/1000 Linux drivers in the Linux kernel: e1000 and e1000e. A remote attacker using packets larger than the MTU could bypass the existing fragment check, resulting in partial, invalid frames being passed to the network stack. These flaws could also possibly be used to trigger a remote denial of service. (CVE-2009-4536, CVE-2009-4538, Important) * a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. Receiving overly-long frames with network cards supported by this driver could possibly result in a remote denial of service.(CVE-2009-4537, Important) Users should upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 550907 - CVE-2009-4537 kernel: r8169 issue reported at 26c3 551214 - CVE-2009-4538 kernel: e1000e frame fragment issue 552126 - CVE-2009-4536 kernel: e1000 issue reported at 26c3 6. Package List: Red Hat Enterprise Linux AS version4: Source: i386: kernel-2.6.9-89.0.19.EL.i686.rpm kernel-debuginfo-2.6.9-89.0.19.EL.i686.rpm kernel-devel-2.6.9-89.0.19.EL.i686.rpm kernel-hugemem-2.6.9-89.0.19.EL.i686.rpm kernel-hugemem-devel-2.6.9-89.0.19.EL.i686.rpm kernel-smp-2.6.9-89.0.19.EL.i686.rpm kernel-smp-devel-2.6.9-89.0.19.EL.i686.rpm kernel-xenU-2.6.9-89.0.19.EL.i686.rpm kernel-xenU-devel-2.6.9-89.0.19.EL.i686.rpm ia64: kernel-2.6.9-89.0.19.EL.ia64.rpm kernel-debuginfo-2.6.9-89.0.19.EL.ia64.rpm kernel-devel-2.6.9-89.0.19.EL.ia64.rpm kernel-largesmp-2.6.9-89.0.19.EL.ia64.rpm kernel-largesmp-devel-2.6.9-89.0.19.EL.ia64.rpm noarch: kernel-doc-2.6.9-89.0.19.EL.noarch.rpm ppc: kernel-2.6.9-89.0.19.EL.ppc64.rpm kernel-2.6.9-89.0.19.EL.ppc64iseries.rpm kernel-debuginfo-2.6.9-89.0.19.EL.ppc64.rpm kernel-debuginfo-2.6.9-89.0.19.EL.ppc64iseries.rpm kernel-devel-2.6.9-89.0.19.EL.ppc64.rpm kernel-devel-2.6.9-89.0.19.EL.ppc64iseries.rpm kernel-largesmp-2.6.9-89.0.19.EL.ppc64.rpm kernel-largesmp-devel-2.6.9-89.0.19.EL.ppc64.rpm s390: kernel-2.6.9-89.0.19.EL.s390.rpm kernel-debuginfo-2.6.9-89.0.19.EL.s390.rpm kernel-devel-2.6.9-89.0.19.EL.s390.rpm s390x: kernel-2.6.9-89.0.19.EL.s390x.rpm kernel-debuginfo-2.6.9-89.0.19.EL.s390x.rpm kernel-devel-2.6.9-89.0.19.EL.s390x.rpm x86_64: kernel-2.6.9-89.0.19.EL.x86_64.rpm kernel-debuginfo-2.6.9-89.0.19.EL.x86_64.rpm kernel-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-largesmp-2.6.9-89.0.19.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-smp-2.6.9-89.0.19.EL.x86_64.rpm kernel-smp-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-xenU-2.6.9-89.0.19.EL.x86_64.rpm kernel-xenU-devel-2.6.9-89.0.19.EL.x86_64.rpm Red Hat Enterprise Linux Desktop version4: Source: i386: kernel-2.6.9-89.0.19.EL.i686.rpm kernel-debuginfo-2.6.9-89.0.19.EL.i686.rpm kernel-devel-2.6.9-89.0.19.EL.i686.rpm kernel-hugemem-2.6.9-89.0.19.EL.i686.rpm kernel-hugemem-devel-2.6.9-89.0.19.EL.i686.rpm kernel-smp-2.6.9-89.0.19.EL.i686.rpm kernel-smp-devel-2.6.9-89.0.19.EL.i686.rpm kernel-xenU-2.6.9-89.0.19.EL.i686.rpm kernel-xenU-devel-2.6.9-89.0.19.EL.i686.rpm noarch: kernel-doc-2.6.9-89.0.19.EL.noarch.rpm x86_64: kernel-2.6.9-89.0.19.EL.x86_64.rpm kernel-debuginfo-2.6.9-89.0.19.EL.x86_64.rpm kernel-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-largesmp-2.6.9-89.0.19.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-smp-2.6.9-89.0.19.EL.x86_64.rpm kernel-smp-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-xenU-2.6.9-89.0.19.EL.x86_64.rpm kernel-xenU-devel-2.6.9-89.0.19.EL.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: kernel-2.6.9-89.0.19.EL.i686.rpm kernel-debuginfo-2.6.9-89.0.19.EL.i686.rpm kernel-devel-2.6.9-89.0.19.EL.i686.rpm kernel-hugemem-2.6.9-89.0.19.EL.i686.rpm kernel-hugemem-devel-2.6.9-89.0.19.EL.i686.rpm kernel-smp-2.6.9-89.0.19.EL.i686.rpm kernel-smp-devel-2.6.9-89.0.19.EL.i686.rpm kernel-xenU-2.6.9-89.0.19.EL.i686.rpm kernel-xenU-devel-2.6.9-89.0.19.EL.i686.rpm ia64: kernel-2.6.9-89.0.19.EL.ia64.rpm kernel-debuginfo-2.6.9-89.0.19.EL.ia64.rpm kernel-devel-2.6.9-89.0.19.EL.ia64.rpm kernel-largesmp-2.6.9-89.0.19.EL.ia64.rpm kernel-largesmp-devel-2.6.9-89.0.19.EL.ia64.rpm noarch: kernel-doc-2.6.9-89.0.19.EL.noarch.rpm x86_64: kernel-2.6.9-89.0.19.EL.x86_64.rpm kernel-debuginfo-2.6.9-89.0.19.EL.x86_64.rpm kernel-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-largesmp-2.6.9-89.0.19.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-smp-2.6.9-89.0.19.EL.x86_64.rpm kernel-smp-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-xenU-2.6.9-89.0.19.EL.x86_64.rpm kernel-xenU-devel-2.6.9-89.0.19.EL.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: kernel-2.6.9-89.0.19.EL.i686.rpm kernel-debuginfo-2.6.9-89.0.19.EL.i686.rpm kernel-devel-2.6.9-89.0.19.EL.i686.rpm kernel-hugemem-2.6.9-89.0.19.EL.i686.rpm kernel-hugemem-devel-2.6.9-89.0.19.EL.i686.rpm kernel-smp-2.6.9-89.0.19.EL.i686.rpm kernel-smp-devel-2.6.9-89.0.19.EL.i686.rpm kernel-xenU-2.6.9-89.0.19.EL.i686.rpm kernel-xenU-devel-2.6.9-89.0.19.EL.i686.rpm ia64: kernel-2.6.9-89.0.19.EL.ia64.rpm kernel-debuginfo-2.6.9-89.0.19.EL.ia64.rpm kernel-devel-2.6.9-89.0.19.EL.ia64.rpm kernel-largesmp-2.6.9-89.0.19.EL.ia64.rpm kernel-largesmp-devel-2.6.9-89.0.19.EL.ia64.rpm noarch: kernel-doc-2.6.9-89.0.19.EL.noarch.rpm x86_64: kernel-2.6.9-89.0.19.EL.x86_64.rpm kernel-debuginfo-2.6.9-89.0.19.EL.x86_64.rpm kernel-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-largesmp-2.6.9-89.0.19.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-smp-2.6.9-89.0.19.EL.x86_64.rpm kernel-smp-devel-2.6.9-89.0.19.EL.x86_64.rpm kernel-xenU-2.6.9-89.0.19.EL.x86_64.rpm kernel-xenU-devel-2.6.9-89.0.19.EL.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2009-4536 https://access.redhat.com/security/cve/CVE-2009-4537 https://access.redhat.com/security/cve/CVE-2009-4538 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2010 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFLRoCKXlSAg2UNWIIRAhvGAJ9wrANx8ZDH7Nhwaf0c9XXy5LE+ZACePrLS 7c15bp3NUIV7bQWoYqy9UzY=h06e -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Crucial kernel security patch released for Red Hat Enterprise Linux 4, targeting various vulnerabilities impacting system reliability.. kernel security update, RedHat Enterprise Linux, DoS threat, important security advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 08, 2010 Important Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here