Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
217
security advisorymoderateDoSOracle Linux 8 osbuild-composer Moderate CVE-2025-58183 ELSA-2026-1380
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2026-1380 http://linux.oracle.com/errata/ELSA-2026-1380.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: osbuild-composer-101.4-2.0.1.el8_10.x86_64.rpm osbuild-composer-core-101.4-2.0.1.el8_10.x86_64.rpm osbuild-composer-worker-101.4-2.0.1.el8_10.x86_64.rpm aarch64: osbuild-composer-101.4-2.0.1.el8_10.aarch64.rpm osbuild-composer-core-101.4-2.0.1.el8_10.aarch64.rpm osbuild-composer-worker-101.4-2.0.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/osbuild-composer-101.4-2.0.1.el8_10.src.rpm Related CVEs: CVE-2025-58183 Description of changes: [101.4-2.0.1] - Support using repository definitons with OCI variables [JIRA: OLDIS-38657] - Update repositories to contain OCI variables - Remove image types Minimal-raw and wsl [JIRA: OLDIS-38123] - Increase default /boot size to 1GB [Orabug: 36827079] - support for building OL8/9 images on Oracle Linux 8 [Orabug: 36400619] [101.4-2] - Rebuilt to fix: - CVE-2025-58183 - RHEL-125669 _______________________________________________ El-errata mailing list
Feb 02, 2026
Oracle
197
security advisoryupdatedebianDebian 11 Bullseye DLA-4223-1: debian-security-support update
debian-security-support, the Debian security support coverage checker, has been updated in bullseye-security to mark the end of security support of the following package: . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4223-1
Jun 21, 2025
•Important
Debian LTS
202
security advisorymoderateruby updateopenSUSE Tumbleweed: Security Fix for ruby3.4 activestorage 2025:14677-1
An update that solves one vulnerability can now be installed.. # ruby3.4-rubygem-activestorage-8.0-8.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14677-1 Rating: moderate Cross-References: * CVE-2024-54133 Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the ruby3.4-rubygem-activestorage-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * ruby3.4-rubygem-activestorage-8.0 8.0.1-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-54133.html . The release of ruby3.4-rubygem-activestorage-8.0 provides an important security patch for a notable vulnerability in openSUSE Tumbleweed.. ruby update, openSUSE security, activestorage package, moderate vulnerabilities, system updates. . LinuxSecurity.com Team
Jan 22, 2025
OpenSUSE
217
security advisorysecurity issueremote exploitOracle Linux 6: ELSA-2022-9969 Critical: Kernel Update and Threat Fixes
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-9969 https://linux.oracle.com/errata/ELSA-2022-9969.html The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-doc-4.1.12-124.68.3.el6uek.noarch.rpm kernel-uek-firmware-4.1.12-124.68.3.el6uek.noarch.rpm kernel-uek-4.1.12-124.68.3.el6uek.x86_64.rpm kernel-uek-devel-4.1.12-124.68.3.el6uek.x86_64.rpm kernel-uek-debug-4.1.12-124.68.3.el6uek.x86_64.rpm kernel-uek-debug-devel-4.1.12-124.68.3.el6uek.x86_64.rpm Related CVEs: CVE-2015-1350 CVE-2017-13166 CVE-2020-10690 CVE-2020-12654 CVE-2020-12655 CVE-2021-42739 CVE-2022-3239 CVE-2022-36946 Description of changes: [4.1.12-124.68.3.el6uek] - Orabug: 34733462 (Alok Tiwari) [4.1.12-124.68.2.el6uek] - ptp: fix the race between the release of ptp_clock and cdev (Vladis Dronov) [Orabug: 31350707] {CVE-2020-10690} - ptp: Fix pass zero to ERR_PTR() in ptp_clock_register (YueHaibing) [Orabug: 31350707] - chardev: add helper function to register char devs with a struct device (Logan Gunthorpe) [Orabug: 31350707] - ptp: create "pins" together with the rest of attributes (Dmitry Torokhov) [Orabug: 31350707] - ptp: use is_visible method to hide unused attributes (Dmitry Torokhov) [Orabug: 31350707] - ptp: do not explicitly set drvdata in ptp_clock_register() (Dmitry Torokhov) [Orabug: 31350707] - xfs: add agf freeblocks verify in xfs_agf_verify (Zheng Bin) [Orabug: 31350923] {CVE-2020-12655} - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal) [Orabug: 34475433] {CVE-2022-36946} - media: em28xx: initialize refcount before kref_get (Dongliang Mu) [Orabug: 34619522] {CVE-2022-3239} [4.1.12-124.68.1.el6uek] - fs: Avoid premature clearing of capabilities (Jan Kara) [Orabug: 20429825] {CVE-2015-1350} - fs: Give dentry to inode_change_ok()instead of inode (Jan Kara) [Orabug: 20429825] {CVE-2015-1350} - nfsd: Disable NFSv2 timestamp workaround for NFSv3+ (Andreas Gruenbacher) [Orabug: 20429825] {CVE-2015-1350} - fuse: Propagate dentry down to inode_change_ok() (Jan Kara) [Orabug: 20429825] {CVE-2015-1350} - xfs: Propagate dentry down to inode_change_ok() (Jan Kara) [Orabug: 20429825] {CVE-2015-1350} - media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Daniel Mentz) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: don't copy back the result for certain errors (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: drop pr_info for unknown buffer type (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: copy clip list in put_v4l2_window32 (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32: Copy v4l2_window-> global_alpha (Daniel Mentz) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: make ctrl_is_pointer work for subdevs (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: fix ctrl_is_pointer (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: copy m.userptr in put_v4l2_plane32 (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: avoid sizeof(type) (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: move 'helper' functions to __get/put_v4l2_format32 (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: fix the indentation (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32.c: add missing VIDIOC_PREPARE_BUF (Hans Verkuil) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32: Fix timespec conversion (Daniel Mentz) [Orabug: 28036613] {CVE-2017-13166} - media: v4l2-compat-ioctl32: fix missing reserved field copy in put_v4l2_create32 (Tiffany Lin) [Orabug: 28036613] {CVE-2017-13166} - media:v4l2-compat-ioctl32: fix missing length copy in put_v4l2_buffer32 (Tiffany Lin) [Orabug: 28036613] {CVE-2017-13166} - mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Qing Xu) [Orabug: 31350517] {CVE-2020-12654} - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Dan Carpenter) [Orabug: 33488041] {CVE-2021-42739} _______________________________________________ El-errata mailing list
Nov 02, 2022
•Critical
Oracle
100
security advisorysoftware updatepatchSUSE: 2021:0440-1 Critical: Openvswitch Security Vulnerability Patch
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for openvswitch ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0439-1 Rating: important References: #1181742 Cross-References: CVE-2020-35498 CVSS scores: CVE-2020-35498 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Manager Server 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Enterprise Storage 6 SUSE CaaS Platform 4.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openvswitch fixes the following issues: - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-439=1 - SUSE Manager Retail Branch Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-439=1 - SUSE Manager Proxy 4.0: zypper in-t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-439=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2021-439=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-439=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-439=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2021-439=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP2-2021-439=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-439=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-439=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2021-439=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Manager Server 4.0 (ppc64le s390x x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE Manager Retail Branch Server 4.0 (x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE Manager Proxy 4.0 (x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): python2-ovs-2.11.5-3.15.3 python2-ovs-debuginfo-2.11.5-3.15.3 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 (aarch64 ppc64le s390x x86_64): python2-ovs-2.11.5-3.15.3 python2-ovs-debuginfo-2.11.5-3.15.3 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE Enterprise Storage 6 (aarch64 x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 - SUSE CaaS Platform 4.0 (x86_64): libopenvswitch-2_11-0-2.11.5-3.15.3 libopenvswitch-2_11-0-debuginfo-2.11.5-3.15.3 openvswitch-2.11.5-3.15.3 openvswitch-debuginfo-2.11.5-3.15.3 openvswitch-debugsource-2.11.5-3.15.3 openvswitch-devel-2.11.5-3.15.3 References: https://www.suse.com/security/cve/CVE-2020-35498.html https://bugzilla.suse.com/1181742 . Addresses a denial of service vulnerability in openvswitch across various SUSE distributions. Verify updates to maintain security.. openvswitch security update,SUSE Manager Server security patches,DOS fix in SUSE. . Severity: Important. LinuxSecurity.com Team
Feb 11, 2021
•Important
SuSE
199
security advisorysecurity issueupdateCentOS: CESA-2020-3643 Important: Thunderbird Security Fix
Upstream details at : https://access.redhat.com/errata/RHSA-2020:3643. CentOS Errata and Security Advisory 2020:3643 Important Upstream details at : https://access.redhat.com/errata/RHSA-2020:3643 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 558cb4cec9d65b7140f56dc518d58ae6ceafc230ccdda0bd2b5b937d61115ce2 thunderbird-68.12.0-1.el6.centos.i686.rpm x86_64: 5ed3d21f20ebd7146936e4bfd6b106b2b76d0414e2e7a3040ab2f10a355c5bc8 thunderbird-68.12.0-1.el6.centos.x86_64.rpm Source: c1cd84a7a4d24026aea19059ea99c3f5129175b17de8e12f0836301f24220f10 thunderbird-68.12.0-1.el6.centos.src.rpm -- Johnny Hughes CentOS Project { https://www.centos.org/ } irc: hughesjr, #
Sep 14, 2020
•Important
CentOS
98
security advisorymoderatedenial of serviceRHEL 5.8 RHSA-2012-0150-03 Moderate: Kernel Denial of Service Threat
Updated kernel packages that fix one security issue, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the eighth regular update.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat Enterprise Linux 5.8 kernel update Advisory ID: RHSA-2012:0150-03 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2012:0150.html Issue date: 2012-02-21 CVE Names: CVE-2011-1083 ==================================================================== 1. Summary: Updated kernel packages that fix one security issue, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the eighth regular update. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux (v. 5 server) - i386, ia64, noarch, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, noarch, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: * A flaw was found in the way the Linux kernel's Event Poll (epoll) subsystem handled large, nested epoll structures. A local, unprivileged user could use this flaw to cause a denial of service. (CVE-2011-1083, Moderate) Red Hat would like to thank Nelson Elhage for reporting this issue. These updated kernel packages include a number of bug fixes and enhancements. Space precludes documenting all of these changesin this advisory. Users are directed to the Red Hat Enterprise Linux 5.8 Technical Notes, linked to in the References, for information on the most significant of these changes. All Red Hat Enterprise Linux 5 users are advised to install these updated packages, which correct these issues and add these enhancements. The system must be rebooted for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system. 5. Bugs fixed (http://bugzilla.redhat.com/): 485173 - kernel/module-verify-sig.c with memory uncleaned bug 516170 - kernel multipath driver behaves badly on medium errors526862 - [RHEL5 Xen]: Mask out CPU features by default 543064 - No NUMA node hash function found on a EX machine 571737 - Cannot use Quickcam Pro 9000 with Ekiga, fails with "uvcvideo: Failed to query ..." 585935 - Bug in RHEL-5.4/5.5 nfs_access_cache_shrinker 608156 - kernel panic if bonding initialization fails 618317 - RFE: RHEL5 Xen: support online dynamic resize of guest virtual disks 664653 - [5.4] OS cannot recognize DVD disk replace in rescue mode. 668027 - unexpected error message when sending a unsolicited NA from user code 668529 - Spare disk added to a raid1 array by mdadm command is dropped upon next boot. 674663 - vlapic: Fix possible guest tick losing after save/restore 681578 - CVE-2011-1083 kernel: excessive in kernel CPU consumption when creating large nested epoll structures 681902 - GFS2: Add readahead to sequential directory traversal 683372 - NFS4: Incorrect server behavior when using OPENcall with O_CREATE on a directory on which the process has no WRITE permissions. 688673 - PCI Virtual Function Passthrough - SR-IOV, Paravirt Guest fails to obtain IRQ after reboot 688791 - dropwatch> stop: Waiting for deactivation ack (forever) 691087 - Incorrect values in /proc/sys/vm/dirty_writeback_centises and dirty_expire_centisecs 694625 - Non-responsive scsi target leads to excessive scsi recovery and dm-mp failover time 697021 - Patch needed to allow MTU > 1500 on vif prior to connecting to bridge 698842 - kvmclock: MP-BIOS bug: 8254 timer not connected to IO-APIC 698928 - VLAN interface with changed MAC address fails to communicate 700565 - RHEL6.1 32bit xen hvm guest crash randomly 700752 - 32-bit PV guest crash on restore on x64_86 host 700886 - RHEL5.6 TSC used as default clock source on multi-chassis system 703150 - multiple resource leaks on error paths in blkfront and netfront 703505 - 300 seconds time shift in vdso version of clock_gettime() 704921 - panic in cifsd code after unexpected lookup error -88. 706339 - open/closed files in cifs mount points 707966 - 2.6.18-238.1.1.el5 or newer won't boot under Xen HVM due to linux-2.6-virt-nmi-don-t-print-nmi-stuck-messages-on-guests.patch 709271 - net.ipv6.conf.default.dad_transmits has no effect on tentative IPv6 addresses 709515 - Kernel panic at nfs4_callback_compound+0x2dd 711070 - mask the SMEP bit for PV, do the same or backport SMEP emulation for HVM 712439 - Backport "x86: extend debug key 't' to collect useful clock skew info" 712440 - Backport "vmx: Print advanced features during boot" 712441 - Backport "x86/hvm: fix off-by-one errors in vcpuid range checks" 713702 - pull missing fixes from upstream x86_emulate() 714053 - couple nice-to-have xen hypervisor patches 714670 - TCP_CRR and concurrent TCP stream tests over IPv6 sometime fails on rhel5.7 715501 - ext4: Don't error out the fs if the user tries to make a file too big 716834 - 'dmesg' command is swamped with the message: pci_set_power_state(): 0000:05:05.0: state=3, currentstate=5 717434 - Unable to attach a cdrom device to guest domain 717850 - miss xmit_hash_policy=layer2+3 in modinfo bonding output 718232 - [xfs] mis-sized O_DIRECT I/O results in hung task timeouts 718641 - Can't change lacp_rate in bonding mode=802.3ad 718988 - [EL5.7] igb: failed to activate WOL on 2nd LAN port on i350 720347 - RHEL 6.1 Xen paravirt guest is getting network outage during live migration (host side) 720551 - xfs_error_report() oops when passed-in mp is NULL 720936 - Windows guests may hang/BSOD on some AMD processors. 720986 - vlapic: backport EOI fast path 723755 - win2003 i386 guest BSOD when created with e1000 nic 728508 - Huge performance regression in NFS client 729261 - ext3/ext4 mbcache causes high CPU load 732752 - exclude VMX_PROCBASED_CTL2 from the MSRs a VMX guest is allowed to access 733416 - netfront MTU drops to 1500 after domain migration 734708 - xen modules - unable to handle kernel NULL pointer dereference 734900 - Panic, NMI Watchdog detected LOCKUP on CPU 6 735477 - nfs4_getfacl decoding causes kernel oops 740203 - Host crash when pass-through fails 740299 - [RTC] - The ioctl RTC_IRPQ_READ doesn't return the correct value 742880 - [RFE] backport Xen watchdog (hypervisor side only) 752626 - BNX2I: Fixed the endian on TTT for NOP out transmission 753729 - system cannot suspend with "stopping tasks timed out - bnx2i_thread/0 remaining" 771592 - Install RHEV-H to virtual machine cause VM kernel panic when boot 772578 - [ALL LANG] [anaconda] The installation halted when clicking 'Skip' button (select 'Skip entering Installation Number') 6. Package List: Red Hat Enterprise Linux Desktop (v. 5client): Source: i386: kernel-2.6.18-308.el5.i686.rpm kernel-PAE-2.6.18-308.el5.i686.rpm kernel-PAE-debuginfo-2.6.18-308.el5.i686.rpm kernel-PAE-devel-2.6.18-308.el5.i686.rpm kernel-debug-2.6.18-308.el5.i686.rpm kernel-debug-debuginfo-2.6.18-308.el5.i686.rpm kernel-debug-devel-2.6.18-308.el5.i686.rpm kernel-debuginfo-2.6.18-308.el5.i686.rpm kernel-debuginfo-common-2.6.18-308.el5.i686.rpm kernel-devel-2.6.18-308.el5.i686.rpm kernel-headers-2.6.18-308.el5.i386.rpm kernel-xen-2.6.18-308.el5.i686.rpm kernel-xen-debuginfo-2.6.18-308.el5.i686.rpm kernel-xen-devel-2.6.18-308.el5.i686.rpm noarch: kernel-doc-2.6.18-308.el5.noarch.rpm x86_64: kernel-2.6.18-308.el5.x86_64.rpm kernel-debug-2.6.18-308.el5.x86_64.rpm kernel-debug-debuginfo-2.6.18-308.el5.x86_64.rpm kernel-debug-devel-2.6.18-308.el5.x86_64.rpm kernel-debuginfo-2.6.18-308.el5.x86_64.rpm kernel-debuginfo-common-2.6.18-308.el5.x86_64.rpm kernel-devel-2.6.18-308.el5.x86_64.rpm kernel-headers-2.6.18-308.el5.x86_64.rpm kernel-xen-2.6.18-308.el5.x86_64.rpm kernel-xen-debuginfo-2.6.18-308.el5.x86_64.rpm kernel-xen-devel-2.6.18-308.el5.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: kernel-2.6.18-308.el5.i686.rpm kernel-PAE-2.6.18-308.el5.i686.rpm kernel-PAE-debuginfo-2.6.18-308.el5.i686.rpm kernel-PAE-devel-2.6.18-308.el5.i686.rpm kernel-debug-2.6.18-308.el5.i686.rpm kernel-debug-debuginfo-2.6.18-308.el5.i686.rpm kernel-debug-devel-2.6.18-308.el5.i686.rpm kernel-debuginfo-2.6.18-308.el5.i686.rpm kernel-debuginfo-common-2.6.18-308.el5.i686.rpm kernel-devel-2.6.18-308.el5.i686.rpm kernel-headers-2.6.18-308.el5.i386.rpm kernel-xen-2.6.18-308.el5.i686.rpm kernel-xen-debuginfo-2.6.18-308.el5.i686.rpm kernel-xen-devel-2.6.18-308.el5.i686.rpm ia64: kernel-2.6.18-308.el5.ia64.rpm kernel-debug-2.6.18-308.el5.ia64.rpm kernel-debug-debuginfo-2.6.18-308.el5.ia64.rpm kernel-debug-devel-2.6.18-308.el5.ia64.rpm kernel-debuginfo-2.6.18-308.el5.ia64.rpm kernel-debuginfo-common-2.6.18-308.el5.ia64.rpm kernel-devel-2.6.18-308.el5.ia64.rpm kernel-headers-2.6.18-308.el5.ia64.rpm kernel-xen-2.6.18-308.el5.ia64.rpm kernel-xen-debuginfo-2.6.18-308.el5.ia64.rpm kernel-xen-devel-2.6.18-308.el5.ia64.rpm noarch: kernel-doc-2.6.18-308.el5.noarch.rpm ppc: kernel-2.6.18-308.el5.ppc64.rpm kernel-debug-2.6.18-308.el5.ppc64.rpm kernel-debug-debuginfo-2.6.18-308.el5.ppc64.rpm kernel-debug-devel-2.6.18-308.el5.ppc64.rpm kernel-debuginfo-2.6.18-308.el5.ppc64.rpm kernel-debuginfo-common-2.6.18-308.el5.ppc64.rpm kernel-devel-2.6.18-308.el5.ppc64.rpm kernel-headers-2.6.18-308.el5.ppc.rpm kernel-headers-2.6.18-308.el5.ppc64.rpm kernel-kdump-2.6.18-308.el5.ppc64.rpm kernel-kdump-debuginfo-2.6.18-308.el5.ppc64.rpm kernel-kdump-devel-2.6.18-308.el5.ppc64.rpm s390x: kernel-2.6.18-308.el5.s390x.rpm kernel-debug-2.6.18-308.el5.s390x.rpm kernel-debug-debuginfo-2.6.18-308.el5.s390x.rpm kernel-debug-devel-2.6.18-308.el5.s390x.rpm kernel-debuginfo-2.6.18-308.el5.s390x.rpm kernel-debuginfo-common-2.6.18-308.el5.s390x.rpm kernel-devel-2.6.18-308.el5.s390x.rpm kernel-headers-2.6.18-308.el5.s390x.rpm kernel-kdump-2.6.18-308.el5.s390x.rpm kernel-kdump-debuginfo-2.6.18-308.el5.s390x.rpm kernel-kdump-devel-2.6.18-308.el5.s390x.rpm x86_64: kernel-2.6.18-308.el5.x86_64.rpm kernel-debug-2.6.18-308.el5.x86_64.rpm kernel-debug-debuginfo-2.6.18-308.el5.x86_64.rpm kernel-debug-devel-2.6.18-308.el5.x86_64.rpm kernel-debuginfo-2.6.18-308.el5.x86_64.rpm kernel-debuginfo-common-2.6.18-308.el5.x86_64.rpm kernel-devel-2.6.18-308.el5.x86_64.rpm kernel-headers-2.6.18-308.el5.x86_64.rpm kernel-xen-2.6.18-308.el5.x86_64.rpm kernel-xen-debuginfo-2.6.18-308.el5.x86_64.rpm kernel-xen-devel-2.6.18-308.el5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2011-1083 https://access.redhat.com/security/updates/classification#moderate https://access.redhat.com/search/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2012 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFPQyRGXlSAg2UNWIIRArL8AJ4p5o/4QRlcwsYv1Qg91KI+8qsrqwCeM1ks +b77f5VxTGHGM3BoAB80Ymc=wl+4 -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Feb 21, 2012
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!