Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 Important Kernel Security Advisory ELSA-2026-21706

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 httpd Important Denial of Service Vuln ELSA-2026-22140

Calendar White Jun 02, 2026
Important
Oracle Large Esm H800
Oracle

Oracle Linux 8 ELSA-2026-22315 compat-openssl10 Moderate DoS Fix

Calendar White Jun 02, 2026
moderate
Oracle Large Esm H900
Oracle

Oracle Linux 8 gnutls Important Buffer Overflow Auth Bypass ELSA-2026-20611

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS nginx Security Advisory for Critical DoS Vulnerabilities

Calendar White Jun 03, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 LTS MySQL Important Security Issues USN-8363-2

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS GStreamer Base Significant DoS Attack Vulnerability Alert

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS python-pip Moderate DoS Regression Fix USN-8344-3

Calendar White Jun 03, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorysecurity updatecritical risk

Red Hat: RHSA-2006:0713-01 Critical: Python Denial of Service Issue

Updated Python packages are now available to correct a security issue in Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team.. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Important: python security update Advisory ID: RHSA-2006:0713-01 Advisory URL: https://access.redhat.com/errata/RHSA-2006:0713.html Issue date: 2006-10-09 Updated on: 2006-10-09 Product: Red Hat Enterprise Linux CVE Names: CVE-2006-4980 - ---------------------------------------------------------------------1. Summary: Updated Python packages are now available to correct a security issue in Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Problem description: Python is an interpreted, interactive, object-oriented programming language. A flaw was discovered in the way that the Python repr() function handled UTF-32/UCS-4 strings. If an application written in Python used the repr() function on untrusted data, this could lead to a denial of service or possibly allow the execution of arbitrary code with the privileges of the Python application. (CVE-2006-4980) In addition, this errata fixes a regression in the SimpleXMLRPCServer backport for Red Hat Enterprise Linux 3 that wasintroduced with RHSA-2005:109. Users of Python should upgrade to these updated packages, which contain a backported patch to correct this issue. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed (http://bugzilla.redhat.com/): 160418 - Error in RHEL3-U4-errata python python-2.2-xmlfix.patch 208162 - CVE-2006-4980 repr unicode buffer overflow 6. RPMs required: Red Hat Enterprise Linux AS version 3: SRPMS: 7bd55e73c3a8afcf2190233bce2d3424 python-2.2.3-6.5.src.rpm i386: aa5c6ddaf74636f828d89565c440a84f python-2.2.3-6.5.i386.rpm 91d2242eb5fdf234dc8cd8935e67864e python-debuginfo-2.2.3-6.5.i386.rpm 7921f372dc7adb3b47b72ced396114cf python-devel-2.2.3-6.5.i386.rpm d1ff62856ebeb0b64c8e893d6d20686b python-tools-2.2.3-6.5.i386.rpm aa5a4072f9483e2d9127d2100787a1f1 tkinter-2.2.3-6.5.i386.rpm ia64: 23e24399883628b9213e6bb2c1310384 python-2.2.3-6.5.ia64.rpm 0de3fb91fd40261e0434cdc7002391ec python-debuginfo-2.2.3-6.5.ia64.rpm 6ad20da697f6f72b543a25394f831421 python-devel-2.2.3-6.5.ia64.rpm ef9a9aa4f82ea2862f3233c63623c0b8 python-tools-2.2.3-6.5.ia64.rpm 36c74ec8d24b295d6574ecada425591b tkinter-2.2.3-6.5.ia64.rpm ppc: 513bc522e279569ca5ae609cc02a0901 python-2.2.3-6.5.ppc.rpm 3fbb1cb6de72bf7a098b19f6cafe8007 python-debuginfo-2.2.3-6.5.ppc.rpm 959ba7380d7f1830c0132ed570b55f8f python-devel-2.2.3-6.5.ppc.rpm 3fcbd3b923c1a4534f96cd717e1d0cf0 python-tools-2.2.3-6.5.ppc.rpm 240da66aab0fdef51662566bd9be8acb tkinter-2.2.3-6.5.ppc.rpm s390: 95fbb55320dadfd9f9cad87038506695 python-2.2.3-6.5.s390.rpm 040ad1bf4c3bd0f4600958bb1ed0d231 python-debuginfo-2.2.3-6.5.s390.rpm 73137cda244d7ef351962d5e513e9ab6 python-devel-2.2.3-6.5.s390.rpm 71da560c7523b01b9c6e0d9c4a87c2c0 python-tools-2.2.3-6.5.s390.rpm a93a8b2d9a7a2dc0dba6bc481e0dad1c tkinter-2.2.3-6.5.s390.rpm s390x: 01363b0b6d57f7c66419b32038020782 python-2.2.3-6.5.s390x.rpm 1b511b48bff4f6cb51b406cab0905bcd python-debuginfo-2.2.3-6.5.s390x.rpm 9cdd24346a67eccf627d9e604d0775aa python-devel-2.2.3-6.5.s390x.rpm a902f110ed483432451663e9fc546706 python-tools-2.2.3-6.5.s390x.rpm cf46eeccc6308d6598e5fd336bb3644e tkinter-2.2.3-6.5.s390x.rpm x86_64: edb81dd6e870bcf318cd33ee97555c39 python-2.2.3-6.5.x86_64.rpm 1a903d13fa25c5e1cc556999f52d96c5 python-debuginfo-2.2.3-6.5.x86_64.rpm c75ca79933b9ecbe82c711f8ed79e96b python-devel-2.2.3-6.5.x86_64.rpm 0f4df04e3e60b21fe40992df711c61a7 python-tools-2.2.3-6.5.x86_64.rpm 7351fc8da36d14d3a74171948c5e3823 tkinter-2.2.3-6.5.x86_64.rpm Red Hat Desktop version 3: SRPMS: 7bd55e73c3a8afcf2190233bce2d3424 python-2.2.3-6.5.src.rpm i386: aa5c6ddaf74636f828d89565c440a84f python-2.2.3-6.5.i386.rpm 91d2242eb5fdf234dc8cd8935e67864e python-debuginfo-2.2.3-6.5.i386.rpm 7921f372dc7adb3b47b72ced396114cf python-devel-2.2.3-6.5.i386.rpm d1ff62856ebeb0b64c8e893d6d20686b python-tools-2.2.3-6.5.i386.rpm aa5a4072f9483e2d9127d2100787a1f1 tkinter-2.2.3-6.5.i386.rpm x86_64: edb81dd6e870bcf318cd33ee97555c39 python-2.2.3-6.5.x86_64.rpm 1a903d13fa25c5e1cc556999f52d96c5 python-debuginfo-2.2.3-6.5.x86_64.rpm c75ca79933b9ecbe82c711f8ed79e96b python-devel-2.2.3-6.5.x86_64.rpm 0f4df04e3e60b21fe40992df711c61a7 python-tools-2.2.3-6.5.x86_64.rpm 7351fc8da36d14d3a74171948c5e3823 tkinter-2.2.3-6.5.x86_64.rpm Red Hat Enterprise Linux ES version 3: SRPMS: 7bd55e73c3a8afcf2190233bce2d3424 python-2.2.3-6.5.src.rpm i386: aa5c6ddaf74636f828d89565c440a84f python-2.2.3-6.5.i386.rpm 91d2242eb5fdf234dc8cd8935e67864e python-debuginfo-2.2.3-6.5.i386.rpm 7921f372dc7adb3b47b72ced396114cf python-devel-2.2.3-6.5.i386.rpm d1ff62856ebeb0b64c8e893d6d20686b python-tools-2.2.3-6.5.i386.rpm aa5a4072f9483e2d9127d2100787a1f1 tkinter-2.2.3-6.5.i386.rpm ia64: 23e24399883628b9213e6bb2c1310384 python-2.2.3-6.5.ia64.rpm 0de3fb91fd40261e0434cdc7002391ec python-debuginfo-2.2.3-6.5.ia64.rpm 6ad20da697f6f72b543a25394f831421 python-devel-2.2.3-6.5.ia64.rpm ef9a9aa4f82ea2862f3233c63623c0b8 python-tools-2.2.3-6.5.ia64.rpm 36c74ec8d24b295d6574ecada425591b tkinter-2.2.3-6.5.ia64.rpm x86_64: edb81dd6e870bcf318cd33ee97555c39 python-2.2.3-6.5.x86_64.rpm 1a903d13fa25c5e1cc556999f52d96c5 python-debuginfo-2.2.3-6.5.x86_64.rpm c75ca79933b9ecbe82c711f8ed79e96b python-devel-2.2.3-6.5.x86_64.rpm 0f4df04e3e60b21fe40992df711c61a7 python-tools-2.2.3-6.5.x86_64.rpm 7351fc8da36d14d3a74171948c5e3823 tkinter-2.2.3-6.5.x86_64.rpm Red Hat Enterprise Linux WS version 3: SRPMS: 7bd55e73c3a8afcf2190233bce2d3424 python-2.2.3-6.5.src.rpm i386: aa5c6ddaf74636f828d89565c440a84f python-2.2.3-6.5.i386.rpm 91d2242eb5fdf234dc8cd8935e67864e python-debuginfo-2.2.3-6.5.i386.rpm 7921f372dc7adb3b47b72ced396114cf python-devel-2.2.3-6.5.i386.rpm d1ff62856ebeb0b64c8e893d6d20686b python-tools-2.2.3-6.5.i386.rpm aa5a4072f9483e2d9127d2100787a1f1 tkinter-2.2.3-6.5.i386.rpm ia64: 23e24399883628b9213e6bb2c1310384 python-2.2.3-6.5.ia64.rpm 0de3fb91fd40261e0434cdc7002391ec python-debuginfo-2.2.3-6.5.ia64.rpm 6ad20da697f6f72b543a25394f831421 python-devel-2.2.3-6.5.ia64.rpm ef9a9aa4f82ea2862f3233c63623c0b8 python-tools-2.2.3-6.5.ia64.rpm 36c74ec8d24b295d6574ecada425591b tkinter-2.2.3-6.5.ia64.rpm x86_64: edb81dd6e870bcf318cd33ee97555c39 python-2.2.3-6.5.x86_64.rpm 1a903d13fa25c5e1cc556999f52d96c5 python-debuginfo-2.2.3-6.5.x86_64.rpm c75ca79933b9ecbe82c711f8ed79e96b python-devel-2.2.3-6.5.x86_64.rpm 0f4df04e3e60b21fe40992df711c61a7 python-tools-2.2.3-6.5.x86_64.rpm 7351fc8da36d14d3a74171948c5e3823 tkinter-2.2.3-6.5.x86_64.rpm Red Hat Enterprise Linux AS version 4: SRPMS: b77a2036a4496f91b19cf2bfc228ef9d python-2.3.4-14.3.src.rpm i386: 588b1be239522d3e55b89bbb21d6ceec python-2.3.4-14.3.i386.rpm f3db32a8d02225747ccd3a1e163644c6 python-debuginfo-2.3.4-14.3.i386.rpm 3431de9944ebcb847be132b64e87e513 python-devel-2.3.4-14.3.i386.rpm c5b70323157c303f143db6d3ba369f58 python-docs-2.3.4-14.3.i386.rpm 06aab46ed671d94158d0d0b814b8427b python-tools-2.3.4-14.3.i386.rpm 3e78a7ef509eb7d19ed6aac9fa6c6546 tkinter-2.3.4-14.3.i386.rpm ia64: 54f132a54ad12115cd8f3289cfb19c3c python-2.3.4-14.3.ia64.rpm b58697dedc25b259f53b4a1c2600e9af python-debuginfo-2.3.4-14.3.ia64.rpm b926a960dd693a2c68f417cb709f8f72 python-devel-2.3.4-14.3.ia64.rpm 0cd0c817921b4acf6b3093017302497c python-docs-2.3.4-14.3.ia64.rpm 3b618ab235a709c92a47d5b9c3c99a9c python-tools-2.3.4-14.3.ia64.rpm 45bf62592d6ea608d3cde2843444f021 tkinter-2.3.4-14.3.ia64.rpm ppc: 7da257f798eba9dd049681325b99a688 python-2.3.4-14.3.ppc.rpm 979f91ead60ad5a16134af1a1bab0673 python-debuginfo-2.3.4-14.3.ppc.rpm fcca089e509abe70e99907a028ea5e54 python-devel-2.3.4-14.3.ppc.rpm f79cda57f4daf646765d144256669c18 python-docs-2.3.4-14.3.ppc.rpm 6c4d7d3cc8318431808076953c72faf0 python-tools-2.3.4-14.3.ppc.rpm 3795d5229135336249a8f190ecf391b1 tkinter-2.3.4-14.3.ppc.rpm s390: 75743f9134b65b15531fd54441bc2074 python-2.3.4-14.3.s390.rpm 63e55bfca293aa0bd0fc3a9698055297 python-debuginfo-2.3.4-14.3.s390.rpm 5fd3244000892911334f7010529d0b7e python-devel-2.3.4-14.3.s390.rpm fdda555ab73dbf88b399f9997cc1cd2f python-docs-2.3.4-14.3.s390.rpm e0784b78a875e072e52bf6e5b1289555 python-tools-2.3.4-14.3.s390.rpm edbd15c9cd96d53581b2634cde714a18 tkinter-2.3.4-14.3.s390.rpm s390x: fbf37d4cc36b601c137e291fd760fc21 python-2.3.4-14.3.s390x.rpm dd0473e9dfab38025035c6fa29d6ab92 python-debuginfo-2.3.4-14.3.s390x.rpm 3cac0c4e00681da4bdbb3e3ea3d34f5e python-devel-2.3.4-14.3.s390x.rpm 94a85e10ef45b34ec2771007ed020a4a python-docs-2.3.4-14.3.s390x.rpm 87362e01198a3e4e90a0363106446510 python-tools-2.3.4-14.3.s390x.rpm 9b6f208be55ef77e869be749343d7eef tkinter-2.3.4-14.3.s390x.rpm x86_64: 629204e2dfb213386bd616acf9c77f00 python-2.3.4-14.3.x86_64.rpm 0b4389017feedec4b372d215d7e30bd2 python-debuginfo-2.3.4-14.3.x86_64.rpm f21880ce6f9bb3638fe221b9300200a7 python-devel-2.3.4-14.3.x86_64.rpm ac59cfd06813a19a38f6771af45b1372 python-docs-2.3.4-14.3.x86_64.rpm 883f381cf0d71afb267782d0e7c0bf55 python-tools-2.3.4-14.3.x86_64.rpm 22ab34f9f5f8d46141e0e08b45cc3c62 tkinter-2.3.4-14.3.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: SRPMS: b77a2036a4496f91b19cf2bfc228ef9d python-2.3.4-14.3.src.rpm i386: 588b1be239522d3e55b89bbb21d6ceec python-2.3.4-14.3.i386.rpm f3db32a8d02225747ccd3a1e163644c6 python-debuginfo-2.3.4-14.3.i386.rpm 3431de9944ebcb847be132b64e87e513 python-devel-2.3.4-14.3.i386.rpm c5b70323157c303f143db6d3ba369f58 python-docs-2.3.4-14.3.i386.rpm 06aab46ed671d94158d0d0b814b8427b python-tools-2.3.4-14.3.i386.rpm 3e78a7ef509eb7d19ed6aac9fa6c6546 tkinter-2.3.4-14.3.i386.rpm x86_64: 629204e2dfb213386bd616acf9c77f00 python-2.3.4-14.3.x86_64.rpm 0b4389017feedec4b372d215d7e30bd2 python-debuginfo-2.3.4-14.3.x86_64.rpm f21880ce6f9bb3638fe221b9300200a7 python-devel-2.3.4-14.3.x86_64.rpm ac59cfd06813a19a38f6771af45b1372 python-docs-2.3.4-14.3.x86_64.rpm 883f381cf0d71afb267782d0e7c0bf55 python-tools-2.3.4-14.3.x86_64.rpm 22ab34f9f5f8d46141e0e08b45cc3c62 tkinter-2.3.4-14.3.x86_64.rpm Red Hat Enterprise Linux ES version 4: SRPMS: b77a2036a4496f91b19cf2bfc228ef9d python-2.3.4-14.3.src.rpm i386: 588b1be239522d3e55b89bbb21d6ceec python-2.3.4-14.3.i386.rpm f3db32a8d02225747ccd3a1e163644c6 python-debuginfo-2.3.4-14.3.i386.rpm 3431de9944ebcb847be132b64e87e513 python-devel-2.3.4-14.3.i386.rpm c5b70323157c303f143db6d3ba369f58 python-docs-2.3.4-14.3.i386.rpm 06aab46ed671d94158d0d0b814b8427b python-tools-2.3.4-14.3.i386.rpm 3e78a7ef509eb7d19ed6aac9fa6c6546 tkinter-2.3.4-14.3.i386.rpm ia64: 54f132a54ad12115cd8f3289cfb19c3c python-2.3.4-14.3.ia64.rpm b58697dedc25b259f53b4a1c2600e9af python-debuginfo-2.3.4-14.3.ia64.rpm b926a960dd693a2c68f417cb709f8f72 python-devel-2.3.4-14.3.ia64.rpm 0cd0c817921b4acf6b3093017302497c python-docs-2.3.4-14.3.ia64.rpm 3b618ab235a709c92a47d5b9c3c99a9c python-tools-2.3.4-14.3.ia64.rpm 45bf62592d6ea608d3cde2843444f021 tkinter-2.3.4-14.3.ia64.rpm x86_64: 629204e2dfb213386bd616acf9c77f00 python-2.3.4-14.3.x86_64.rpm 0b4389017feedec4b372d215d7e30bd2 python-debuginfo-2.3.4-14.3.x86_64.rpm f21880ce6f9bb3638fe221b9300200a7 python-devel-2.3.4-14.3.x86_64.rpm ac59cfd06813a19a38f6771af45b1372 python-docs-2.3.4-14.3.x86_64.rpm 883f381cf0d71afb267782d0e7c0bf55 python-tools-2.3.4-14.3.x86_64.rpm 22ab34f9f5f8d46141e0e08b45cc3c62 tkinter-2.3.4-14.3.x86_64.rpm Red Hat Enterprise Linux WS version 4: SRPMS: b77a2036a4496f91b19cf2bfc228ef9d python-2.3.4-14.3.src.rpm i386: 588b1be239522d3e55b89bbb21d6ceec python-2.3.4-14.3.i386.rpm f3db32a8d02225747ccd3a1e163644c6 python-debuginfo-2.3.4-14.3.i386.rpm 3431de9944ebcb847be132b64e87e513 python-devel-2.3.4-14.3.i386.rpm c5b70323157c303f143db6d3ba369f58 python-docs-2.3.4-14.3.i386.rpm 06aab46ed671d94158d0d0b814b8427b python-tools-2.3.4-14.3.i386.rpm 3e78a7ef509eb7d19ed6aac9fa6c6546 tkinter-2.3.4-14.3.i386.rpm ia64: 54f132a54ad12115cd8f3289cfb19c3c python-2.3.4-14.3.ia64.rpm b58697dedc25b259f53b4a1c2600e9af python-debuginfo-2.3.4-14.3.ia64.rpm b926a960dd693a2c68f417cb709f8f72 python-devel-2.3.4-14.3.ia64.rpm 0cd0c817921b4acf6b3093017302497c python-docs-2.3.4-14.3.ia64.rpm 3b618ab235a709c92a47d5b9c3c99a9c python-tools-2.3.4-14.3.ia64.rpm 45bf62592d6ea608d3cde2843444f021 tkinter-2.3.4-14.3.ia64.rpm x86_64: 629204e2dfb213386bd616acf9c77f00 python-2.3.4-14.3.x86_64.rpm 0b4389017feedec4b372d215d7e30bd2 python-debuginfo-2.3.4-14.3.x86_64.rpm f21880ce6f9bb3638fe221b9300200a7 python-devel-2.3.4-14.3.x86_64.rpm ac59cfd06813a19a38f6771af45b1372 python-docs-2.3.4-14.3.x86_64.rpm 883f381cf0d71afb267782d0e7c0bf55 python-tools-2.3.4-14.3.x86_64.rpm 22ab34f9f5f8d46141e0e08b45cc3c62 tkinter-2.3.4-14.3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2006-4980 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2006 Red Hat, Inc. . Crucial vulnerability patch released for Python libraries on Red Hat Enterprise Linux addressing a significant security breach.. Red Hat, Python Security, Enterprise Linux, Security Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 09, 2006 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryRed Hatupdate

Red Hat: RHSA-2005:235-01 Critical Update: Mailman XSS Vulnerability Fix

An updated mailman package that corrects a cross-site scripting flaw is now available. This update has been rated as having important security impact by the Red Hat Security Response Team.. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Important: mailman security update Advisory ID: RHSA-2005:235-01 Advisory URL: https://access.redhat.com/errata/RHSA-2005:235.html Issue date: 2005-03-21 Updated on: 2005-03-21 Product: Red Hat Enterprise Linux Keywords: XSS CVE Names: CAN-2004-1177 - ---------------------------------------------------------------------1. Summary: An updated mailman package that corrects a cross-site scripting flaw is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Problem description: Mailman manages electronic mail discussion and e-newsletter lists. A cross-site scripting (XSS) flaw in the driver script of mailman prior to version 2.1.5 could allow remote attackers to execute scripts as other web users. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-1177 to this issue. Users of mailman should update to this erratum package, which corrects this issue by turning on STEALTH_MODE by default and using Utils.websafe() to quote the html. 4. Solution: Before applying thisupdate, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/ 5. Bug IDs fixed (https://bugzilla.redhat.com/): 132750 - Mailman doesn't work with courier 143008 - mailman logrotate has wrong location for mailmanctl 142605 - init script doesn't use /var/lock/subsys 147833 - CAN-2004-1177 6. RPMs required: Red Hat Enterprise Linux AS version 3: SRPMS: cec4560e18c7249eeab97f33209ab268 mailman-2.1.5-25.rhel3.src.rpm i386: 6c052b1a07bfdec09756ee58be0e4c56 mailman-2.1.5-25.rhel3.i386.rpm ia64: 41cbca1ff68fa89f87f6686aaf57f229 mailman-2.1.5-25.rhel3.ia64.rpm ppc: d1b78c0297714110557d5e24af03b1e0 mailman-2.1.5-25.rhel3.ppc.rpm s390: 475bdfee1a9c0f1580d5c62c9fa0f71d mailman-2.1.5-25.rhel3.s390.rpm s390x: f59fd25effa4d958730b1c778d47a4c6 mailman-2.1.5-25.rhel3.s390x.rpm x86_64: 1a3ca7f170accc1a9747ef78b8ad0006 mailman-2.1.5-25.rhel3.x86_64.rpm Red Hat Desktop version 3: SRPMS: cec4560e18c7249eeab97f33209ab268 mailman-2.1.5-25.rhel3.src.rpm i386: 6c052b1a07bfdec09756ee58be0e4c56 mailman-2.1.5-25.rhel3.i386.rpm x86_64: 1a3ca7f170accc1a9747ef78b8ad0006 mailman-2.1.5-25.rhel3.x86_64.rpm Red Hat Enterprise Linux ES version 3: SRPMS: cec4560e18c7249eeab97f33209ab268 mailman-2.1.5-25.rhel3.src.rpm i386: 6c052b1a07bfdec09756ee58be0e4c56 mailman-2.1.5-25.rhel3.i386.rpm ia64: 41cbca1ff68fa89f87f6686aaf57f229 mailman-2.1.5-25.rhel3.ia64.rpm x86_64: 1a3ca7f170accc1a9747ef78b8ad0006 mailman-2.1.5-25.rhel3.x86_64.rpm Red Hat Enterprise Linux WS version 3: SRPMS: cec4560e18c7249eeab97f33209ab268 mailman-2.1.5-25.rhel3.src.rpm i386: 6c052b1a07bfdec09756ee58be0e4c56 mailman-2.1.5-25.rhel3.i386.rpm ia64: 41cbca1ff68fa89f87f6686aaf57f229 mailman-2.1.5-25.rhel3.ia64.rpm x86_64: 1a3ca7f170accc1a9747ef78b8ad0006 mailman-2.1.5-25.rhel3.x86_64.rpm Red Hat Enterprise Linux AS version 4: SRPMS: db340a0e60ff33b47156d0ca96f95f14 mailman-2.1.5-33.rhel4.src.rpm i386: 97e1cbd6ec4f6099def5ed95f072d603 mailman-2.1.5-33.rhel4.i386.rpm ia64: 0fde6fa6ab37f8ae0031e53d62615c8c mailman-2.1.5-33.rhel4.ia64.rpm ppc: 376ec413afbc6d85ab268bdbab811b79 mailman-2.1.5-33.rhel4.ppc.rpm s390: 79bda3c10f6204e47c36c8372956602a mailman-2.1.5-33.rhel4.s390.rpm s390x: e1746fc732cbb29a0df14db5a7e88f0a mailman-2.1.5-33.rhel4.s390x.rpm x86_64: 97a3e1f38866b40d06b2226e0901fc45 mailman-2.1.5-33.rhel4.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: SRPMS: db340a0e60ff33b47156d0ca96f95f14 mailman-2.1.5-33.rhel4.src.rpm i386: 97e1cbd6ec4f6099def5ed95f072d603 mailman-2.1.5-33.rhel4.i386.rpm x86_64: 97a3e1f38866b40d06b2226e0901fc45 mailman-2.1.5-33.rhel4.x86_64.rpm Red Hat Enterprise Linux ES version 4: SRPMS: db340a0e60ff33b47156d0ca96f95f14 mailman-2.1.5-33.rhel4.src.rpm i386: 97e1cbd6ec4f6099def5ed95f072d603 mailman-2.1.5-33.rhel4.i386.rpm ia64: 0fde6fa6ab37f8ae0031e53d62615c8c mailman-2.1.5-33.rhel4.ia64.rpm x86_64: 97a3e1f38866b40d06b2226e0901fc45 mailman-2.1.5-33.rhel4.x86_64.rpm Red Hat Enterprise Linux WS version 4: SRPMS: db340a0e60ff33b47156d0ca96f95f14 mailman-2.1.5-33.rhel4.src.rpm i386: 97e1cbd6ec4f6099def5ed95f072d603 mailman-2.1.5-33.rhel4.i386.rpm ia64: 0fde6fa6ab37f8ae0031e53d62615c8c mailman-2.1.5-33.rhel4.ia64.rpm x86_64: 97a3e1f38866b40d06b2226e0901fc45 mailman-2.1.5-33.rhel4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7.References: https://www.cve.org/CVERecord?id=CVE-CAN-2004-1177 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2005 Red Hat, Inc. . Red Hat security bulletin for mailman upgrade tackling cross-site scripting vulnerabilities with significant implications.. Mailman Update, Security Flaw, Red Hat Advisory, Cross Site Scripting, Software Security Fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 21, 2005 •Important Red Hat
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here