Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
200
security advisorycriticalmozillaSciLinux: SLSA-2019-0622-1 Critical: Firefox Memory Safety Fixes
This update upgrades Firefox to version 60.6.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 (CVE-2019-9788) * Mozilla: Use-after-free when removing in-use DOM elements (CVE-2019-9790) * Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey (CVE-2019-9791) * Mozilla: IonMonkey leaks JS_OPTIMIZED_OUT magic value [More...]. Synopsis: Critical: firefox security update Advisory ID: SLSA-2019:0622-1 Issue Date: 2019-03-20 CVE Numbers: CVE-2018-18506 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9795 CVE-2019-9796 -- This update upgrades Firefox to version 60.6.0 ESR. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 (CVE-2019-9788) * Mozilla: Use-after-free when removing in-use DOM elements (CVE-2019-9790) * Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey (CVE-2019-9791) * Mozilla: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script (CVE-2019-9792) * Mozilla: Improper bounds checks when Spectre mitigations are disabled (CVE-2019-9793) * Mozilla: Type-confusion in IonMonkey JIT compiler (CVE-2019-9795) * Mozilla: Use-after-free with SMIL animation controller (CVE-2019-9796) * Mozilla: Proxy Auto-Configuration file can define localhost access to be proxied (CVE-2018-18506) -- SL7 x86_64 firefox-60.6.0-3.el7_6.x86_64.rpm firefox-debuginfo-60.6.0-3.el7_6.x86_64.rpm firefox-60.6.0-3.el7_6.i686.rpm firefox-debuginfo-60.6.0-3.el7_6.i686.rpm - Scientific Linux Development Team . Chrome cybersecurity patch SLSA-2023:0815-2 addresses severe vulnerabilities involving buffer overflow and improper resource management issues.. firefox update,safety issues,mozilla firefox,security patch,linux upgrade. . Severity: Critical.LinuxSecurity.com Team
Mar 20, 2019
•Critical
Scientific Linux
100
security advisoryupdateimportantSUSE: 2018:1362-2 Important: Qemu Spectre V4 Mitigation Support
An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:1362-2 Rating: important References: #1079405 #1092885 Cross-References: CVE-2018-3639 Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for qemu fixes several issues. This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This patch permits the new x86 cpu feature flag named "ssbd" to be presented to the guest, given that the host has this feature, and KVM exposes it to the guest as well. For this feature to be enabled please use the qemu commandline -cpu $MODEL,+spec-ctrl,+ssbd so the guest OS can take advantage of the feature. spec-ctrl and ssbd support is also required in the host. This feature was added: - Add support for block resize support for xen disks through the monitor This non-security issue was fixed: - bsc#1079405: Add new look up path "sys/class/tpm" for tpm cancel path based on Linux 4.0 change Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patchSUSE-SLE-SERVER-12-SP2-BCL-2018-946=1 Package List: - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): qemu-ipxe-1.0.0-41.40.1 qemu-seabios-1.9.1-41.40.1 qemu-sgabios-8-41.40.1 qemu-vgabios-1.9.1-41.40.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): qemu-2.6.2-41.40.1 qemu-block-curl-2.6.2-41.40.1 qemu-block-curl-debuginfo-2.6.2-41.40.1 qemu-block-rbd-2.6.2-41.40.1 qemu-block-rbd-debuginfo-2.6.2-41.40.1 qemu-block-ssh-2.6.2-41.40.1 qemu-block-ssh-debuginfo-2.6.2-41.40.1 qemu-debugsource-2.6.2-41.40.1 qemu-guest-agent-2.6.2-41.40.1 qemu-guest-agent-debuginfo-2.6.2-41.40.1 qemu-kvm-2.6.2-41.40.1 qemu-lang-2.6.2-41.40.1 qemu-tools-2.6.2-41.40.1 qemu-tools-debuginfo-2.6.2-41.40.1 qemu-x86-2.6.2-41.40.1 qemu-x86-debuginfo-2.6.2-41.40.1 References: https://www.suse.com/security/cve/CVE-2018-3639.html https://bugzilla.suse.com/1079405 https://bugzilla.suse.com/1092885 _______________________________________________ sle-security-updates mailing list
Oct 18, 2018
•Important
SuSE
87
security advisorymoderatedebianDebian: DSA-4210-1 Moderate: Xen Spectre V4 Mitigation Announcement
This update provides mitigations for the Spectre v4 variant in x86-based micro processors. On Intel CPUs this requires updated microcode which is currently not released publicly (but your hardware vendor may have issued an update). For servers with AMD CPUs no microcode update is . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4210-1
May 25, 2018
Debian
89
security advisoryFedorabrowserFedora 26: Icecat Update RHSA-2018:0520 Security: Spectre Mitigation
- Update to 52.5.3 - Patched for mozilla bug-1427870 (spectre mitigation). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-e1539d9bc6 2018-01-17 22:33:42.956915 --------------------------------------------------------------------------------Name : icecat Product : Fedora 26 Version : 52.5.3 Release : 2.fc26 URL : Summary : GNU version of Firefox browser Description : GNUZilla Icecat is a fully-free fork of Mozilla Firefox ESR. Extensions included to this version of IceCat: * LibreJS GNU LibreJS aims to address the JavaScript problem described in Richard Stallman's article The JavaScript Trap. * SpyBlock Blocks privacy trackers while in normal browsing mode, and all third party requests when in private browsing mode. Based on Adblock Plus. * AboutIceCat Adds a custom "about:icecat" homepage with links to information about the free software and privacy features in IceCat, and check-boxes to enable and disable the ones more prone to break websites. * HTML5-video-everywhere Uses the native video player to play embedded videos from different sources * Fingerprinting countermeasures: Fingerprinting is a series of techniques allowing to uniquely identify a browser based on specific characteristics of that particular instance (like what fonts are available in that machine). Unlike cookies the user cannot opt-out of being tracked this way, so the browser has to avoid giving away that kind of hints. --------------------------------------------------------------------------------Update Information: - Update to 52.5.3 - Patched for mozilla bug-1427870 (spectre mitigation) --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade icecat' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jan 17, 2018
•Important
Fedora
89
security advisoryfedorakernel updateFedora 26: 2018-e6fe35524d Critical: Kernel Spectre Mitigations
The 4.14.13 stable kernel update contains a number of important fixes across the tree. This is also the first update to contain some spectre mitigations. Some patches for variant 1 as well as the initial retpoline build for variant 2. These variant 2 mitigations will improve with further patches, and once compiler support is improved.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-e6fe35524d 2018-01-13 20:56:41.622209 --------------------------------------------------------------------------------Name : kernel Product : Fedora 26 Version : 4.14.13 Release : 200.fc26 URL : https://www.kernel.org/ Summary : The Linux kernel Description : The kernel meta package --------------------------------------------------------------------------------Update Information: The 4.14.13 stable kernel update contains a number of important fixes across the tree. This is also the first update to contain some spectre mitigations. Some patches for variant 1 as well as the initial retpoline build for variant 2. These variant 2 mitigations will improve with further patches, and once compiler support is improved. --------------------------------------------------------------------------------References: [ 1 ] Bug #1514969 - Bug in backlight handling renders system almost unusable https://bugzilla.redhat.com/show_bug.cgi?id=1514969 [ 2 ] Bug #1531182 - Out-of-tree kernel modules fail to build on aarch64 https://bugzilla.redhat.com/show_bug.cgi?id=1531182 [ 3 ] Bug #1532058 - CONFIG_RESET_ATTACK_MITIGATION forces Lenovo X220 to hard power off and power on instead of reboot https://bugzilla.redhat.com/show_bug.cgi?id=1532058 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade kernel' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jan 13, 2018
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!