Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89

Fedora 31: Firejail 2020-80a6d7e7e0 Moderate: Command Injection Risk

Rebase to version 0.9.62.4 ---- Rebase to version 0.9.62.2. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-80a6d7e7e0 2020-08-26 14:39:49.222437 --------------------------------------------------------------------------------Name : firejail Product : Fedora 31 Version : 0.9.62.4 Release : 1.fc31 URL : https://github.com/netblue30/firejail Summary : Linux namespaces sandbox program Description : Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces. It includes a sandbox profile for Mozilla Firefox. --------------------------------------------------------------------------------Update Information: Rebase to version 0.9.62.4 ---- Rebase to version 0.9.62.2 --------------------------------------------------------------------------------ChangeLog: * Tue Aug 18 2020 Ondrej Dubaj - 0.9.62.4-1 - Rebase to version 0.9.62.4 * Wed Aug 12 2020 Ondrej Dubaj - 0.9.62.2-1 - Rebase to version 0.9.62.2 --------------------------------------------------------------------------------References: [ 1 ] Bug #1868014 - firejail-0.9.62.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=1868014 [ 2 ] Bug #1868336 - CVE-2020-17367 firejail: end-of-options indicator after the --output option not respected which may lead to command injection [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1868336 [ 3 ] Bug #1868338 - CVE-2020-17368 firejail: mishandling shell metacharacters during use of the --output may lead to command injection [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1868338 [ 4 ] Bug #1869381 - firejail-0.9.62.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1869381 --------------------------------------------------------------------------------This update can be installed with the "dnf" updateprogram. Use su -c 'dnf upgrade --advisory FEDORA-2020-80a6d7e7e0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Enhancement notice for firejail regarding address command injection vulnerabilities, improving overall security measures in Fedora 31. Execute with dnf upgrade.. firejail update, Fedora security, command injection fix. . LinuxSecurity.com Team

Calendar 2 Aug 26, 2020 Fedora
89

Fedora 31: FEDORA-2020-7f6e0e6e00 Firejail Security Update

Rebase to version 0.9.62. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-7f6e0e6e00 2020-02-27 17:26:04.898136 --------------------------------------------------------------------------------Name : firejail Product : Fedora 31 Version : 0.9.62 Release : 1.fc31 URL : https://github.com/netblue30/firejail Summary : Linux namespaces sandbox program Description : Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces. It includes a sandbox profile for Mozilla Firefox. --------------------------------------------------------------------------------Update Information: Rebase to version 0.9.62 --------------------------------------------------------------------------------ChangeLog: * Mon Feb 17 2020 Ondrej Dubaj - 0.9.62-1 - Rebase to version 0.9.62 --------------------------------------------------------------------------------References: [ 1 ] Bug #1725965 - firejail-0.9.62 is available https://bugzilla.redhat.com/show_bug.cgi?id=1725965 [ 2 ] Bug #1716681 - CVE-2019-12589 firejail: improper seccomp restrictions due to filters being writable inside the jail [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1716681 [ 3 ] Bug #1803907 - Error mounting appimage: appimage.c:119 appimage_set: Invalid argument https://bugzilla.redhat.com/show_bug.cgi?id=1803907 [ 4 ] Bug #1787915 - [abrt] firejail: ioperm(): faudit killed by SIGSYS https://bugzilla.redhat.com/show_bug.cgi?id=1787915 [ 5 ] Bug #1716910 - CVE-2019-12499 firejail: file descriptors command execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1716910 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2020-7f6e0e6e00' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora has rolled out an upgrade for firejail, now at version 0.9.62, significantly improving the capability to sandbox untrusted applications, thus bolstering overall security.. firejail security update, Fedora firejail advisory, firejail security fix, sandboxing applications. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 27, 2020 Important Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here