Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisoryfedorasoftware updateFedora 34: FEDORA-2021-2f9dcdbace Moderate: Matrix-Synapse Remote Overwrite
Update to v1.48.0 ---- Update to v1.47.1 Fix CVE-2021-41281 ---- Update to v1.47.0. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-2f9dcdbace 2021-12-09 01:34:54.384249 --------------------------------------------------------------------------------Name : matrix-synapse Product : Fedora 34 Version : 1.48.0 Release : 1.fc34 URL : https://github.com/matrix-org/synapse Summary : A Matrix reference homeserver written in Python using Twisted Description : Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in the context of a coded base and let you run your own homeserver and generally help bootstrap the ecosystem. --------------------------------------------------------------------------------Update Information: Update to v1.48.0 ---- Update to v1.47.1 Fix CVE-2021-41281 ---- Update to v1.47.0 --------------------------------------------------------------------------------ChangeLog: * Tue Nov 30 2021 Kai A. Hiller - 1.48.0-1 - Update to v1.48.0 * Wed Nov 24 2021 Kai A. Hiller - 1.47.1-1 - Update to v1.47.1 - Fix CVE-2021-41281 * Fri Nov 19 2021 Kai A. Hiller - 1.47.0-1 - Update to v1.47.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #2026127 - CVE-2021-41281: remote overwrite vulnerability in
Dec 08, 2021
Fedora
89
security advisorysoftware updateFedoraCentOS 8: 2022-1234567abcdef Low: Apache-Struts SQL Injection Fix
Update to v1.48.0 ---- Update to v1.47.1 ---- Update to v1.47.0. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-9758549fce 2021-12-09 01:11:04.658120 --------------------------------------------------------------------------------Name : matrix-synapse Product : Fedora 35 Version : 1.48.0 Release : 1.fc35 URL : https://github.com/matrix-org/synapse Summary : A Matrix reference homeserver written in Python using Twisted Description : Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in the context of a coded base and let you run your own homeserver and generally help bootstrap the ecosystem. --------------------------------------------------------------------------------Update Information: Update to v1.48.0 ---- Update to v1.47.1 ---- Update to v1.47.0 --------------------------------------------------------------------------------ChangeLog: * Tue Nov 30 2021 Kai A. Hiller - 1.48.0-1 - Update to v1.48.0 * Wed Nov 24 2021 Kai A. Hiller - 1.47.1-1 - Update to v1.47.1 - Fix CVE-2021-41281 * Fri Nov 19 2021 Kai A. Hiller - 1.47.0-1 - Update to v1.47.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #2026127 - CVE-2021-41281: remote overwrite vulnerability in
Dec 08, 2021
•Low
Fedora
98
security advisorymoderateRed HatRed Hat 8.2: RHSA-2020-5417 Moderate: curl Remote Overwrite Issue
An update for curl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: curl security and bug fix update Advisory ID: RHSA-2020:5417-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:5417 Issue date: 2020-12-15 CVE Names: CVE-2020-8177 ==================================================================== 1. Summary: An update for curl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS EUS (v. 8.2) - aarch64, ppc64le, s390x, x86_64 3. Description: The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: Incorrect argument check can allow remote servers to overwrite local files (CVE-2020-8177) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * libcurl: Segfault when HTTPS_PROXY and NO_PROXY is used together (BZ#1900103) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1847915- CVE-2020-8177 curl: Incorrect argument check can allow remote servers to overwrite local files 1900103 - libcurl: Segfault when HTTPS_PROXY and NO_PROXY is used together [rhel-8.2.0.z] 6. Package List: Red Hat Enterprise Linux BaseOS EUS (v.8.2): Source: curl-7.61.1-12.el8_2.2.src.rpm aarch64: curl-7.61.1-12.el8_2.2.aarch64.rpm curl-debuginfo-7.61.1-12.el8_2.2.aarch64.rpm curl-debugsource-7.61.1-12.el8_2.2.aarch64.rpm curl-minimal-debuginfo-7.61.1-12.el8_2.2.aarch64.rpm libcurl-7.61.1-12.el8_2.2.aarch64.rpm libcurl-debuginfo-7.61.1-12.el8_2.2.aarch64.rpm libcurl-devel-7.61.1-12.el8_2.2.aarch64.rpm libcurl-minimal-7.61.1-12.el8_2.2.aarch64.rpm libcurl-minimal-debuginfo-7.61.1-12.el8_2.2.aarch64.rpm ppc64le: curl-7.61.1-12.el8_2.2.ppc64le.rpm curl-debuginfo-7.61.1-12.el8_2.2.ppc64le.rpm curl-debugsource-7.61.1-12.el8_2.2.ppc64le.rpm curl-minimal-debuginfo-7.61.1-12.el8_2.2.ppc64le.rpm libcurl-7.61.1-12.el8_2.2.ppc64le.rpm libcurl-debuginfo-7.61.1-12.el8_2.2.ppc64le.rpm libcurl-devel-7.61.1-12.el8_2.2.ppc64le.rpm libcurl-minimal-7.61.1-12.el8_2.2.ppc64le.rpm libcurl-minimal-debuginfo-7.61.1-12.el8_2.2.ppc64le.rpm s390x: curl-7.61.1-12.el8_2.2.s390x.rpm curl-debuginfo-7.61.1-12.el8_2.2.s390x.rpm curl-debugsource-7.61.1-12.el8_2.2.s390x.rpm curl-minimal-debuginfo-7.61.1-12.el8_2.2.s390x.rpm libcurl-7.61.1-12.el8_2.2.s390x.rpm libcurl-debuginfo-7.61.1-12.el8_2.2.s390x.rpm libcurl-devel-7.61.1-12.el8_2.2.s390x.rpm libcurl-minimal-7.61.1-12.el8_2.2.s390x.rpm libcurl-minimal-debuginfo-7.61.1-12.el8_2.2.s390x.rpm x86_64: curl-7.61.1-12.el8_2.2.x86_64.rpm curl-debuginfo-7.61.1-12.el8_2.2.i686.rpm curl-debuginfo-7.61.1-12.el8_2.2.x86_64.rpm curl-debugsource-7.61.1-12.el8_2.2.i686.rpm curl-debugsource-7.61.1-12.el8_2.2.x86_64.rpm curl-minimal-debuginfo-7.61.1-12.el8_2.2.i686.rpm curl-minimal-debuginfo-7.61.1-12.el8_2.2.x86_64.rpm libcurl-7.61.1-12.el8_2.2.i686.rpm libcurl-7.61.1-12.el8_2.2.x86_64.rpm libcurl-debuginfo-7.61.1-12.el8_2.2.i686.rpm libcurl-debuginfo-7.61.1-12.el8_2.2.x86_64.rpm libcurl-devel-7.61.1-12.el8_2.2.i686.rpm libcurl-devel-7.61.1-12.el8_2.2.x86_64.rpm libcurl-minimal-7.61.1-12.el8_2.2.i686.rpm libcurl-minimal-7.61.1-12.el8_2.2.x86_64.rpm libcurl-minimal-debuginfo-7.61.1-12.el8_2.2.i686.rpm libcurl-minimal-debuginfo-7.61.1-12.el8_2.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-8177 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX9h65tzjgjWX9erEAQhl5w//YmKVTzfBdkPw7TFSC0ADA2XJlkXX8OEG 7sBav0zb+5/lJvItXbJT0+DbZGpVGFtfZCTqVWyrVjhKbfQTLnPO6a8vefZwBRmT qZVpEF7C1RGrvn3wozFvqm8dd5OwaohhxRDINBzcJAZy23c0zuJwApBXsOKdP5HL pqfS9jNTfUQNdPgqzOvUDBadXLy0UEDgAS2/jZr/QifhcFn6eKQqCbWJpWf+Adgp fmogAtivYWAdaZvJ7NjAY6BJJ3E+j5UKm8v/gYARA4+FAwiDcfSiLkVQWfaXMkES +vlu5JnXi1olbMsq6qXY17thaTbI9X6sM+TRYnHXd+ADA4XqHTlKNKKD3/7BOhZw s4wawL9zs2x5XAXPZ9cEcwz9UBqVxyrU4EiUuuFPAoYYAXlOYGQtBDE+O6jVJywc TB+LAPtIMaoPani/aiiwoCeEkyPiMkKNoXDeed9s69qRVRNIhdAyes8L/4fvnrSy OTj2Mr/dMr0ws0J2K2LJfc8nkeeT8R/ld7ewEwHnRfTkr/P6B+0sWJthKPp9VHQ3 8iRkuA1411hiITMgMEztRcbGzsflQkDNOi77PnDfULzTolp1NVQ77nIoPCQyed20 Bmo6s0RET5DPQh0C9krynimFrzU2avPl85gWTa/zw+3WvV0QodxJ9k4c44RwNmy1 wQL/vinD7OA=1tPi -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Dec 15, 2020
Red Hat
87
security advisorysecurity issuedebianDebian DSA-3643-1 Critical: kde4libs Remote File Overwrite Threat
Andreas Cord-Landwehr discovered that kde4libs, the core libraries for all KDE 4 applications, do not properly handle the extraction of archives with "../" in the file paths. A remote attacker can take advantage of this flaw to overwrite files outside of the . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3643-1
Aug 06, 2016
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!