Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -2 articles for you...
98

RedHat Enterprise Linux 8: RHSA-2022:1930-01 Moderate Security Update

An update for keepalived is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: keepalived security and bug fix update Advisory ID: RHSA-2022:1930-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:1930 Issue date: 2022-05-10 CVE Names: CVE-2021-44225 ==================================================================== 1. Summary: An update for keepalived is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the well-known and widely used IP Virtual Server (IPVS) kernel module providing layer-4 (transport layer) load balancing. Keepalived implements a set of checkers to dynamically and adaptively maintain and manage a load balanced server pool according to the health of the servers. Keepalived also implements the Virtual Router Redundancy Protocol (VRRPv2) to achieve high availability with director failover. Security Fix(es): * keepalived: dbus access control bypass (CVE-2021-44225) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and otherrelated information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2027156 - CVE-2021-44225 keepalived: dbus access control bypass 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: keepalived-2.1.5-8.el8.src.rpm aarch64: keepalived-2.1.5-8.el8.aarch64.rpm keepalived-debuginfo-2.1.5-8.el8.aarch64.rpm keepalived-debugsource-2.1.5-8.el8.aarch64.rpm ppc64le: keepalived-2.1.5-8.el8.ppc64le.rpm keepalived-debuginfo-2.1.5-8.el8.ppc64le.rpm keepalived-debugsource-2.1.5-8.el8.ppc64le.rpm s390x: keepalived-2.1.5-8.el8.s390x.rpm keepalived-debuginfo-2.1.5-8.el8.s390x.rpm keepalived-debugsource-2.1.5-8.el8.s390x.rpm x86_64: keepalived-2.1.5-8.el8.x86_64.rpm keepalived-debuginfo-2.1.5-8.el8.x86_64.rpm keepalived-debugsource-2.1.5-8.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-44225 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.6_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYnqRd9zjgjWX9erEAQi7DhAAiwx8RT8NeMRiq4thBoeM+UKfHsbk0ZuY cowZwWnxiGpCdbQ8bLliG2XaSsejNYIgUklNQkTyX2wLPJ6KfS3F/OQL2LCGiaII pIRQzGZPdsHng04WZq8UB0OBXqjWPfz+vOR5BSiTChHPXU0WeIwA8vlvYY9PJtjC UxWGUGHfCzPltmEviIBNr93qSC3szn+rSb/VEUZ3xFSp328wDZQwFkV+tHnqiN9H JAMQWSkxe7PeOrMUWfkf0zEz+ELHayi9e6lRIJOSHTDDe9zhtfSVvcM7kuucsrtG Fs3j+BSBSijsClGOCHiU3n16VbVmrQgcptUto04k73sRrG+p0BU3gOyEefRZd7RJ et95FeOExIT8fCyCKh+PoHW9v26tU6+vR3MRtobOQo0vHpVjmAjmkFtSWGb2YNr0 FCbiifrDVln/A+weWwO7kAamxChZLeY9uM9ohM4lkOSUlp3jZt+qsti0jNU/jcmp v5ux80Eg2HmBtiStqBy6bw7f/o8f8p+wf0O221rauJ5S+wZV6zqHK2cKJfbIPtUC xsN5zc15DV4T0IghI/ZtNpmcOU7IZp2sokD+0pg90w8qle7NBk0p34z71MNcfZ91 P6Iq9XPdUkLR1b2dmvaqxUjnsdmucic5o6Ra7BrbhTQGqaQj4H5e0T+1PkeACkyx ewmnuN6bUsU=5JEf -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Canonical's update provides a significant security enhancement for HAProxy, improving its load distribution and server administration capabilities.. keepalived Update, Load Balancing, Red Hat Advisory. . LinuxSecurity.com Team

Calendar 2 May 10, 2022 Red Hat
100

SUSE: 2021:1010-1 Moderate Security Fix for OpenIPMI Vulnerability

An update that contains security fixes can now be installed. . SUSE Security Update: Security update for OpenIPMI ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1010-1 Rating: moderate References: #1183178 Affected Products: SUSE Manager Server 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Enterprise Storage 6 SUSE CaaS Platform 4.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for OpenIPMI fixes the following issues: - Fixed an issue where OpenIPMI was creating non-position independent binaries (bsc#1183178). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-1010=1 - SUSE Manager Retail Branch Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-1010=1 - SUSE Manager Proxy 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-1010=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patchSUSE-SLE-Product-SLES_SAP-15-SP1-2021-1010=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-1010=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-1010=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2021-1010=1 - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2021-1010=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-1010=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-1010=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2021-1010=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Manager Server 4.0 (ppc64le s390x x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Manager Retail Branch Server 4.0 (x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Manager Proxy 4.0 (x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 - SUSE CaaS Platform 4.0 (x86_64): OpenIPMI-2.0.25-7.3.1 OpenIPMI-debuginfo-2.0.25-7.3.1 OpenIPMI-debugsource-2.0.25-7.3.1 OpenIPMI-devel-2.0.25-7.3.1 References: https://bugzilla.suse.com/1183178 . SUSE Security Patch resolves OpenIPMI vulnerabilities to improve admin server protection and installation protocols.. OpenIPMI Security Update, SUSE Linux Enterprise, Server Patch Management. . LinuxSecurity.com Team

Calendar 2 Apr 01, 2021 SuSE
199

CentOS: CESA-2019-2892 Important Update on QEMU-KVM Security Issue

Upstream details at : https://access.redhat.com/errata/RHSA-2019:2892. CentOS Errata and Security Advisory 2019:2892 Important Upstream details at : https://access.redhat.com/errata/RHSA-2019:2892 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: cbdd0a2b3901cc5811cb496a8fa6b99aff4a9bcbcc8b2b58ea620ed81df15167 qemu-guest-agent-0.12.1.2-2.506.el6_10.5.i686.rpm x86_64: 7e443452a2fe9ca60857df2bc6a8a550d88ba9720ca661f7cf8282f894cae417 qemu-guest-agent-0.12.1.2-2.506.el6_10.5.x86_64.rpm b022f30053fe39f1c48befef9dfaac7c2727057d3b893a789a3fc6b22be85255 qemu-img-0.12.1.2-2.506.el6_10.5.x86_64.rpm 8b01a7afaf20df0dde47421724aad19cfbece79f4da48b03843c99a5c6db805c qemu-kvm-0.12.1.2-2.506.el6_10.5.x86_64.rpm 0e75a9c3f7326276bf1b9af4e316d1e647af17d51f7f1c38211efe07fade537e qemu-kvm-tools-0.12.1.2-2.506.el6_10.5.x86_64.rpm Source: f6be77746bbe7d72c265f13a94116d9f79db13e70dec622d691dfb455df0fd9b qemu-kvm-0.12.1.2-2.506.el6_10.5.src.rpm -- Johnny Hughes CentOS Project { https://www.centos.org/ } irc: hughesjr, #This email address is being protected from spambots. You need JavaScript enabled to view it. Twitter: @JohnnyCentOS _______________________________________________ CentOS-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest CentOS Security Advisory 2020:3721 highlights critical improvements to the kernel package, aimed at reinforcing system integrity and efficiency.. CentOS Updates, Qemu-KVM, Security Issues, Server Protection, Important Patches. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Sep 27, 2019 Important CentOS
98

Red Hat: RHSA-2018-1665-01 Important: Libvirt Cache Attack Fix

An update for libvirt is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: libvirt security update Advisory ID: RHSA-2018:1665-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2018:1665 Issue date: 2018-05-21 CVE Names: CVE-2018-3639 ==================================================================== 1. Summary: An update for libvirt is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 6.5) - x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 6.5) - x86_64 3. Description: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fix(es): * An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executedinstructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3639) Note: This is the libvirt side of the CVE-2018-3639 mitigation. Red Hat would like to thank Ken Johnson (Microsoft Security Response Center) and Jann Horn (Google Project Zero) for reporting this issue. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, libvirtd will be restarted automatically. 5. Bugs fixed (https://bugzilla.redhat.com/): 1566890 - CVE-2018-3639 hw: cpu: speculative store bypass 6. Package List: Red Hat Enterprise Linux Server AUS (v. 6.5): Source: libvirt-0.10.2-29.el6_5.16.src.rpm x86_64: libvirt-0.10.2-29.el6_5.16.x86_64.rpm libvirt-client-0.10.2-29.el6_5.16.i686.rpm libvirt-client-0.10.2-29.el6_5.16.x86_64.rpm libvirt-debuginfo-0.10.2-29.el6_5.16.i686.rpm libvirt-debuginfo-0.10.2-29.el6_5.16.x86_64.rpm libvirt-devel-0.10.2-29.el6_5.16.i686.rpm libvirt-devel-0.10.2-29.el6_5.16.x86_64.rpm libvirt-python-0.10.2-29.el6_5.16.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 6.5): Source: libvirt-0.10.2-29.el6_5.16.src.rpm x86_64: libvirt-debuginfo-0.10.2-29.el6_5.16.x86_64.rpm libvirt-lock-sanlock-0.10.2-29.el6_5.16.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-3639 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/security/vulnerabilities/ssbd 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBWwQwq9zjgjWX9erEAQjHyRAAkqbnY9lGEwcPGhgZSYmcflWLajFkfbyM bLk5JEFi9uGZCBBZq34cXonZQvLZtSWuCTEzUoa/iMztca5MF6WwnFtR7eNRp35V 9RTJvpOjqpQsiIasC/Wo0hq37Pix4iHn0ktOsOiyMr4PiABUspUxTXFh6ZEZOKJ1 NAalQiJGwe01v6nLNjvDpft3uuVltxjg4lG5MnhTQNxqLeSMckK5Z1HhVR1BEOZM kD9Y2Mx6O8kaAMJPSfYMaRmK96xktLzZ2dbYNZTEgJZA7hbwkbxzgKFy6TwClZZO BhGe/9l/eaAoOKw/Ude6qmTlVOyR0yHORkNWSuLHw55MepfZD+2M1It37gSZ77E/ 97Wy+4PFw42UiMH2t1IlMpGDs8TPlssLKSNAhe2hz9vMiYc8VsbnbRAPqqttbIlP /qN3enbX4lp+o7TLlCPL0q2QC34qsUQrlHihauRZTLdkMBzUOCt9P0gh/oUTwVmn Si5C+vPDoRaFQKbUtkmvptX8wiUfhss2Y6oYPZoypOAB6Ms1YLcW18Bx8fzxrYq0 9vcSybFw4YinHMfRUrFrMTy6NGF0DfB/tXXK5tOfxIxKJ1oUmWT5o0NEJ9pl/Vgi 4PGm65w8q+8KsQK4+uVi+xPuPIfhC6XyG59rPHXGSV60HPOx6ffggd22l3ozXIVi UTqmFxILHH4=6kJx -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Essential libvirt safety upgrade for Red Hat Enterprise Linux 6.5 addresses critical caching threat loopholes immediately.. libvirt Security, Red Hat Updates, Cache Attack Mitigation. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 22, 2018 Important Red Hat
89

Fedora 28: FEDORA-2018-3564527be4 Critical: HAProxy 1.8.8 Update

Update to 1.8.8. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-3564527be4 2018-05-02 10:51:09.724877 --------------------------------------------------------------------------------Name : haproxy Product : Fedora 28 Version : 1.8.8 Release : 1.fc28 URL : http://www.haproxy.org/ Summary : HAProxy reverse proxy for high availability environments Description : HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to backup servers in the event a main one fails - accept connections to special ports dedicated to service monitoring - stop accepting connections without breaking existing ones - add, modify, and delete HTTP headers in both directions - block requests matching particular patterns - report detailed status to authenticated users from a URI intercepted from the application --------------------------------------------------------------------------------Update Information: Update to 1.8.8 --------------------------------------------------------------------------------ChangeLog: * Thu Apr 19 2018 Ryan O'Hara - 1.8.8-1 - Update to 1.8.8 (#1560121) * Mon Apr 9 2018 Ryan O'Hara - 1.8.7-1 - Update to 1.8.7 (#1560121) * Fri Apr 6 2018 Ryan O'Hara - 1.8.6-1 - Update to 1.8.6 (#1560121) * Mon Mar 26 2018 Ryan O'Hara - 1.8.5-1 - Update to 1.8.5 (#1560121) --------------------------------------------------------------------------------References: [ 1 ] Bug #1536208 - Fix URL for configuration documentation https://bugzilla.redhat.com/show_bug.cgi?id=1536208 [ 2 ] Bug #1560121 - haproxy-1.8.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1560121 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-3564527be4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . HAProxy version 1.8.8 security patch alert for Fedora 28 comes with significant improvements and critical updates.. HAProxy Update, Fedora Security Notification, High Availability Proxy. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 02, 2018 Critical Fedora
197

Debian 7 Wheezy DLA-1317-1 Moderate: Net-SNMP Heap Corruption

It was discovered that there was a heap corruption vulnerability in the net-snmp framework which exchanges server management information in a network. . Package : net-snmp Version : 5.7.2.1+dfsg-1+deb8u1 CVE ID : CVE-2018-1000116 Debian Bug : #894110 It was discovered that there was a heap corruption vulnerability in the net-snmp framework which exchanges server management information in a network. For Debian 7 "Wheezy", this issue has been fixed in net-snmp version 5.7.2.1+dfsg-1+deb8u1. We recommend that you upgrade your net-snmp packages. Regards, - -- ,'`. : :' : Chris Lamb `. `'` This email address is being protected from spambots. You need JavaScript enabled to view it. / chris-lamb.co.uk `- . Package : net-snmp Version : 5.7.2.1+dfsg-1+deb8u1 CVE ID : CVE-2018-1000116 Debian Bug : #894110 It. there, corruption, vulnerability, net-snmp, framework, which. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 26, 2018 Important Debian LTS
99

Moderate OpenSSH Update for Slackware 14.0/14.1: Secure Your System Now

New openssh packages are available for Slackware 14.0, 14.1, and -current. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] openssh (SSA:2014-344-03) New openssh packages are available for Slackware 14.0, 14.1, and -current. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/openssh-6.7p1-i486-2_slack14.1.txz: Rebuilt. Restored support for tcpwrappers that was dropped by upstream. Thanks to mancha. +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 14.0: Updated package for Slackware x86_64 14.0: Updated package for Slackware 14.1: Updated package for Slackware x86_64 14.1: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 14.0 package: 1eb240097153b5cecab258a482c58b1c openssh-6.7p1-i486-2_slack14.0.txz Slackware x86_64 14.0 package: 1a421c5cd58528fed0287503b8e72a4b openssh-6.7p1-x86_64-2_slack14.0.txz Slackware 14.1 package: 327e263f732358afafc9c413a71d7555 openssh-6.7p1-i486-2_slack14.1.txz Slackware x86_64 14.1 package: 31b14205077578e49265d2bf9aa1032d openssh-6.7p1-x86_64-2_slack14.1.txz Slackware -current package: 98b7026f22fbbbf7673ac3d47371a376 n/openssh-6.7p1-i486-2.txz Slackware x86_64 -current package: 67e98b11b44051f48d56eb3bff3be5b7 n/openssh-6.7p1-x86_64-2.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg openssh-6.7p1-i486-2_slack14.1.txz Next, restart the sshd daemon: # sh /etc/rc.d/rc.sshd restart +-----+ . Latest OpenSSH updates have been released for Slackware, in accordance with bulletin SSA:2014-344-03. Ensure the security of your systemimmediately.. Slackware Security Update, OpenSSH Upgrade, Remote Access Security. . LinuxSecurity.com Team

Calendar 2 Dec 11, 2014 Slackware
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here