Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 420
Alerts This Week
Warning Icon 1 420

Stay Secure with the Latest Linux Advisories

Rockylinux Esm H800
Rocky

Rocky Linux 8 RLSA-2026-45116 kernel-rt Important DoS Flaws

Calendar White Jul 27, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux 8 Kernel Important Security Fix RLSA-2026-45115

Calendar White Jul 27, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 systemd 258.10 Important Bugfix Advisory 2026-289c38d6f2

Calendar White Jul 26, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 Skopeo Significant Denial of Service Resolution CVE-2026-27145

Calendar White Jul 26, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 Trafficserver Critical DoS Issue Fix 2026-ddaabe38ab

Calendar White Jul 26, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 libwebsockets Important Denial of Service Update 2026-59fdef3e5

Calendar White Jul 26, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 44 systemd Critical Bugfix Advisory 2026-230ba36543

Calendar White Jul 26, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 rust-libgit2-sys Important Security Updates 2026-9d59721e9b

Calendar White Jul 26, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 libgit2 Update 1.9.6 Security Fixes CVE-2026-53583 CVE-2026-53584

Calendar White Jul 26, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":14.29,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":4,"type":"x","order":2,"pct":57.14,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":28.57,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -3 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymemory leakSUSE

SUSE: 2025:01879-1 important: nodejs22 critical process crash fix

* bsc#1239949 * bsc#1241050 * bsc#1243217 * bsc#1243218 . # Security update for nodejs22 Announcement ID: SUSE-SU-2025:01879-1 Release Date: 2025-06-11T05:41:29Z Rating: important References: * bsc#1239949 * bsc#1241050 * bsc#1243217 * bsc#1243218 Cross-References: * CVE-2025-23165 * CVE-2025-23166 CVSS scores: * CVE-2025-23165 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-23165 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-23165 ( NVD ): 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-23166 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-23166 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-23166 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves two vulnerabilities and has two security fixes can now be installed. ## Description: This update for nodejs22 fixes the following issues: Update to version 22.15.1. Security issues fixed: * CVE-2025-23166: remotely triggerable process crash due to improper error handling in async cryptographic operations (bsc#1243218). * CVE-2025-23165: memory leak and unbounded memory growth due to corrupted pointer in `node::fs::ReadFileUtf8(const FunctionCallbackInfo & args)` when `args[0]` is a string (bsc#1243217). Other changes and issues fixed: * Changes from version 22.15.0 * dns: add TLSA record query and parsing * assert: improve partialDeepStrictEqual * process: add execve * tls: implement tls.getCACertificates() * v8: add v8.getCppHeapStatistics() method * Changes from version 22.14.0 * fs: allow exclude option in globs to accept glob patterns * lib: add typescript support to STDIN eval * module: addERR_UNSUPPORTED_TYPESCRIPT_SYNTAX * module: add findPackageJSON util * process: add process.ref() and process.unref() methods * sqlite: support TypedArray and DataView in StatementSync * src: add --disable-sigusr1 to prevent signal i/o thread * src,worker: add isInternalWorker * test_runner: add TestContext.prototype.waitFor() * test_runner: add t.assert.fileSnapshot() * test_runner: add assert.register() API * worker: add eval ts input * Build with PIE (bsc#1239949). * Fix builds with OpenSSL 3.5.0 (bsc#1241050). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2025-1879=1 ## Package List: * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * nodejs22-debuginfo-22.15.1-150700.3.3.1 * nodejs22-devel-22.15.1-150700.3.3.1 * nodejs22-debugsource-22.15.1-150700.3.3.1 * nodejs22-22.15.1-150700.3.3.1 * npm22-22.15.1-150700.3.3.1 * Web and Scripting Module 15-SP7 (noarch) * nodejs22-docs-22.15.1-150700.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-23165.html * https://www.suse.com/security/cve/CVE-2025-23166.html * https://bugzilla.suse.com/show_bug.cgi?id=1239949 * https://bugzilla.suse.com/show_bug.cgi?id=1241050 * https://bugzilla.suse.com/show_bug.cgi?id=1243217 * https://bugzilla.suse.com/show_bug.cgi?id=1243218 . Crucial security enhancement for Node.js tackles system crash and memory overflow problems specifically on SUSE environments, boosting efficiency.. SUSE Security Update, nodejs vulnerabilities, process crash fix, memory leak patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 11, 2025 •Important SuSE
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianinformation disclosure

Debian DSA-5909-1 moderate: request tracker information disclosure

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result in information disclosure, cross-site scripting and use of weak encryption for S/MIME emails. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5909-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso April 30, 2025 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : request-tracker5 CVE ID : CVE-2024-3262 CVE-2025-2545 CVE-2025-30087 CVE-2025-31500 CVE-2025-31501 Debian Bug : 1068453 Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system, which could result in information disclosure, cross-site scripting and use of weak encryption for S/MIME emails. For the stable distribution (bookworm), these problems have been fixed in version 5.0.3+dfsg-3~deb12u3. We recommend that you upgrade your request-tracker5 packages. For the detailed security status of request-tracker5 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/request-tracker5 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Uncover significant vulnerabilities in Request Tracker that impact various editions and find out how to fortify your Debian setup.. Request Tracker, Debian Security, information disclosure, scripting fix, weak encryption. . LinuxSecurity.com Team

Calendar%202 Apr 30, 2025 Debian
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryFedorabug fix

Fedora 40: 2024-129d8ca6fc Critical: bsh Type Confusion Fix

Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-129d8ca6fc 2024-03-07 22:24:39.963937 -------------------------------------------------------------------------------- Name : bsh Product : Fedora 40 Version : 2.1.0 Release : 12.fc40 URL : https://beanshell.org/ Summary : Lightweight Scripting for Java Description : BeanShell is a small, free, embeddable, Java source interpreter with object scripting language features, written in Java. BeanShell executes standard Java statements and expressions, in addition to obvious scripting commands and syntax. BeanShell supports scripted objects as simple method closures like those in Perl and JavaScript(tm). You can use BeanShell interactively for Java experimentation and debugging or as a simple scripting engine for your applications. In short: BeanShell is a dynamically interpreted Java, plus some useful stuff. Another way to describe it is to say that in many ways BeanShell is to Java as Tcl/Tk is to C: BeanShell is embeddable - You can call BeanShell from your Java applications to execute Java code dynamically at run-time or to provide scripting extensibility for your applications. Alternatively, you can call your Java applications and objects from BeanShell; working with Java objects and APIs dynamically. Since BeanShell is written in Java and runs in the same space as your application, you can freely pass references to "real live" objects into scripts and return them as results. -------------------------------------------------------------------------------- Update Information: Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bugwith requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639 -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 2 2024 Jiri Vanek - 0:2.1.0-12 - Rebuilt for java-21-openjdk as system jdk -------------------------------------------------------------------------------- References: [ 1 ] Bug #2123726 - consoleImageViewer crashes at start https://bugzilla.redhat.com/show_bug.cgi?id=2123726 [ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40 https://bugzilla.redhat.com/show_bug.cgi?id=2261062 [ 3 ] Bug #2266639 - directory-maven-plugin fails to build with java-21-openjdk https://bugzilla.redhat.com/show_bug.cgi?id=2266639 [ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266934 [ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266937 [ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta https://bugzilla.redhat.com/show_bug.cgi?id=2267486 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 40 bsh upgrade improves the JDK for Java systems, resolving major issues like type mishaps vulnerabilities.. Fedora Update, Java Security, Type Confusion, BSH Scripting, Java Update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 07, 2024 •Critical Fedora
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorysecurity issueRed Hat

Red Hat: RHSA-2019-4115-01 Moderate: Java Runtime Update

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: java-1.8.0-ibm security update Advisory ID: RHSA-2019:4115-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2019:4115 Issue date: 2019-12-09 CVE Names: CVE-2019-2945 CVE-2019-2962 CVE-2019-2964 CVE-2019-2973 CVE-2019-2975 CVE-2019-2978 CVE-2019-2981 CVE-2019-2983 CVE-2019-2988 CVE-2019-2989 CVE-2019-2992 CVE-2019-2996 CVE-2019-2999 CVE-2019-17631 ==================================================================== 1. Summary: An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client Supplementary (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) - x86_64 Red Hat Enterprise Linux Server Supplementary (v. 7) - ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 7) - x86_64 3. Description: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 8 to version 8 SR6. Security Fix(es): * OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518) (CVE-2019-2975) *OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) (CVE-2019-2978) * OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) (CVE-2019-2989) * Oracle JDK: unspecified vulnerability fixed in 8u221 (Deployment) (CVE-2019-2996) * IBM JDK: Unrestricted access to diagnostic operations (CVE-2019-17631) * OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) (CVE-2019-2945) * OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) (CVE-2019-2962) * OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) (CVE-2019-2964) * OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) (CVE-2019-2973) * OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) (CVE-2019-2981) * OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) (CVE-2019-2983) * OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) (CVE-2019-2988) * OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) (CVE-2019-2992) * OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) (CVE-2019-2999) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of IBM Java must be restarted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1760963 - CVE-2019-2964 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684) 1760969 - CVE-2019-2975 OpenJDK: Unexpected exception thrown during regularexpression processing in Nashorn (Scripting, 8223518) 1760978 - CVE-2019-2973 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505) 1760980 - CVE-2019-2981 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532) 1760992 - CVE-2019-2999 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765) 1760999 - CVE-2019-2988 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292) 1761006 - CVE-2019-2978 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892) 1761146 - CVE-2019-2992 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597) 1761262 - CVE-2019-2983 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915) 1761266 - CVE-2019-2962 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690) 1761596 - CVE-2019-2945 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573) 1761601 - CVE-2019-2989 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298) 1778942 - CVE-2019-2996 Oracle JDK: unspecified vulnerability fixed in 8u221 (Deployment) 1779880 - CVE-2019-17631 IBM JDK: Unrestricted access to diagnostic operations 6. Package List: Red Hat Enterprise Linux Client Supplementary (v. 7): x86_64: java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-plugin-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Supplementary (v. 7): x86_64: java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Supplementary(v. 7): ppc64: java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el7.ppc64.rpm java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el7.ppc64.rpm java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el7.ppc64.rpm java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el7.ppc64.rpm java-1.8.0-ibm-plugin-1.8.0.6.0-1jpp.1.el7.ppc64.rpm java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el7.ppc64.rpm ppc64le: java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el7.ppc64le.rpm java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el7.ppc64le.rpm java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el7.ppc64le.rpm java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el7.ppc64le.rpm java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el7.ppc64le.rpm s390x: java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el7.s390x.rpm java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el7.s390x.rpm java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el7.s390x.rpm java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el7.s390x.rpm java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el7.s390x.rpm x86_64: java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-plugin-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el7.x86_64.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 7): x86_64: java-1.8.0-ibm-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-demo-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-devel-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-jdbc-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-plugin-1.8.0.6.0-1jpp.1.el7.x86_64.rpm java-1.8.0-ibm-src-1.8.0.6.0-1jpp.1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2019-2945 https://access.redhat.com/security/cve/CVE-2019-2962 https://access.redhat.com/security/cve/CVE-2019-2964 https://access.redhat.com/security/cve/CVE-2019-2973 https://access.redhat.com/security/cve/CVE-2019-2975 https://access.redhat.com/security/cve/CVE-2019-2978 https://access.redhat.com/security/cve/CVE-2019-2981 https://access.redhat.com/security/cve/CVE-2019-2983 https://access.redhat.com/security/cve/CVE-2019-2988 https://access.redhat.com/security/cve/CVE-2019-2989 https://access.redhat.com/security/cve/CVE-2019-2992 https://access.redhat.com/security/cve/CVE-2019-2996 https://access.redhat.com/security/cve/CVE-2019-2999 https://access.redhat.com/security/cve/CVE-2019-17631 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXe5LqtzjgjWX9erEAQhXHg/+IX22sqvj5E7270QOcuGUHjp9skHih5i4 NClmWcpWdrAWZGxm1sMEUoIcPa6FoyZj/tWMwDFkghuJZzdMsehthO58PrMn3Bro AS4wRt06arwy8TrNc4aLmseajoW+b0/lAAbGCv44NBgc6ynC/Q8QxdsgR3zSLueU iA5DuFV6f2sGE9Ke/Ze162E9DyvFMzgUC9udtwknHtQfVxGYGaEOah2Xd8TpB358 UeuJAdEvcmPtm+CzcJm4vBt6XuQ18uDQJGoLkYcXZIWN7Y3ksh8yNPyBmYjxYsPQ DCK8qSu9/E+CHXE57ZEBSyHL/efpYdl3Eze7bWMSL78umXCXmiLK/mSVO6KVdmvF zBHlxM2zZX5mX6auMioSVPTMbMHgnVe+rSmZ83AkdD75G+hZS/0UPDWkrxP7YDjY ocdNUL2pf0uAOzuZnZb9VvkpyAVD88CDC6eCIoXt+OnFxFysa7kJvz15VzjZJV60 rX8xCA4DLkORo5HgfPRQdNroMUeCMTFKl0dwPj2zOKN9Jhz4dYTJ4bQdQrPfZKJq AhQbxjqli1yg1XgY3cUWS+iKxmyKfoskMuF15rG+iufd4rRRyZM7z4BCeWNuvFBn VJHod7e8TwvoZX0sATyRKOlPY1wV23bPtyzg8q0RWL06ZclSM9SorjvTqWs6A/a1 y485xd30J2g=Y2DN -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Important patch release for java-1.8.0-ibm provided for Red Hat Enterprise Linux, addressing significant vulnerabilities.. Java Update, Security Issues, Red Hat Advisory, Security Impact, IBM Java. .Severity: Important. LinuxSecurity.com Team

Calendar%202 Dec 09, 2019 •Important Red Hat
Banner 4 1028x280 1708121825 1771600306
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydenial of servicedebian

Debian DSA-4482-1 Critical: Thunderbird Security Flaws and Patches

Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, spoofing, information disclosure, denial of service or cross-site request forgery. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4482-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff July 14, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : thunderbird CVE ID : CVE-2019-9811 CVE-2019-11709 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11715 CVE-2019-11717 CVE-2019-11730 Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, spoofing, information disclosure, denial of service or cross-site request forgery. CVE-2019-11719 and CVE-2019-11729 are only addressed for stretch, in buster Thunderbird uses the system-wide copy of NSS which will be updated separately. For the oldstable distribution (stretch), these problems have been fixed in version 1:60.8.0-1~deb9u1. For the stable distribution (buster), these problems have been fixed in version 1:60.8.0-1~deb10u1. We recommend that you upgrade your thunderbird packages. For the detailed security status of thunderbird please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/thunderbird Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Vulnerability threats in Thunderbird necessitate immediate patches to avert exploitation and service disruptions.. Debian Security Update, ThunderbirdExploits, Thunderbirds Code Execution, Software Patch, Security Risks. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jul 14, 2019 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian: DSA-2170-1 Critical: Mailman Remote Scripting Issue

Two cross site scripting vulnerabilities were been discovered in Mailman, a web-based mailing list manager. These allowed an attacker to retreive session cookies via inserting crafted JavaScript into confirmation messages (CVE-2011-0707) and in the list admin interface . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2170-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Thijs Kinkhorst February 18, 2011 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : mailman Vulnerability : several Problem type : remote Debian-specific: no CVE ID : CVE-2010-3089 CVE-2011-0707 Two cross site scripting vulnerabilities were been discovered in Mailman, a web-based mailing list manager. These allowed an attacker to retreive session cookies via inserting crafted JavaScript into confirmation messages (CVE-2011-0707) and in the list admin interface (CVE-2010-3089; oldstable only). For the oldstable distribution (lenny), these problems have been fixed in version 1:2.1.11-11+lenny2. For the stable distribution (squeeze), this problem has been fixed in version 1:2.1.13-5. For the testing (wheezy) and unstable distribution (sid), this problem has been fixed in version 1:2.1.14-1. We recommend that you upgrade your mailman packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance the security of Mailman on your Debian system by following essential steps as outlined for mitigating vulnerabilities in advisory DSA-2170-1. Mailman Security, Debian Update, Scripting Fixes, Cross Site Issues. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 20, 2011 •Critical Debian
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":1,"type":"x","order":1,"pct":14.29,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":4,"type":"x","order":2,"pct":57.14,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":28.57,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics