Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -8 articles for you...
200

Scientific Linux: SLSA-2015:0165-1 Moderate: Subversion Remote Threat

Moderate: subversion security update. Date: Wed, 11 Feb 2015 14:51:37 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: subversion on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Moderate: subversion security update Advisory ID: SLSA-2015:0165-1 Issue Date: 2015-02-10 CVE Numbers: CVE-2014-3528 CVE-2014-3580 -- A NULL pointer dereference flaw was found in the way the mod_dav_svn module handled REPORT requests. A remote, unauthenticated attacker could use a specially crafted REPORT request to crash mod_dav_svn. (CVE-2014-3580) It was discovered that Subversion clients retrieved cached authentication credentials using the MD5 hash of the server realm string without also checking the server's URL. A malicious server able to provide a realm that triggers an MD5 collision could possibly use this flaw to obtain the credentials for a different realm. (CVE-2014-3528) After installing the updated packages, for the update to take effect, you must restart the httpd daemon, if you are using mod_dav_svn, and the svnserve daemon, if you are serving Subversion repositories via the svn:// protocol. -- SL6 x86_64 mod_dav_svn-1.6.11-12.el6_6.x86_64.rpm subversion-1.6.11-12.el6_6.i686.rpm subversion-1.6.11-12.el6_6.x86_64.rpm subversion-debuginfo-1.6.11-12.el6_6.i686.rpm subversion-debuginfo-1.6.11-12.el6_6.x86_64.rpm subversion-devel-1.6.11-12.el6_6.i686.rpm subversion-devel-1.6.11-12.el6_6.x86_64.rpm subversion-gnome-1.6.11-12.el6_6.i686.rpm subversion-gnome-1.6.11-12.el6_6.x86_64.rpm subversion-javahl-1.6.11-12.el6_6.i686.rpm subversion-javahl-1.6.11-12.el6_6.x86_64.rpm subversion-kde-1.6.11-12.el6_6.i686.rpm subversion-kde-1.6.11-12.el6_6.x86_64.rpm subversion-perl-1.6.11-12.el6_6.i686.rpm subversion-perl-1.6.11-12.el6_6.x86_64.rpm subversion-ruby-1.6.11-12.el6_6.i686.rpm subversion-ruby-1.6.11-12.el6_6.x86_64.rpm i386 mod_dav_svn-1.6.11-12.el6_6.i686.rpm subversion-1.6.11-12.el6_6.i686.rpm subversion-debuginfo-1.6.11-12.el6_6.i686.rpm subversion-devel-1.6.11-12.el6_6.i686.rpm subversion-gnome-1.6.11-12.el6_6.i686.rpm subversion-javahl-1.6.11-12.el6_6.i686.rpm subversion-kde-1.6.11-12.el6_6.i686.rpm subversion-perl-1.6.11-12.el6_6.i686.rpm subversion-ruby-1.6.11-12.el6_6.i686.rpm noarch subversion-svn2cl-1.6.11-12.el6_6.noarch.rpm - Scientific Linux Development Team . A mild security patch for Subversion rectifies vulnerabilities related to remote access and necessitates service reboots post-installation.. Subversion Update, Security Advisory, Scientific Linux, Remote Threat, Software Vulnerability. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Feb 11, 2015 Important Scientific Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here