Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 7 articles for you...
89
security advisoryfedorasecurity fixFedora 37: 2023-ba53233477 Severe: OpenJDK 20 Security Update
updated to July security update 20.0.2.9 portables. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-ba53233477 2023-08-16 00:37:57.058805 -------------------------------------------------------------------------------- Name : java-latest-openjdk Product : Fedora 37 Version : 20.0.2.0.9 Release : 1.rolling.fc37 URL : https://openjdk.org/ Summary : OpenJDK 20 Runtime Environment Description : The OpenJDK 20 runtime environment. -------------------------------------------------------------------------------- Update Information: updated to July security update 20.0.2.9 portables -------------------------------------------------------------------------------- ChangeLog: * Mon Aug 7 2023 Jiri Vanek - 1:20.0.2.0.9-2.rolling - updated to July security update 20.0.2.9 portables * Thu Jul 20 2023 Fedora Release Engineering - 1:20.0.1.0.9-8.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu May 11 2023 Andrew Hughes - 1:20.0.1.0.9-8.rolling - Following JDK-8005165, class data sharing can be enabled on all JIT architectures * Wed May 10 2023 Severin Gehwolf - 1:20.0.1.0.9-6.rolling - Fix packaging of CDS archives * Fri Apr 28 2023 Jiri Vanek - 1:20.0.1.0.9-6.rolling - faking build-id in libjsvml.so * Fri Apr 28 2023 Jiri Vanek - 1:20.0.1.0.9-5.rolling - returned news * Fri Apr 28 2023 Jiri Vanek - 1:20.0.1.0.9-4.rolling - now expecting the exact version in portbale filename * Fri Apr 28 2023 Jiri Vanek - 1:20.0.1.0.9-3.rolling - updated to 20.0.1.0.9 underlying portables * Wed Apr 19 2023 Jiri Vanek - 1:20.0.0.0.36-3.rolling - using icons from source package - providing full sources via src package - requiring exact version.reelase of portables - returned libsystemconf.so * Mon Apr 3 2023 Jiri Vanek - 1:20.0.0.0.36-1.rolling - bumed to jdk20 - removed no loger existing libsystemconf.so - commented out usage ifSource15 TestSecurityProperties.java test, as honoring of -- system crypto policies comes from fips aptch which is not yet adapted * Mon Jan 30 2023 Jiri Vanek - 1:19.0.2.0.7-5.rolling - Using icons whcih are now part of the portble tarball * Mon Jan 30 2023 Jiri Vanek - 1:19.0.2.0.7-4.rolling - repacked bits are now requested in exact version * Mon Jan 30 2023 Petra Alice Mikova - 1:19.0.2.0.7-3.rolling - return libfreetype.so binary to resolve requires problems - remove BuildRequires: java-latest-openjdk * Thu Jan 26 2023 Jiri Vanek - 1:19.0.2.0.7-2.rolling - repacked portables - todo icons - disabled tzdata tests - todo, resolve - left some duplicated "final tunings" - todo, lost alt java manpage.. probably already in portables - TODO conslut this clean up - javdoc, freetype and NEWS - todo, debuginfo * Thu Jan 26 2023 Andrew Hughes - 1:19.0.2.0.7-1.rolling - Update to jdk-19.0.2 release - Update release notes to 19.0.2 - Drop JDK-8293834 (CLDR update for Kyiv) which is now upstream - Drop JDK-8294357 (tzdata2022d), JDK-8295173 (tzdata2022e) & JDK-8296108 (tzdata2022f) local patches which are now upstream - Drop JDK-8296715 (CLDR update for 2022f) which is now upstream - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases * Thu Jan 19 2023 Fedora Release Engineering - 1:19.0.1.0.10-3.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Dec 16 2022 Andrew Hughes - 1:19.0.1.0.10-3.rolling - Update in-tree tzdata & CLDR to 2022g with JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone * Wed Dec 7 2022 Stephan Bergmann - 1:19.0.1.0.10-3.rolling - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat * Wed Oct 26 2022 Andrew Hughes - 1:19.0.1.0.10-2.rolling - Update in-tree tzdata to 2022ewith JDK-8294357 & JDK-8295173 - Update CLDR data with Europe/Kyiv (JDK-8293834) - Drop JDK-8292223 patch which we found to be unnecessary - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream * Thu Oct 20 2022 Andrew Hughes - 1:19.0.1.0.10-1.rolling - Update to jdk-19.0.1 release - Update release notes to 19.0.1 * Wed Sep 21 2022 Andrew Hughes - 1:19.0.0.0.36-3.rolling - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds - Remove freetype sources along with zlib sources * Tue Aug 30 2022 Andrew Hughes - 1:19.0.0.0.36-2.rolling - Switch buildjdkver back to being featurever, now java-19-openjdk is available in the buildroot * Mon Aug 29 2022 Andrew Hughes - 1:19.0.0.0.36-2.rolling - Switch to static builds, reducing system dependencies and making build more portable * Mon Aug 29 2022 Andrew Hughes - 1:19.0.0.0.36-1.rolling - Update to RC version of OpenJDK 19 - Update release notes to 19.0.0 - Rebase FIPS patches from fips-19u branch - Need to include the '.S' suffix in debuginfo checks after JDK-8284661 - Add patch to provide translations for Europe/Kyiv added in tzdata2022b - Add test to ensure timezones can be translated - Remove references to sample directory removed by JDK-8284999 * Fri Jul 22 2022 Andrew Hughes - 1:18.0.2.0.9-1.rolling - Update to jdk-18.0.2 release - Update release notes to 18.0.2 - Drop JDK-8282004 patch which is now upstreamed under JDK-8282231 - Exclude x86 where java_arches is undefined, in order to unbreak build * Fri Jul 22 2022 Jiri Vanek - 1:18.0.1.1.2-8.rolling - moved to build only on %{java_arches} -- https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs - reverted : -- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild (always mess up release) -- Try to build on x86 again by creating a husk of a JDK which does not depend on itself -- Exclude x86 from builds as the bootstrap JDK is now completely broken andunusable -- Replaced binaries and .so files with bash-stubs on i686 - added ExclusiveArch: %{java_arches} -- this now excludes i686 -- this is safely backport-able to older fedoras, as the macro was backported properly (with i686 included) - https://bugzilla.redhat.com/show_bug.cgi?id=2104125 * Thu Jul 21 2022 Fedora Release Engineering - 1:18.0.1.1.2-7.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Tue Jul 19 2022 Andrew Hughes - 1:18.0.1.1.2-7.rolling - Try to build on x86 again by creating a husk of a JDK which does not depend on itself * Sun Jul 17 2022 Andrew Hughes - 1:18.0.1.1.2-6.rolling - Exclude x86 from builds as the bootstrap JDK is now completely broken and unusable * Wed Jul 13 2022 Andrew Hughes - 1:18.0.1.1.2-5.rolling - Explicitly require crypto-policies during build and runtime for system security properties * Wed Jul 13 2022 Jiri Vanek - 1:18.0.1.1.2-4.rolling. - Replaced binaries and .so files with bash-stubs on i686 in preparation of the removal on that architecture: - https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs * Wed Jul 13 2022 Andrew Hughes - 1:18.0.1.1.2-3.rolling - Make use of the vendor version string to store our version & release rather than an upstream release date * Tue Jul 12 2022 FeRD (Frank Dana) - 1:18.0.1.1.2-2.rolling - Add javaver- and origin-specific javadoc and javadoczip alternatives. * Mon Jul 11 2022 Andrew Hughes - 1:18.0.1.1.2-1.rolling - Update to jdk-18.0.1.1 interim release - Update release notes to actually reflect OpenJDK 18 and subsequent releases 18.0.1 & 18.0.1.1 - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Include script to generate bug list for release notes - Update tzdata requirement to 2022a to match JDK-8283350 * Sat Jul 9 2022 Jayashree Huttanagoudar - 1:18.0.1.0.10-8.rolling - Fix issue where CheckVendor.java test erroneously passes whenit should fail. - Add proper quoting so '&' is not treated as a special character by the shell. * Sat Jul 9 2022 Andrew Hughes - 1:18.0.1.0.10-8.rolling - Include a test in the RPM to check the build has the correct vendor information. * Fri Jul 8 2022 Andrew Hughes - 1:18.0.1.0.10-7.rolling - Fix whitespace in spec file * Fri Jul 8 2022 Andrew Hughes - 1:18.0.1.0.10-7.rolling - Sequence spec file sections as they are run by rpmbuild (build, install then test) * Fri Jul 8 2022 Andrew Hughes - 1:18.0.1.0.10-7.rolling - Turn on system security properties as part of the build's install section - Move cacerts replacement to install section and retain original of this and tzdb.dat - Run tests on the installed image, rather than the build image - Introduce variables to refer to the static library installation directories - Use relative symlinks so they work within the image - Run debug symbols check during build stage, before the install strips them * Thu Jul 7 2022 Stephan Bergmann - 1:18.0.1.0.10-6.rolling - Fix flatpak builds by exempting them from bootstrap * Thu Jun 30 2022 Francisco Ferrari Bihurriet - 1:18.0.1.0.10-5.rolling - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode * Thu Jun 30 2022 Stephan Bergmann - 1:18.0.1.0.10-4.rolling - Fix flatpak builds (catering for their uncompressed manual pages) * Fri Jun 24 2022 Andrew Hughes - 1:18.0.1.0.10-3.rolling - Update FIPS support to bring in latest changes - * RH2023467: Enable FIPS keys export - * RH2094027: SunEC runtime permission for FIPS - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage - * RH2090378: Revert to disabling system security properties and FIPS mode support together - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch - Enable system security properties in the RPM (now disabled by default in the FIPS repo) - Improve security properties test to check both enabled and disabled behaviour - Run security properties testwith property debugging on - Minor sync-ups with java-17-openjdk spec file * Wed May 25 2022 Andrew Hughes - 1:18.0.1.0.10-2.rolling - Exclude s390x from the gdb test on RHEL 7 where we see failures with the portable build * Wed Apr 27 2022 Jiri Vanek - 1:18.0.1.0.10-1.rolling. - updated to CPU jdk-18.0.1+10 sources * Wed Apr 6 2022 Jiri Vanek - 1:18.0.0.0.37-4.rolling - Remove hardcoded /usr/lib/jvm by %{_jvmdir} to make rpmlint happy * Wed Mar 23 2022 Andrew Hughes - 1:18.0.0.0.37-3.rolling - Automatically turn off building a fresh HotSpot first, if the bootstrap JDK is not the same major version as that being built * Mon Mar 21 2022 Jiri Vanek - 1:18.0.0.0.37-2.rolling - replaced tabs by sets of spaces to make rpmlint happy - set build jdk to 18 - as ga is 1, set vendor_version_string to 22.3 * Wed Mar 16 2022 Andrew Hughes - 1:18.0.0.0.37-1.rolling - Update to RC version of OpenJDK 18 - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory - Disable HotSpot-only pre-build which is incompatible with the boot JDK being a different major version to that being built - Rebase FIPS patches from fips-18u branch and simplify by using a single patch from that repository - Detect NSS at runtime for FIPS detection - Turn off build-time NSS linking and go back to an explicit Requires on NSS - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch * Wed Mar 16 2022 Petra Alice Mikova - 1:18.0.0.0.37-1.rolling - update to ea version of jdk18 - add new slave jwebserver and corresponding manpage - adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch * Wed Feb 16 2022 Andrew Hughes - 1:17.0.2.0.8-5 - Reinstate JIT builds on x86_32. - Add JDK-8282004 to fix missing CALL effects on x86_32. * Mon Feb 7 2022 Severin Gehwolf - 1:17.0.2.0.8-4 - Re-enable gdb backtrace check. - ResolvesRHBZ#2041970 * Fri Feb 4 2022 Andrew Hughes - 1:17.0.2.0.8-3 - Temporarily move x86 to use Zero in order to get a working build - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Support a HotSpot-only build so a freshly built libjvm.so can then be used in the bootstrap JDK. - Explicitly list JIT architectures rather than relying on those with slowdebug builds - Disable the serviceability agent on Zero architectures even when the architecture itself is supported * Mon Jan 24 2022 Andrew Hughes - 1:17.0.2.0.8-2.rolling - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64) - Need to support noarch for creating source RPMs for non-scratch builds. * Mon Jan 24 2022 Andrew Hughes - 1:17.0.2.0.8-1.rolling - January 2022 security update to jdk 17.0.2+8 - Extend LTS check to exclude EPEL. - Rename libsvml.so to libjsvml.so following JDK-8276025 - Remove JDK-8276572 patch which is now upstream. - Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java * Mon Jan 24 2022 Severin Gehwolf - 1:17.0.2.0.8-1.rolling - Set LTS designator. * Mon Jan 24 2022 Andrew Hughes - 1:17.0.1.0.12-16.rolling - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent * Thu Jan 20 2022 Fedora Release Engineering - 1:17.0.1.0.12-15.rolling.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Tue Jan 18 2022 Andrew Hughes - 1:17.0.1.0.12-15.rolling - Sync gdb test with java-1.8.0-openjdk and improve architecture restrictions. - Disable on x86, x86_64, ppc64le & s390x while these are broken in rawhide. * Thu Jan 13 2022 Andrew Hughes - 1:17.0.1.0.12-14.rolling - Fix FIPS issues in native code and with initialisation of java.security.Security * Thu Dec 9 2021 Jiri Vanek - 1:17.0.1.0.12-13.rolling - Storing and restoring alterntives during update manually - Fixing Bug 2001567 - update ofJDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE -- The move of alternatives creation to posttrans to fix: -- Bug 1200302 - dnf reinstall breaks alternatives -- Had caused the alternatives to be removed, and then created again, -- instead of being added, and then removing the old, and thus persisting -- the selection in family -- Thus this fix, is storing the family of manually selected master, and if -- stored, then it is restoring the family of the master * Thu Dec 9 2021 Jiri Vanek - 1:17.0.1.0.12-12.rolling - Family extracted to globals * Thu Dec 9 2021 Jiri Vanek - 1:17.0.1.0.12-11.rolling - javadoc-zip got its own provides next to plain javadoc ones * Thu Dec 9 2021 Jiri Vanek - 1:17.0.1.0.12-10.rolling - replaced tabs by sets of spaces to make rpmlint happy * Mon Nov 29 2021 Andrew Hughes - 1:17.0.1.0.12-9.rolling - Handle Fedora in distro conditionals that currently only pertain to RHEL. * Fri Nov 5 2021 Andrew Hughes - 1:17.0.1.0.12-8.rolling - Patch syslookup.c so it actually has some code to be compiled into libsyslookup - Related: rhbz#2013846 * Wed Nov 3 2021 Severin Gehwolf - 1:17.0.1.0.12-7.rolling - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy secmod.db file as part of nss * Wed Nov 3 2021 Andrew Hughes - 1:17.0.1.0.12-6.rolling - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. * Thu Oct 28 2021 Andrew Hughes - 1:17.0.1.0.12-5.rolling - Sync desktop files with upstream IcedTea release 3.15.0 using new script * Tue Oct 26 2021 Andrew Hughes - 1:17.0.1.0.12-4.rolling - Restructure the build so a minimal initial build is then used for the final build (with docs) - This reduces pressure on the system JDK and ensures the JDK being built can do a full build * Tue Oct 26 2021 Jiri Vanek - 1:17.0.1.0.12-3.rolling - Minor cosmetic improvements to make spec more comparable between variants * Thu Oct 21 2021 Andrew Hughes -1:17.0.1.0.12-2.rolling - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap-> _heaps) and @JAVA_SPEC_VER@ - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository * Wed Oct 20 2021 Petra Alice Mikova - 1:17.0.1.0.12-1.rolling - October CPU update to jdk 17.0.1+12 - dropped commented-out source line * Sun Oct 10 2021 Andrew Hughes - 1:17.0.0.0.35-5.rolling - Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false * Sun Oct 10 2021 Martin Balao - 1:17.0.0.0.35-5.rolling - Add patch to allow plain key import. * Thu Sep 30 2021 Andrew Hughes - 1:17.0.0.0.35-4.rolling - Fix unused function compiler warning found in systemconf.c - Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access. * Thu Sep 30 2021 Martin Balao - 1:17.0.0.0.35-4.rolling - Add patch to login to the NSS software token when in FIPS mode. * Mon Sep 27 2021 Andrew Hughes - 1:17.0.0.0.35-3.rolling - Update release notes to document the major changes between OpenJDK 11 & 17. * Thu Sep 16 2021 Martin Balao - 1:17.0.0.0.35-2.rolling - Add patch to disable non-FIPS crypto in the SUN and SunEC security providers. * Tue Sep 14 2021 Andrew Hughes - 1:17.0.0.0.35-1.rolling - Update to jdk-17+35, also known as jdk-17-ga. - Switch to GA mode. * Wed Sep 8 2021 Andrew Hughes - 1:17.0.0.0.33-0.3.ea.rolling - Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure. - Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM. * Wed Sep 8 2021 Martin Balao - 1:17.0.0.0.33-0.3.ea.rolling - Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library. * Mon Sep 6 2021 Andrew Hughes - 1:17.0.0.0.33-0.2.ea.rolling - Update RH1655466 FIPS patch with changes in OpenJDK 8 version. - SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file. - Change nss.fips.cfgconfig name to "NSS-FIPS" to avoid confusion with nss.cfg. - No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable. - Disable FIPS mode support unless com.redhat.fips is set to "true". - Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable). - Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode - Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071) * Mon Sep 6 2021 Martin Balao - 1:17.0.0.0.33-0.2.ea.rolling - Support the FIPS mode crypto policy (RH1655466) - Use appropriate keystore types when in FIPS mode (RH1818909) - Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986) * Mon Aug 30 2021 Jiri Vanek - 1:17.0.0.0.33-0.1.ea.rolling - alternatives creation moved to posttrans - Thus fixing the old reisntall issue: - https://bugzilla.redhat.com/show_bug.cgi?id=1200302 - https://bugzilla.redhat.com/show_bug.cgi?id=1976053 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-ba53233477' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Aug 16, 2023
•Critical
Fedora
89
security advisorykernel updateFedoraUbuntu 23.04: Critical Driver Update 2023-f1b845a3cc Boosts Performance
The 6.4.4 stable kernel rebase contains additional hardware support, new features, and a number of important fixes across the tree.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-e4e985b5dd 2023-07-23 01:27:02.654052 -------------------------------------------------------------------------------- Name : kernel-tools Product : Fedora 38 Version : 6.4.4 Release : 200.fc38 URL : https://www.kernel.org/ Summary : Assortment of tools for the Linux kernel Description : This package contains the tools/ directory from the kernel source and the supporting documentation. -------------------------------------------------------------------------------- Update Information: The 6.4.4 stable kernel rebase contains additional hardware support, new features, and a number of important fixes across the tree. -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 19 2023 Justin M. Forbes - 6.4.4-200 - Linux v6.4.4 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2220892 - CVE-2023-35001 kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval() https://bugzilla.redhat.com/show_bug.cgi?id=2220892 [ 2 ] Bug #2220893 - CVE-2023-31248 kernel: nf_tables: use-after-free in nft_chain_lookup_byid() https://bugzilla.redhat.com/show_bug.cgi?id=2220893 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-e4e985b5dd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 23, 2023
•Critical
Fedora
98
security advisoryRed Hatnetwork communicationRed Hat 2.1: RHSA-2003:178-01 Severe up2date Connectivity Problem
This release also includes an updated RHNS-CA-CERT file, which contains an additional CA certificate. This is needed so that up2date can continue to communicate with Red Hat Network once the current CA certificate reaches its August 2003 expiration date. . --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated up2date and rhn_register clients available Advisory ID: RHSA-2003:177-01 Issue date: 2003-05-27 Updated on: 2003-05-27 Product: Red Hat Enterprise Linux Keywords: up2date rhn_register rpm Red Hat Network up2date-gnome update agent Cross references: Obsoletes: ---------------------------------------------------------------------1. Topic: Updated versions of the rhn_register and up2date packages are now available. The new packages include many bug fixes, and a few new features. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 Red Hat Enterprise Linux ES version 2.1 - i386 Red Hat Enterprise Linux WS version 2.1 - i386 3. Problem description: The rhn_register and up2date packages contain the software necessary to take advantage of Red Hat Network functionality. The up2date package incorporates improvements in handling package dependencies and "obsoletes" processing, along with many other bug fixes. This release also includes an updated RHNS-CA-CERT file, which contains an additional CA certificate. This is needed so that up2date can continue to communicate with Red Hat Network once the current CA certificate reaches its August 2003 expiration date. All users of Red Hat Network should therefore upgrade to these erratum packages. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture,run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed ( for more info): 67865 - "up2date --version" does NOT display version 65423 - "up2date -f" does not update skipped packages on first attempt 64851 - Non fatal Gtk errors when up2date hits a package already in its cache 64796 - up2date segfaults during Migration 64791 - Typo in manpage of up2date 64771 - Updating from 7.2 to 7.3 then using up2date yields 557 "outdated" packages in RHN 63921 - "kb" for file sizes should probably be "kB" 63917 - "toverify" typo in up2date 63907 - "Overrite" typo in up2date 63484 - Can't only select skipped files 63301 - unknown signatures aren't warned 53247 - up2date -u -nox fails 6. RPMs required: Red Hat Enterprise Linux AS (Advanced Server) version 2.1: SRPMS: i386: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm ia64: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.ia64.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.ia64.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.ia64.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.ia64.rpm Red Hat LinuxAdvanced Workstation 2.1: SRPMS: ia64: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.ia64.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.ia64.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.ia64.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.ia64.rpm Red Hat Enterprise Linux ES version 2.1: SRPMS: i386: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm Red Hat Enterprise Linux WS version 2.1: SRPMS: i386: Available from Red Hat Network: up2date-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: up2date-gnome-2.8.45-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-2.8.34-1.2.1AS.i386.rpm Available from Red Hat Network: rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm 7. Verification: MD5 sum Package Name --------------------------------------------------------------------------e10930d8965ac2a685e1482ba8c0e9af 2.1AS/en/os/SRPMS/rhn_register-2.8.34-1.2.1AS.src.rpm 5e64b82944c7ccd62986551c3244cb6f 2.1AS/en/os/SRPMS/up2date-2.8.45-1.2.1AS.src.rpm e3362186968d6e6da916a967d8d3655f 2.1AS/en/os/i386/rhn_register-2.8.34-1.2.1AS.i386.rpm 019b32631452559245ce70e26f2ed928 2.1AS/en/os/i386/rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm 42f3379722023af4412c79e686a04c89 2.1AS/en/os/i386/up2date-2.8.45-1.2.1AS.i386.rpm b0897084ce6ba6e4ae15ffa070739776 2.1AS/en/os/i386/up2date-gnome-2.8.45-1.2.1AS.i386.rpm 88b85b602b3651cc3364b992c8e99f04 2.1AS/en/os/ia64/rhn_register-2.8.34-1.2.1AS.ia64.rpm fdd03e41d5eb74d520a6f0d8cb969fba 2.1AS/en/os/ia64/rhn_register-gnome-2.8.34-1.2.1AS.ia64.rpm fdf5c0ca850486b13288287e8d776e16 2.1AS/en/os/ia64/up2date-2.8.45-1.2.1AS.ia64.rpm 296d91a647c0ac255fe77e4a2b602d0a2.1AS/en/os/ia64/up2date-gnome-2.8.45-1.2.1AS.ia64.rpm e10930d8965ac2a685e1482ba8c0e9af 2.1AW/en/os/SRPMS/rhn_register-2.8.34-1.2.1AS.src.rpm 5e64b82944c7ccd62986551c3244cb6f 2.1AW/en/os/SRPMS/up2date-2.8.45-1.2.1AS.src.rpm 88b85b602b3651cc3364b992c8e99f04 2.1AW/en/os/ia64/rhn_register-2.8.34-1.2.1AS.ia64.rpm fdd03e41d5eb74d520a6f0d8cb969fba 2.1AW/en/os/ia64/rhn_register-gnome-2.8.34-1.2.1AS.ia64.rpm fdf5c0ca850486b13288287e8d776e16 2.1AW/en/os/ia64/up2date-2.8.45-1.2.1AS.ia64.rpm 296d91a647c0ac255fe77e4a2b602d0a 2.1AW/en/os/ia64/up2date-gnome-2.8.45-1.2.1AS.ia64.rpm e10930d8965ac2a685e1482ba8c0e9af 2.1ES/en/os/SRPMS/rhn_register-2.8.34-1.2.1AS.src.rpm 5e64b82944c7ccd62986551c3244cb6f 2.1ES/en/os/SRPMS/up2date-2.8.45-1.2.1AS.src.rpm e3362186968d6e6da916a967d8d3655f 2.1ES/en/os/i386/rhn_register-2.8.34-1.2.1AS.i386.rpm 019b32631452559245ce70e26f2ed928 2.1ES/en/os/i386/rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm 42f3379722023af4412c79e686a04c89 2.1ES/en/os/i386/up2date-2.8.45-1.2.1AS.i386.rpm b0897084ce6ba6e4ae15ffa070739776 2.1ES/en/os/i386/up2date-gnome-2.8.45-1.2.1AS.i386.rpm e10930d8965ac2a685e1482ba8c0e9af 2.1WS/en/os/SRPMS/rhn_register-2.8.34-1.2.1AS.src.rpm 5e64b82944c7ccd62986551c3244cb6f 2.1WS/en/os/SRPMS/up2date-2.8.45-1.2.1AS.src.rpm e3362186968d6e6da916a967d8d3655f 2.1WS/en/os/i386/rhn_register-2.8.34-1.2.1AS.i386.rpm 019b32631452559245ce70e26f2ed928 2.1WS/en/os/i386/rhn_register-gnome-2.8.34-1.2.1AS.i386.rpm 42f3379722023af4412c79e686a04c89 2.1WS/en/os/i386/up2date-2.8.45-1.2.1AS.i386.rpm b0897084ce6ba6e4ae15ffa070739776 2.1WS/en/os/i386/up2date-gnome-2.8.45-1.2.1AS.i386.rpm These packages are GPG signed by Red Hat for security. Our key is available at https://www.redhat.com/en/products You can verify each package with the following command: rpm --checksig -v If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: md5sum 8. Contact: The Red Hat securitycontact is . More contact details at https://www.redhat.com/en/products Copyright 2003 Red Hat, Inc. . Updated up2date and rhn_register tools for Red Hat 2.1 to address severe connectivity issues and enhance performance.. Red Hat Security, Up2date Connectivity, Network Update. . Severity: Important. LinuxSecurity.com Team
Jun 08, 2023
•Important
Red Hat
87
security advisorydenial of servicecode executionDebian Bullseye DSA-5364-1 Severe: apr-util Input Issue
Ronald Crane discovered that missing input saniting in the apr_base64 functions of apr-util, the Apache Portable Runtime utility library, may result in denial of service or potentially the execution of arbitrary code. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5364-1
Feb 26, 2023
•Critical
Debian
89
security advisoryfedorasevere issueFedora 36 FEDORA-2023-fda5480804 Severe: Awstats XSS Issue Fix
Security fix for CVE-2022-46391. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-fda5480804 2023-01-18 01:38:39.308169 --------------------------------------------------------------------------------Name : awstats Product : Fedora 36 Version : 7.8 Release : 9.fc36 URL : Summary : Advanced Web Statistics Description : Advanced Web Statistics is a powerful and full-featured tool that generates advanced web server graphical statistics. This server log analyzer works from the command line or as a CGI and shows all information your log contains, in graphical web pages. It can analyze a lot of web/wap/proxy servers such as Apache, IIS, Weblogic, Webstar, Squid, ... but also mail or FTP servers. This program can measure visits, unique visitors, authenticated users, pages, domains/countries, OS busiest times, robot visits, type of files, search engines/keywords used, visit duration, HTTP errors and more... Statistics can be updated from a browser or your scheduler. The program also supports virtual servers, plugins and a lot of features. With the default configuration, the statistics are available at: --------------------------------------------------------------------------------Update Information: Security fix for CVE-2022-46391 --------------------------------------------------------------------------------ChangeLog: * Mon Jan 9 2023 Tim Jackson - 7.8-9 - Fix CVE-2022-46391 (rhbz #2150632) - Clean up spec file, removing conditionals for now-obsolete releases * Wed Jul 20 2022 Fedora Release Engineering - 7.8-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon May 30 2022 Jitka Plesnikova - 7.8-7 - Perl 5.36 rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #2150632 - CVE-2022-46391 awstats: XSS due to improper input checks https://bugzilla.redhat.com/show_bug.cgi?id=2150632 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-fda5480804' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 18, 2023
•Critical
Fedora
89
security advisoryFedorasevere issueFedora 36: 2022-5ef0bd9a27 Severe: Cri-o Golang Issues Identified
Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --- See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-5ef0bd9a27 2022-07-30 01:52:05.591823 --------------------------------------------------------------------------------Name : cri-o Product : Fedora 36 Version : 1.24.1 Release : 3.fc36 URL : https://github.com/cri-o/cri-o Summary : Open Container Initiative-based implementation of Kubernetes Container Runtime Interface Description : Open Container Initiative-based implementation of Kubernetes Container Runtime Interface. --------------------------------------------------------------------------------Update Information: Rebuild to mitigate CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang ---See https://groups.google.com/g/golang-dev/c/frczlF8OFQ0/m/4lrZh5BHDgAJ for more information about the specific vulnerabilities. --------------------------------------------------------------------------------ChangeLog: * Tue Jul 19 2022 Maxwell G - 0:1.24.1-3 - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in golang --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-5ef0bd9a27' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailinglist --
Jul 29, 2022
•Critical
Fedora
197
security advisorycode executiondebianDebian 9 Stretch DLA-2961-1 Severe: Thunderbird Code Execution Threat
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For Debian 9 stretch, these problems have been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2961-1
Mar 22, 2022
•Critical
Debian LTS
203
security advisorysecurity fixsevere issueMageia: 2022-0078 Severe: Cpanminus Signature Verification Bypass
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. (CVE-2020-16154) References: - https://bugs.mageia.org/show_bug.cgi?id=30019 . MGASA-2022-0078 - Updated cpanminus packages fix security vulnerability Publication date: 22 Feb 2022 URL: https://advisories.mageia.org/MGASA-2022-0078.html Type: security Affected Mageia releases: 8 CVE: CVE-2020-16154 The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass. (CVE-2020-16154) References: - https://bugs.mageia.org/show_bug.cgi?id=30019 - https://lists.fedoraproject.org/archives/list/
Feb 22, 2022
•Critical
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!