Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
200

Scientific Linux: SLSA-2023-0817-1 Important Thunderbird Security Fix

This update upgrades Thunderbird to version 102.8.0. * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Inv [More...]. Synopsis: Important: thunderbird security update Advisory ID: SLSA-2023:0817-1 Issue Date: 2023-02-20 CVE Numbers: CVE-2023-25728 CVE-2023-25730 CVE-2023-25743 CVE-2023-0767 CVE-2023-25735 CVE-2023-25737 CVE-2023-25739 CVE-2023-25729 CVE-2023-25732 CVE-2023-25742 CVE-2023-25744 CVE-2023-25746 CVE-2023-0616 -- This update upgrades Thunderbird to version 102.8.0. Security Fix(es): * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: User Interface lockup with messages combining S/MIMEand OpenPGP (CVE-2023-0616) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE -- SL7 x86_64 thunderbird-102.8.0-2.el7_9.x86_64.rpm thunderbird-debuginfo-102.8.0-2.el7_9.x86_64.rpm - Scientific Linux Development Team . Crucial patches for Thunderbird have been released, targeting several security flaws, with a focus on memory corruption and unauthorized screen access.. Thunderbird Security, Upgrade Version, NSS Memory Safety. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 20, 2023 Important Scientific Linux
98

RedHat Enterprise Linux 9 Important: RHSA-2023-0824-01 Thunderbird Update

An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: thunderbird security update Advisory ID: RHSA-2023:0824-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:0824 Issue date: 2023-02-20 CVE Names: CVE-2023-0616 CVE-2023-0767 CVE-2023-25728 CVE-2023-25729 CVE-2023-25730 CVE-2023-25732 CVE-2023-25735 CVE-2023-25737 CVE-2023-25739 CVE-2023-25742 CVE-2023-25743 CVE-2023-25744 CVE-2023-25746 ==================================================================== 1. Summary: An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.8.0. Security Fix(es): * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcastin SVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP (CVE-2023-0616) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of Thunderbird must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2170374 - CVE-2023-25728 Mozilla: Content security policy leak in violation reports using iframes 2170375 - CVE-2023-25730 Mozilla: Screen hijack via browser fullscreen mode 2170376 - CVE-2023-25743 Mozilla: Fullscreen notification not shown in Firefox Focus 2170377 - CVE-2023-0767 Mozilla: Arbitrary memory write via PKCS 12 in NSS 2170378 - CVE-2023-25735 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey 2170379 - CVE-2023-25737 Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry 2170381 - CVE-2023-25739 Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext 2170382 - CVE-2023-25729 Mozilla: Extensions could have opened external schemes without user knowledge 2170383 - CVE-2023-25732 Mozilla: Out of bounds memory write from EncodeInputStream 2170390 -CVE-2023-25742 Mozilla: Web Crypto ImportKey crashes tab 2170391 - CVE-2023-25744 Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 2170402 - CVE-2023-25746 Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 2171397 - CVE-2023-0616 Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP 6. Package List: Red Hat Enterprise Linux AppStream (v. 9): Source: thunderbird-102.8.0-2.el9_1.src.rpm aarch64: thunderbird-102.8.0-2.el9_1.aarch64.rpm thunderbird-debuginfo-102.8.0-2.el9_1.aarch64.rpm thunderbird-debugsource-102.8.0-2.el9_1.aarch64.rpm ppc64le: thunderbird-102.8.0-2.el9_1.ppc64le.rpm thunderbird-debuginfo-102.8.0-2.el9_1.ppc64le.rpm thunderbird-debugsource-102.8.0-2.el9_1.ppc64le.rpm s390x: thunderbird-102.8.0-2.el9_1.s390x.rpm thunderbird-debuginfo-102.8.0-2.el9_1.s390x.rpm thunderbird-debugsource-102.8.0-2.el9_1.s390x.rpm x86_64: thunderbird-102.8.0-2.el9_1.x86_64.rpm thunderbird-debuginfo-102.8.0-2.el9_1.x86_64.rpm thunderbird-debugsource-102.8.0-2.el9_1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2023-0616 https://access.redhat.com/security/cve/CVE-2023-0767 https://access.redhat.com/security/cve/CVE-2023-25728 https://access.redhat.com/security/cve/CVE-2023-25729 https://access.redhat.com/security/cve/CVE-2023-25730 https://access.redhat.com/security/cve/CVE-2023-25732 https://access.redhat.com/security/cve/CVE-2023-25735 https://access.redhat.com/security/cve/CVE-2023-25737 https://access.redhat.com/security/cve/CVE-2023-25739 https://access.redhat.com/security/cve/CVE-2023-25742 https://access.redhat.com/security/cve/CVE-2023-25743 https://access.redhat.com/security/cve/CVE-2023-25744 https://access.redhat.com/security/cve/CVE-2023-25746 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . Morecontact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBY/O7/dzjgjWX9erEAQiXiA/+MoFSpvKXYrTWHqymS4HzuRuEyLw47Y7W yX/rs4C+wJ+0nwEhOK8Ds62OUAC0xP6v9p7Uub7xByXrRRyBnrfH+KgXjnzd7tec XTKIv2etk6hC7cb6HNNNqmG9sia7tQGnJJPjMYypzS52U2Bllf8Oq9X4lnMZFQls Th7nv0P7zuNnVq9bu2r2ndNQK1hT2ai0pLlf84Xnipk1eClfUXd6GZ5MIbwZCKqD S5VhAlGOIuPn4W/fT3UH2TVJchQ8ode84STyweUouLmhzMM5AcJN7XxAH0cmQIYi ZRnv8x3gshdmlzM95vBGQqwuTGC/DW1udbo5NgFQiIL1cjBxRduKmsp3MTFSXZLB tv0hLqjQMDC3Ldd1TmIfpxi3nayr8hCgpn06B6F1GUB8/vG+ocMkcO8uOxtNkty8 27fqpuA29RJnWmUnSzfnepg7X0AOf/b+3MOcHI5336E0TBr+un9vluAbV9X/k5N6 WBd7BppnnqcP0C4EmljCkKqLGPCbDQ7lWuLFdy6d8ye4aPJGstOgLkYc/vJak4e8 rxfUFwCXRtAaSEzgjm7SjuII7Y+eEMkN7GARRdztc9Ta1Tl2VkXtgc0yjTaGCRg+ nhr3EaTWMMw+dSTDbYjL9WqaOosv78CeT4Zu6EN/9elljlk0VU2hLJPchHkKEcnG c2zHHoFZY3k=gNig -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Crucial lightning-fast email client security enhancement for CentOS addresses multiple memory integrity flaws and concerns.. RedHat, Thunderbird Update, Important Security Patch, Memory Safety Issues. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 20, 2023 Important Red Hat
98

Red Hat Enterprise Linux 9.0 RHSA-2023-0809-01 Important: Firefox Update

An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: firefox security update Advisory ID: RHSA-2023:0809-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:0809 Issue date: 2023-02-20 CVE Names: CVE-2023-0767 CVE-2023-25728 CVE-2023-25729 CVE-2023-25730 CVE-2023-25732 CVE-2023-25735 CVE-2023-25737 CVE-2023-25739 CVE-2023-25742 CVE-2023-25743 CVE-2023-25744 CVE-2023-25746 ==================================================================== 1. Summary: An update for firefox is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v.9.0) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.8.0 ESR. Security Fix(es): * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy leak in violation reports using iframes (CVE-2023-25728) * Mozilla: Screen hijack via browser fullscreen mode (CVE-2023-25730) * Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey (CVE-2023-25735) * Mozilla: Invalid downcast inSVGUtils::SetupStrokeGeometry (CVE-2023-25737) * Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext (CVE-2023-25739) * Mozilla: Fullscreen notification not shown in Firefox Focus (CVE-2023-25743) * Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8 (CVE-2023-25744) * Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 (CVE-2023-25746) * Mozilla: Extensions could have opened external schemes without user knowledge (CVE-2023-25729) * Mozilla: Out of bounds memory write from EncodeInputStream (CVE-2023-25732) * Mozilla: Web Crypto ImportKey crashes tab (CVE-2023-25742) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2170374 - CVE-2023-25728 Mozilla: Content security policy leak in violation reports using iframes 2170375 - CVE-2023-25730 Mozilla: Screen hijack via browser fullscreen mode 2170376 - CVE-2023-25743 Mozilla: Fullscreen notification not shown in Firefox Focus 2170377 - CVE-2023-0767 Mozilla: Arbitrary memory write via PKCS 12 in NSS 2170378 - CVE-2023-25735 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey 2170379 - CVE-2023-25737 Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry 2170381 - CVE-2023-25739 Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext 2170382 - CVE-2023-25729 Mozilla: Extensions could have opened external schemes without user knowledge 2170383 - CVE-2023-25732 Mozilla: Out of bounds memory write from EncodeInputStream 2170390 - CVE-2023-25742 Mozilla: Web Crypto ImportKey crashes tab 2170391 - CVE-2023-25744 Mozilla: Memory safetybugs fixed in Firefox 110 and Firefox ESR 102.8 2170402 - CVE-2023-25746 Mozilla: Memory safety bugs fixed in Firefox ESR 102.8 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.9.0): Source: firefox-102.8.0-2.el9_0.src.rpm aarch64: firefox-102.8.0-2.el9_0.aarch64.rpm firefox-debuginfo-102.8.0-2.el9_0.aarch64.rpm firefox-debugsource-102.8.0-2.el9_0.aarch64.rpm ppc64le: firefox-102.8.0-2.el9_0.ppc64le.rpm firefox-debuginfo-102.8.0-2.el9_0.ppc64le.rpm firefox-debugsource-102.8.0-2.el9_0.ppc64le.rpm s390x: firefox-102.8.0-2.el9_0.s390x.rpm firefox-debuginfo-102.8.0-2.el9_0.s390x.rpm firefox-debugsource-102.8.0-2.el9_0.s390x.rpm x86_64: firefox-102.8.0-2.el9_0.x86_64.rpm firefox-debuginfo-102.8.0-2.el9_0.x86_64.rpm firefox-debugsource-102.8.0-2.el9_0.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-0767 https://access.redhat.com/security/cve/CVE-2023-25728 https://access.redhat.com/security/cve/CVE-2023-25729 https://access.redhat.com/security/cve/CVE-2023-25730 https://access.redhat.com/security/cve/CVE-2023-25732 https://access.redhat.com/security/cve/CVE-2023-25735 https://access.redhat.com/security/cve/CVE-2023-25737 https://access.redhat.com/security/cve/CVE-2023-25739 https://access.redhat.com/security/cve/CVE-2023-25742 https://access.redhat.com/security/cve/CVE-2023-25743 https://access.redhat.com/security/cve/CVE-2023-25744 https://access.redhat.com/security/cve/CVE-2023-25746 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBY/NnmNzjgjWX9erEAQjgmA//UGUjNyaf3J0XFeDXzPwmJT36dRfx4ePM zDBghvMV5bCw7zqPxyone/aSgsMD2slK4d7l1LUAaFVwPoixJRpk2Xx7XXbOvlus gY+vH+l5YoTPTYxM+555PvQzROvhVAr6WqZt9dxjeMMyI10YdlghfDrMAu5+gK6M Zp/3oACu1x9WmZ2jOSEQEHnfYw1otaD2Cj3DwQszFshJWd+NsUwx3QoEddJIpWmf g1J3j4dEJwV/0txv5cblqgE9Hm0XHDevdqPjAhBhCmtIopSgIkmxNcVuf1Vi5awA 3HulGSQkmyR3JEe9fJv7Izi3tRdzUPnAoTsR2PIJBgD2ajEbtNoEAYtXFJq46d8s YxDoZaExwhe3CXCxHD3W8huy3ijcSr/pbZIEZ+mT79GjncAz5ZowNTV9/4WSU7yz l74Yu7U33b9cAcEU7qTngL2Zi6lieP1UrnymE37TW2/DFgktKgd37kW246qkW24M gs+31356dU+5j4gXSynjHgtEM7WpYtflaJXzPyA2F6oQ4TjWk7kmoJbL5fWcoGFZ ZCrlFz3/XfhIvhCTWjZFN6rxPXPpgdZonC+0BM8kJYyep/CBeaJ7dhVQ9ygZwGAF 9+s0h3rUyezZx25aP0zjU868CIyijgZysztoeWhX9EFp5QEuyAyH0fUIljXIn9rF coqKDjmrADw=rAob -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Linux 12.1 launches a crucial Chrome patch to fix vulnerabilities. Reboot required for implementation.. Red Hat Security, Firefox Update, Enterprise Linux, Security Impact, Memory Safety. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 20, 2023 Important Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here