Alerts This Week
Warning Icon 1 609
Alerts This Week
Warning Icon 1 609

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 44 Transmission 4.1.2 Important Clickjacking Fix CVE-2026-38978

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 libre 4.8.1 Critical Update Details for Real-Time Communication

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 NextCloud Update Denial of Service JSON Tampering 2026-30881a5be7

Calendar White Jun 05, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 44 python-starlette Security Fix for CVE-2026-48710

Calendar White Jun 05, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 perl-Cpanel-JSON-XS Moderate Denial of Service CVE-2026-9516

Calendar White Jun 05, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 rubygem-yard High Path Traversal Fix Vuln 2026-acefc1fe48

Calendar White Jun 05, 2026
high
Fedora Large Esm H800
Fedora

Fedora 44 Rust Sequoia Sop Low-Severity Fix Advisory 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 44 rust-sequoia-sq Low Threat Security Advisory 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Fedora Large Esm H900
Fedora

Fedora 44 rust-sequoia-wot Low Severity Security Fix 2026-5c5f4f40a4

Calendar White Jun 05, 2026
Low
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisoryfedoracritical

Fedora: 2005-680 Critical: NetworkManager Syslog Issue Resolved

Network Manager passes logging messages straight to syslog as the format string.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-680 2005-07-29 ---------------------------------------------------------------------Product : Fedora Core 4 Name : NetworkManager Version : 0.4 Release : 20.FC4.1 Summary : Network link manager and user applications Description : NetworkManager attempts to keep an active network connection available at all times. It is intended only for the desktop use-case, and is not intended for usage on servers. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is _intended_ to replace default routes, obtain IP addresses from a DHCP server, and change nameservers whenever it sees fit. ---------------------------------------------------------------------Update Information: Network Manager passes logging messages straight to syslog as the format string. This causes it to crash when connecting to access points that contain format string characters. This was reported initially by Ian Jackson: https://mail.gnome.org/archives/networkmanager-list/2005-July/msg00196.html ---------------------------------------------------------------------* Fri Jul 29 2005 Ray Strode - 0.4-20.FC4.1. - Don't pass log messages into syslog format string (bug 164683). * Mon Jul 11 2005 Dan Williams - 0.4-20.FC4 - Move pkgconfig file to devel package (#162316, thanks to Michael Schwendt) * Thu Jun 16 2005 Dan Williams - 0.4-19.FC4 - Update from FC4 CVS branch: o Backport of Wireless Scan Methods (replaces Pause Wireless Scanning function) o Backport of Robert Love's applet beautify patch ---------------------------------------------------------------------This update can be downloaded from: cee4ad206b7862ddcfa67b595bba0fb6 SRPMS/NetworkManager-0.4-20.FC4.1.src.rpm 7b56a9fb0cadbf27f9a3f837df15e9ac ppc/NetworkManager-0.4-20.FC4.1.ppc.rpm 4d6ba3451618d007b8f1c4e68c4a4801 ppc/NetworkManager-gnome-0.4-20.FC4.1.ppc.rpm 15cc4d6e22329da86a57cdb0ef5b763a ppc/NetworkManager-devel-0.4-20.FC4.1.ppc.rpm 9ef8616a0286c5fdf1ea2c1b4c843072 ppc/NetworkManager-glib-0.4-20.FC4.1.ppc.rpm 33e87748039909b9ed311215a359d54d ppc/debug/NetworkManager-debuginfo-0.4-20.FC4.1.ppc.rpm 7d53c521e3b98958f2d84b2cc59ec50a x86_64/NetworkManager-0.4-20.FC4.1.x86_64.rpm 64b708f0351d1d2197716492e8102c1d x86_64/NetworkManager-gnome-0.4-20.FC4.1.x86_64.rpm 40d96ba8b3497b68ce77a5197176109e x86_64/NetworkManager-devel-0.4-20.FC4.1.x86_64.rpm d3641a7dbd24786a26d45158db52fb17 x86_64/NetworkManager-glib-0.4-20.FC4.1.x86_64.rpm 445bf1cf0f8193d8afa6bc9658346b01 x86_64/debug/NetworkManager-debuginfo-0.4-20.FC4.1.x86_64.rpm 1b8c7c89548256509f24afcbdf379738 i386/NetworkManager-0.4-20.FC4.1.i386.rpm e3961dc98a6988e5cb5110a73f09f003 i386/NetworkManager-gnome-0.4-20.FC4.1.i386.rpm 239397dd3a1872e4a6277ee00c50cde3 i386/NetworkManager-devel-0.4-20.FC4.1.i386.rpm 3b0fb13e64da864f8cec81c9e6127dfa i386/NetworkManager-glib-0.4-20.FC4.1.i386.rpm 3aaae789b1a68be342b325bb15bd1eea i386/debug/NetworkManager-debuginfo-0.4-20.FC4.1.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora Core 4's NetworkManager enhancement addresses a troubling syslog crash related to the format strings used in log message generation.. NetworkManager Update,Fedora Core 4,Software Release. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 29, 2005 •Critical Fedora
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryred hatcritical

Red Hat 6.2: RHSA-2000:061-02 Critical: Klogd Exploit Warning

Various vulnerabilities exist in syslogd/klogd. By exploiting these vulnerabilities, it could be possible for local users to gain root access.. ` --------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: syslog format vulnerability in klogd Advisory ID: RHSA-2000:061-02 Issue date: 2000-09-18 Updated on: 2000-09-18 Product: Red Hat Linux Keywords: syslog format string klogd syslogd Cross references: N/A --------------------------------------------------------------------- 1. Topic: Various vulnerabilities exist in syslogd/klogd. By exploiting these vulnerabilities, it could be possible for local users to gain root access. No remote exploit exists at this time, but it remains theoretically possible that this vulnerability could be exploited remotely under certain rare circumstances. All users should upgrade to the new sysklogd packages. Users of Red Hat Linux 6.0 and 6.1 should use the packages for Red Hat Linux 6.2. 2. Relevant releases/architectures: Red Hat Linux 5.2 - i386, alpha, sparc Red Hat Linux 6.0 - i386, alpha, sparc Red Hat Linux 6.1 - i386, alpha, sparc Red Hat Linux 6.2 - i386, alpha, sparc 3. Problem description: klogd contains instances of the: syslog( LOG_INFO, buffer ); vulnerability that has been recently been discussed on Bugtraq and similar mailing lists; by supplying some string that contains '%' escapes, it is possible to have those escapes interpreted, which can lead to the ability to gain root access. Also, there are a couple of minor buffer overflow/termination problems that could allow local users to crash syslogd and cause bogus messages to be printed on the local system console. The updated sysklogd packages fix these vulnerabilities/issues. 4. Solution: For each RPM for your particular architecture, run: rpm -Fvh [filename] where filename is the name of the RPM. 5. Bug IDs fixed ( for more info): N/A 6. RPMs required: Red Hat Linux5.2: sparc: alpha: i386: sources: Red Hat Linux 6.2: sparc: i386: alpha: sources: 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- cd92613fc9a7409a90f6ff774e6e85d7 5.2/SRPMS/sysklogd-1.3.31-1.6.src.rpm c7c44b7a38f4518daecca77cf7d45ba8 5.2/alpha/sysklogd-1.3.31-1.6.alpha.rpm f100359030451c4be9b3bd99c3ec73a1 5.2/i386/sysklogd-1.3.31-1.6.i386.rpm 1c7f004ca29c966e0a03896f239d1317 5.2/sparc/sysklogd-1.3.31-1.6.sparc.rpm 69d50a8a9d490598fc11eef40fdf4552 6.2/SRPMS/sysklogd-1.3.31-17.src.rpm 2a7e2c7848d1f2d9607f3e6e3702cf2e 6.2/alpha/sysklogd-1.3.31-17.alpha.rpm 287d5022aa9d1a6ba9e03c51acc85229 6.2/i386/sysklogd-1.3.31-17.i386.rpm 150a05567dd4d626326028b1ac31f34d 6.2/sparc/sysklogd-1.3.31-17.sparc.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: Thanks go to Jouko Pynnonen, Solar Designer, and Daniel Jacobowitz for discovering the vulnerabilities and providing patches. Copyright(c) 2000 Red Hat, Inc. `. Critical Red Hat advisory highlights klogd vulnerabilities, allowing local root access. Recommend immediate updates.. klogd Flaw Red Hat Patch Security Issue. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 18, 2000 •Critical Red Hat
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here