Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian 11 libnfs Integer Overflow Security Fix DLA-4689-1 CVE-2026-53689

Calendar White Jul 18, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 9 perl-String-Util Critical Regex DoS CVE-2026-14895

Calendar White Jul 18, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia 10 Clamav Moderate Memory Corruption Issues Advisory 2026-0271

Calendar White Jul 18, 2026
moderate
Mageia Large Esm H800
Mageia

Mageia 10 Erlang Important SFTP Info Leak Vuln 2026-0270

Calendar White Jul 18, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 10 perl-Mojolicious Critical Memory Exhaustion Fix CVE-2026-14803

Calendar White Jul 18, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia 10 nmap Important Integer Underflow Fix CVE-2026-58058

Calendar White Jul 18, 2026
Important
Mageia Large Esm H800
Mageia

Mageia 10 Perl CSS Minifier XS Critical Memory Leak CVE-2026-13593

Calendar White Jul 18, 2026
moderate
Mageia Large Esm H900
Mageia

Mageia 10 9 Important Perl Bytes Random Secure CVE-2026-11625

Calendar White Jul 18, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 OpenSSH Critical Remote Copy Misplacement CVE-2026-59996

Calendar White Jul 18, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 168 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedoracommand execution

Fedora 40: FEDORA-2024-01127974ec critical vulnerability in cups-browsed

Fix for remote vulnerabilities against OpenPrinting cups-filters. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-01127974ec 2024-09-28 01:26:49.812274 -------------------------------------------------------------------------------- Name : cups-browsed Product : Fedora 40 Version : 2.0.1 Release : 3.fc40 URL : https://github.com/OpenPrinting/cups-browsed Summary : Daemon for local auto-installation of remote printers Description : cups-browsed is a helper daemon, which automatically installs printers locally, provides load balancing and clustering of print queues. The daemon installs the printers based on found mDNS records and CUPS broadcast, or by polling a remote print server. -------------------------------------------------------------------------------- Update Information: Fix for remote vulnerabilities against OpenPrinting cups-filters -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 26 2024 Justin M. Forbes - 1:2.0.1-2 - Fix for CVE-2024-47176 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2314997 - [Major Incident] CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2314997 [ 2 ] Bug #2315000 - [Major Incident] CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2315000 [ 3 ] Bug #2315004 - [Major Incident] CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2315004 [ 4 ] Bug #2315005 - [Major Incident] CVE-2024-47177 cups-filters: foomatic-rip in cups-filters allows arbitrary command execution viathe FoomaticRIPCommandLine PPD parameter [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2315005 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-01127974ec' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . Solutions addressing connectivity challenges with OpenPrinting cups-filters on Fedora 40 as outlined in advisory FEDORA-2024-01127974ec.. cups-browsed update,Fedora security,cups-filters vulnerability,remote printer security,OpenPrinting flaws. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 28, 2024 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedoraremote issue

Fedora 40: FEDORA-2024-01127974ec critical: libcupsfilters remote issue

Fix for remote vulnerabilities against OpenPrinting cups-filters. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-01127974ec 2024-09-28 01:26:49.812274 -------------------------------------------------------------------------------- Name : libcupsfilters Product : Fedora 40 Version : 2.1~b1 Release : 3.fc40 URL : https://github.com/OpenPrinting/libcupsfilters Summary : Library for developing printing filters Description : Libcupsfilters provides a library, which implements common functions used in cups-browsed daemon and printing filters, and additional files as banner templates and character sets. The filters are used in CUPS daemon and in printer applications. -------------------------------------------------------------------------------- Update Information: Fix for remote vulnerabilities against OpenPrinting cups-filters -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 26 2024 Justin M. Forbes - 1:2.1~b1-3 - Fix for CVE-2024-47076 * Thu Aug 22 2024 Marek Kasik - 1:2.1~b1-2 - Rebuild for poppler 24.08.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2314997 - [Major Incident] CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2314997 [ 2 ] Bug #2315000 - [Major Incident] CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2315000 [ 3 ] Bug #2315004 - [Major Incident] CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2315004 [ 4 ] Bug #2315005 - [Major Incident] CVE-2024-47177 cups-filters:foomatic-rip in cups-filters allows arbitrary command execution via the FoomaticRIPCommandLine PPD parameter [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2315005 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-01127974ec' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . The update of libcupsfilters in Fedora 40 addresses remote vulnerabilities in CUPS functionalities, enhancing overall security. Discover further details.. Fedora Security Updates, libcupsfilters, Printer Security, OpenPrinting fixes. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 28, 2024 •Critical Fedora
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdateFedora

Fedora 39 FEDORA-2024-cf6ab63871 critical: libcupsfilters remote issues

Fix for remote vulnerabilities against OpenPrinting cups-filters. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-cf6ab63871 2024-09-28 01:19:53.104014 -------------------------------------------------------------------------------- Name : libcupsfilters Product : Fedora 39 Version : 2.1~b1 Release : 3.fc39 URL : https://github.com/OpenPrinting/libcupsfilters Summary : Library for developing printing filters Description : Libcupsfilters provides a library, which implements common functions used in cups-browsed daemon and printing filters, and additional files as banner templates and character sets. The filters are used in CUPS daemon and in printer applications. -------------------------------------------------------------------------------- Update Information: Fix for remote vulnerabilities against OpenPrinting cups-filters -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 26 2024 Justin M. Forbes - 1:2.1~b1-3 - Fix for CVE-2024-47076 * Thu Aug 22 2024 Marek Kasik - 1:2.1~b1-2 - Rebuild for poppler 24.08.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2314996 - [Major Incident] CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2314996 [ 2 ] Bug #2314999 - [Major Incident] CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2314999 [ 3 ] Bug #2315002 - [Major Incident] CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2315002 [ 4 ] Bug #2315003 - [Major Incident] CVE-2024-47177 cups-filters:foomatic-rip in cups-filters allows arbitrary command execution via the FoomaticRIPCommandLine PPD parameter [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2315003 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-cf6ab63871' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 39 users should update libcupsfilters to address remote vulnerabilities highlighted in advisory FEDORA-2024-cf6ab63871 to enhance system security and resilience. Fedora, libcupsfilters, remote threats, security update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Sep 28, 2024 •Critical Fedora
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed HatDoS

Red Hat 8.1 RHSA-2022-1589-01 Important: Remote DoS Stack Overflow

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2022:1589-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:1589 Issue date: 2022-04-26 CVE Names: CVE-2022-0435 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS E4S (v. 8.1) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS (CVE-2022-0435) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2048738 - CVE-2022-0435 kernel: remote stack overflow via kernel panic on systems usingTIPC may lead to DoS 6. Package List: Red Hat Enterprise Linux BaseOS E4S (v.8.1): Source: kernel-4.18.0-147.65.1.el8_1.src.rpm aarch64: bpftool-4.18.0-147.65.1.el8_1.aarch64.rpm bpftool-debuginfo-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-core-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-cross-headers-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-debug-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-debug-core-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-debug-debuginfo-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-debug-devel-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-debug-modules-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-debug-modules-extra-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-debuginfo-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-debuginfo-common-aarch64-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-devel-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-headers-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-modules-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-modules-extra-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-tools-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-tools-debuginfo-4.18.0-147.65.1.el8_1.aarch64.rpm kernel-tools-libs-4.18.0-147.65.1.el8_1.aarch64.rpm perf-4.18.0-147.65.1.el8_1.aarch64.rpm perf-debuginfo-4.18.0-147.65.1.el8_1.aarch64.rpm python3-perf-4.18.0-147.65.1.el8_1.aarch64.rpm python3-perf-debuginfo-4.18.0-147.65.1.el8_1.aarch64.rpm noarch: kernel-abi-whitelists-4.18.0-147.65.1.el8_1.noarch.rpm kernel-doc-4.18.0-147.65.1.el8_1.noarch.rpm ppc64le: bpftool-4.18.0-147.65.1.el8_1.ppc64le.rpm bpftool-debuginfo-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-core-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-cross-headers-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-debug-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-debug-core-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-debug-debuginfo-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-debug-devel-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-debug-modules-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-debug-modules-extra-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-debuginfo-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-debuginfo-common-ppc64le-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-devel-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-headers-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-modules-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-modules-extra-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-tools-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-tools-debuginfo-4.18.0-147.65.1.el8_1.ppc64le.rpm kernel-tools-libs-4.18.0-147.65.1.el8_1.ppc64le.rpm perf-4.18.0-147.65.1.el8_1.ppc64le.rpm perf-debuginfo-4.18.0-147.65.1.el8_1.ppc64le.rpm python3-perf-4.18.0-147.65.1.el8_1.ppc64le.rpm python3-perf-debuginfo-4.18.0-147.65.1.el8_1.ppc64le.rpm s390x: bpftool-4.18.0-147.65.1.el8_1.s390x.rpm bpftool-debuginfo-4.18.0-147.65.1.el8_1.s390x.rpm kernel-4.18.0-147.65.1.el8_1.s390x.rpm kernel-core-4.18.0-147.65.1.el8_1.s390x.rpm kernel-cross-headers-4.18.0-147.65.1.el8_1.s390x.rpm kernel-debug-4.18.0-147.65.1.el8_1.s390x.rpm kernel-debug-core-4.18.0-147.65.1.el8_1.s390x.rpm kernel-debug-debuginfo-4.18.0-147.65.1.el8_1.s390x.rpm kernel-debug-devel-4.18.0-147.65.1.el8_1.s390x.rpm kernel-debug-modules-4.18.0-147.65.1.el8_1.s390x.rpm kernel-debug-modules-extra-4.18.0-147.65.1.el8_1.s390x.rpm kernel-debuginfo-4.18.0-147.65.1.el8_1.s390x.rpm kernel-debuginfo-common-s390x-4.18.0-147.65.1.el8_1.s390x.rpm kernel-devel-4.18.0-147.65.1.el8_1.s390x.rpm kernel-headers-4.18.0-147.65.1.el8_1.s390x.rpm kernel-modules-4.18.0-147.65.1.el8_1.s390x.rpm kernel-modules-extra-4.18.0-147.65.1.el8_1.s390x.rpm kernel-tools-4.18.0-147.65.1.el8_1.s390x.rpm kernel-tools-debuginfo-4.18.0-147.65.1.el8_1.s390x.rpm kernel-zfcpdump-4.18.0-147.65.1.el8_1.s390x.rpm kernel-zfcpdump-core-4.18.0-147.65.1.el8_1.s390x.rpm kernel-zfcpdump-debuginfo-4.18.0-147.65.1.el8_1.s390x.rpm kernel-zfcpdump-devel-4.18.0-147.65.1.el8_1.s390x.rpm kernel-zfcpdump-modules-4.18.0-147.65.1.el8_1.s390x.rpm kernel-zfcpdump-modules-extra-4.18.0-147.65.1.el8_1.s390x.rpm perf-4.18.0-147.65.1.el8_1.s390x.rpm perf-debuginfo-4.18.0-147.65.1.el8_1.s390x.rpm python3-perf-4.18.0-147.65.1.el8_1.s390x.rpm python3-perf-debuginfo-4.18.0-147.65.1.el8_1.s390x.rpm x86_64: bpftool-4.18.0-147.65.1.el8_1.x86_64.rpm bpftool-debuginfo-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-core-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-cross-headers-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-debug-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-debug-core-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-debug-debuginfo-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-debug-devel-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-debug-modules-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-debug-modules-extra-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-debuginfo-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-debuginfo-common-x86_64-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-devel-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-headers-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-modules-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-modules-extra-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-tools-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-tools-debuginfo-4.18.0-147.65.1.el8_1.x86_64.rpm kernel-tools-libs-4.18.0-147.65.1.el8_1.x86_64.rpm perf-4.18.0-147.65.1.el8_1.x86_64.rpm perf-debuginfo-4.18.0-147.65.1.el8_1.x86_64.rpm python3-perf-4.18.0-147.65.1.el8_1.x86_64.rpm python3-perf-debuginfo-4.18.0-147.65.1.el8_1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2022-0435 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYmhvfNzjgjWX9erEAQjiCg//bzHS5MLjE3N6PlJrIoxkrfated/FZp2z sVcrTujeUaiGm1xziy5VlRzLfUc64miv8Y71RXhmWmT/KrvDuA/03W5U1XSvU58T IdL+mFq0MD9cCPGxYw6Izmdg6rbi7nJ5sMvto8l9/VNWx226r2g/gxKUIGViPRy1 XNZ3fWd0b9HBGrwfGOBju7l3JkUVmWGP5JRZuk5KXRnwBik48jNEq8s9ljv9cRIa 7hsz+BF8kt9MwM1/6qeVQXyShJWOZ6yXGJxo0d5IBnn0x5ImV7fITIovyJ80PErv 41Y2ByAUSvdAcVPTUomNpRFRxm5wl2zkrZss2eyJRgEgBpB8i0JoD7ZzWeKY8Qhu uVEpo0ugDJD04bpzXtSLyZVvWDzWkkSKKr8ZXVVtgOkMooWco8GaNbeZhUZ5yZzG 6/e//vpPlxRMoWt4CphCbBNYSbjAEM+lQ42cUy7SdTUc9rKAOJee7gI6MMimfBio d5AW6bliOxez9oQ2JYDgYN1PlZF2z8RmHG0DB9kR2resgBsESCNLU+VKLn+XHJFy QEz6RjkV4co5bRa+RW63Kxnr45rGMx/Ap6t94kRRcxEKhMI3pBel8qLpo0v55h9W o0AoEMxscdjw93y9ijXwaB0+C7EmCOsXXmGnWoKxUg8HU+pknJxuDLh+J0UW2phR YOEd57P8tU0=JFLF -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://listman.redhat.com/mailman/listinfo/rhsa-announce . New kernel patch released for Red Hat Enterprise Linux 8.1 addressing critical security vulnerabilities. It's essential to implement this update to safeguard your system.. Red Hat Kernel, Security Update, DoS Protection, Linux Patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 26, 2022 •Important Red Hat
Banner 3 1028x280 1708121785 1771599793
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianremote issue

Debian: DSA-2381-1 Critical: Squid3 Invalid Pointer Daemon Crash

It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. . -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1 - -------------------------------------------------------------------------Debian Security Advisory DSA-2381-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Florian Weimer January 06, 2012 http://www.debian.org/security/faq - -------------------------------------------------------------------------Package : squid3 Vulnerability : invalid memory deallocation Problem type : remote Debian-specific: no CVE ID : CVE-2011-4096 It was discovered that the IPv6 support code in Squid does not properly handle certain DNS responses, resulting in deallocation of an invalid pointer and a daemon crash. The squid package and the version of squid3 shipped in lenny lack IPv6 support and are not affected by this issue. For the stable distribution (squeeze), this problem has been fixed in version 3.1.6-1.2+squeeze2. For the testing distribution (wheezy) and the unstable distribution (sid), this problem has been fixed in version 3.1.18-1. We recommend that you upgrade your squid3 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Important notice for squid3 users on Debian pertaining to improper pointer management that results in potential service interruption. An update is strongly advised.. squid3 update, debian security advisory, invalid memory handling, networking issues. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 25, 2020 •Critical Debian
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderateRed Hat

Red Hat: RHSA-2017:2882-01 Moderate: httpd Remote Issue

An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: httpd security update Advisory ID: RHSA-2017:2882-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2017:2882 Issue date: 2017-10-11 CVE Names: CVE-2017-9798 ==================================================================== 1. Summary: An update for httpd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Server (v. 7) - aarch64, noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - aarch64, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * A use-after-free flaw was found in the way httpd handled invalid and previously unregistered HTTP methods specified in the Limit directive used in an .htaccess file. A remote attacker could possibly use this flaw to disclose portions of the server memory, or cause httpd child processto crash. (CVE-2017-9798) Red Hat would like to thank Hanno Böck for reporting this issue. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1490344 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed) 6. Package List: Red Hat Enterprise Linux Client Optional (v. 7): Source: httpd-2.4.6-67.el7_4.5.src.rpm noarch: httpd-manual-2.4.6-67.el7_4.5.noarch.rpm x86_64: httpd-2.4.6-67.el7_4.5.x86_64.rpm httpd-debuginfo-2.4.6-67.el7_4.5.x86_64.rpm httpd-devel-2.4.6-67.el7_4.5.x86_64.rpm httpd-tools-2.4.6-67.el7_4.5.x86_64.rpm mod_ldap-2.4.6-67.el7_4.5.x86_64.rpm mod_proxy_html-2.4.6-67.el7_4.5.x86_64.rpm mod_session-2.4.6-67.el7_4.5.x86_64.rpm mod_ssl-2.4.6-67.el7_4.5.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): Source: httpd-2.4.6-67.el7_4.5.src.rpm noarch: httpd-manual-2.4.6-67.el7_4.5.noarch.rpm x86_64: httpd-2.4.6-67.el7_4.5.x86_64.rpm httpd-debuginfo-2.4.6-67.el7_4.5.x86_64.rpm httpd-devel-2.4.6-67.el7_4.5.x86_64.rpm httpd-tools-2.4.6-67.el7_4.5.x86_64.rpm mod_ldap-2.4.6-67.el7_4.5.x86_64.rpm mod_proxy_html-2.4.6-67.el7_4.5.x86_64.rpm mod_session-2.4.6-67.el7_4.5.x86_64.rpm mod_ssl-2.4.6-67.el7_4.5.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: httpd-2.4.6-67.el7_4.5.src.rpm aarch64: httpd-2.4.6-67.el7_4.5.aarch64.rpm httpd-debuginfo-2.4.6-67.el7_4.5.aarch64.rpm httpd-devel-2.4.6-67.el7_4.5.aarch64.rpm httpd-tools-2.4.6-67.el7_4.5.aarch64.rpm mod_session-2.4.6-67.el7_4.5.aarch64.rpm mod_ssl-2.4.6-67.el7_4.5.aarch64.rpm noarch: httpd-manual-2.4.6-67.el7_4.5.noarch.rpm ppc64: httpd-2.4.6-67.el7_4.5.ppc64.rpm httpd-debuginfo-2.4.6-67.el7_4.5.ppc64.rpm httpd-devel-2.4.6-67.el7_4.5.ppc64.rpm httpd-tools-2.4.6-67.el7_4.5.ppc64.rpm mod_session-2.4.6-67.el7_4.5.ppc64.rpm mod_ssl-2.4.6-67.el7_4.5.ppc64.rpm ppc64le: httpd-2.4.6-67.el7_4.5.ppc64le.rpm httpd-debuginfo-2.4.6-67.el7_4.5.ppc64le.rpm httpd-devel-2.4.6-67.el7_4.5.ppc64le.rpm httpd-tools-2.4.6-67.el7_4.5.ppc64le.rpm mod_session-2.4.6-67.el7_4.5.ppc64le.rpm mod_ssl-2.4.6-67.el7_4.5.ppc64le.rpm s390x: httpd-2.4.6-67.el7_4.5.s390x.rpm httpd-debuginfo-2.4.6-67.el7_4.5.s390x.rpm httpd-devel-2.4.6-67.el7_4.5.s390x.rpm httpd-tools-2.4.6-67.el7_4.5.s390x.rpm mod_session-2.4.6-67.el7_4.5.s390x.rpm mod_ssl-2.4.6-67.el7_4.5.s390x.rpm x86_64: httpd-2.4.6-67.el7_4.5.x86_64.rpm httpd-debuginfo-2.4.6-67.el7_4.5.x86_64.rpm httpd-devel-2.4.6-67.el7_4.5.x86_64.rpm httpd-tools-2.4.6-67.el7_4.5.x86_64.rpm mod_session-2.4.6-67.el7_4.5.x86_64.rpm mod_ssl-2.4.6-67.el7_4.5.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): aarch64: httpd-debuginfo-2.4.6-67.el7_4.5.aarch64.rpm mod_ldap-2.4.6-67.el7_4.5.aarch64.rpm mod_proxy_html-2.4.6-67.el7_4.5.aarch64.rpm ppc64: httpd-debuginfo-2.4.6-67.el7_4.5.ppc64.rpm mod_ldap-2.4.6-67.el7_4.5.ppc64.rpm mod_proxy_html-2.4.6-67.el7_4.5.ppc64.rpm ppc64le: httpd-debuginfo-2.4.6-67.el7_4.5.ppc64le.rpm mod_ldap-2.4.6-67.el7_4.5.ppc64le.rpm mod_proxy_html-2.4.6-67.el7_4.5.ppc64le.rpm s390x: httpd-debuginfo-2.4.6-67.el7_4.5.s390x.rpm mod_ldap-2.4.6-67.el7_4.5.s390x.rpm mod_proxy_html-2.4.6-67.el7_4.5.s390x.rpm x86_64: httpd-debuginfo-2.4.6-67.el7_4.5.x86_64.rpm mod_ldap-2.4.6-67.el7_4.5.x86_64.rpm mod_proxy_html-2.4.6-67.el7_4.5.x86_64.rpm Red Hat EnterpriseLinux Workstation (v. 7): Source: httpd-2.4.6-67.el7_4.5.src.rpm noarch: httpd-manual-2.4.6-67.el7_4.5.noarch.rpm x86_64: httpd-2.4.6-67.el7_4.5.x86_64.rpm httpd-debuginfo-2.4.6-67.el7_4.5.x86_64.rpm httpd-devel-2.4.6-67.el7_4.5.x86_64.rpm httpd-tools-2.4.6-67.el7_4.5.x86_64.rpm mod_session-2.4.6-67.el7_4.5.x86_64.rpm mod_ssl-2.4.6-67.el7_4.5.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: httpd-debuginfo-2.4.6-67.el7_4.5.x86_64.rpm mod_ldap-2.4.6-67.el7_4.5.x86_64.rpm mod_proxy_html-2.4.6-67.el7_4.5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2017-9798 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2017 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFZ3j/PXlSAg2UNWIIRAjj4AJ9aWm7uMM+VXJwqPhBAgru0NzgV7gCfc5c/ 5M8zBAvRPM2JGUVh7UDQOu0=R+Vp -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . CentOS 7 enhances its firewall settings to mitigate possible vulnerabilities in networking services, improving defense against unauthorized access.. Red Hat Security, Apache HTTP, Server Security Update. . LinuxSecurity.com Team

Calendar%202 Oct 11, 2017 Red Hat
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedorasecurity fix

Fedora: 2017-71c47e1e82 critical: krb5 KDC Remote Issue Fix

Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-71c47e1e82 2017-07-25 15:00:33.871985 --------------------------------------------------------------------------------Name : krb5 Product : Fedora 24 Version : 1.14.4 Release : 5.fc24 URL : http://web.mit.edu/kerberos/www/ Summary : The Kerberos network authentication system Description : Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending passwords over the network in unencrypted form. --------------------------------------------------------------------------------Update Information: Fix CVE-2017-11368 (remote triggerable assertion failure in krb5kdc) --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade krb5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Resolves a significant vulnerability in krb5kdc for Fedora 24, enhancing system integrity against remote exploitation.. Fedora Security, krb5 Fix, Remote Assertion Failure. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 25, 2017 •Critical Fedora
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryfile overwritecritical update

openSUSE 42.1: 2016:1884-1 Critical: karchive Remote File Overwrite

An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available. An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for karchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1884-1 Rating: important References: #989698 Cross-References: CVE-2016-6232 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for karchive fixes the following issues: - CVE-2016-6232: A remote attacker could have been able to overwrite arbitrary files when tricking the user into downloading KDE extras such as wallpapers or Plasma Applets (boo#989698) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-904=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-904=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): karchive-debugsource-5.21.0-15.1 karchive-devel-5.21.0-15.1 libKF5Archive5-5.21.0-15.1 libKF5Archive5-debuginfo-5.21.0-15.1 - openSUSE Leap 42.1 (x86_64): karchive-devel-32bit-5.21.0-15.1 libKF5Archive5-32bit-5.21.0-15.1 libKF5Archive5-debuginfo-32bit-5.21.0-15.1 - openSUSE 13.2 (i586 x86_64): karchive-debugsource-5.11.0-27.1 karchive-devel-5.11.0-27.1 libKF5Archive5-5.11.0-27.1 libKF5Archive5-debuginfo-5.11.0-27.1 - openSUSE 13.2 (x86_64): karchive-devel-32bit-5.11.0-27.1 libKF5Archive5-32bit-5.11.0-27.1 libKF5Archive5-debuginfo-32bit-5.11.0-27.1 References: https://www.suse.com/security/cve/CVE-2016-6232.html https://bugzilla.suse.com/989698 . openSUSE has released a critical security patch for karchive to mitigate potential risks of unauthorized file overwrite via remote means. Detailed instructions are provided.. openSUSE Security,karchive Update,remote access risk,vulnerability fix. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 27, 2016 •Important OpenSUSE
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics