Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -2 articles for you...
200

Scientific Linux: Errata 15-40-14 for sysreport Bug Fix

sysreport bug fix update. Date: Tue, 11 Dec 2007 15:40:14 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for sysreport on SL3,x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: sysreport bug fix update Issue date: 2007-12-10 This updated version of sysreport addresses an issue in which sysreport gathered stack traces from currently running proceses by default. This potentially-dangerous behavior has been made optional, requiring the "-sysrq" option to be passed to sysreport. SL 3.0.x SRPMS: sysreport-1.3.7.2-19.src.rpm i386: sysreport-1.3.7.2-19.noarch.rpm x86_64: sysreport-1.3.7.2-19.noarch.rpm -Connie Sieh -Troy Dawson . This patch for netcheck resolves an issue related to network diagnostics, improving protection protocols in Open Source Linux.. sysreport update, Scientific Linux security, software fix, bug correction, operating system update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 11, 2007 Important Scientific Linux
200

Scientific Linux 302-305: RHSA-2005:598-01 Low: sysreport Security Update

Low: sysreport security update. Date: Tue, 9 Aug 2005 17:19:23 -0500 Reply-To: Connie Sieh Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: ERRATA for SL 302,303,304,305 x86_64 now available Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. The following ERRATA for SL 302,303,304,305 x86_64 are now available from: Synopsis: Important: cups security update Advisory ID: RHSA-2005:706-01 CVE Names: CAN-2005-2097 cups-1.1.17-13.3.31.x86_64.rpm cups-devel-1.1.17-13.3.31.x86_64.rpm cups-libs-1.1.17-13.3.31.i386.rpm cups-libs-1.1.17-13.3.31.x86_64.rpm Synopsis: Low: sysreport security update Advisory ID: RHSA-2005:598-01 CVE Names: CAN-2005-2104 sysreport-1.3.7.2-9.noarch.rpm -Connie Sieh . Crucial patches released for Scientific Linux 302-305 that resolve sysreport and CUPS vulnerabilities.. sysreport update, cups security, Scientific Linux, security patch, software update. . Severity: Low. LinuxSecurity.com Team

Calendar 2 Aug 09, 2005 Low Scientific Linux
200

Scientific Linux 301-305: RHSA-2005:706-01 Important CUPS Update

Low: sysreport security update. Date: Tue, 9 Aug 2005 17:17:58 -0500 Reply-To: Connie Sieh Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: ERRATA for SL 301,302,303,304,305 i386 now available Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. The following ERRATA for SL 301,302,303,304,305 i386 are now available from: Synopsis: Important: cups security update Advisory ID: RHSA-2005:706-01 CVE Names: CAN-2005-2097 cups-1.1.17-13.3.31.i386.rpm cups-devel-1.1.17-13.3.31.i386.rpm cups-libs-1.1.17-13.3.31.i386.rpm Synopsis: Low: sysreport security update Advisory ID: RHSA-2005:598-01 CVE Names: CAN-2005-2104 sysreport-1.3.7.2-9.noarch.rpm -Connie Sieh . Key enhancements released for Scientific Linux versions 301-305 focusing on multiple security vulnerabilities and essential revisions.. sysreport update, cups security, scientific linux errata. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 09, 2005 Important Scientific Linux
98

Red Hat Enterprise Linux: RHSA-2005:598-01 Low: Sysreport Insecure File

An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team.. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Low: sysreport security update Advisory ID: RHSA-2005:598-01 Advisory URL: https://access.redhat.com/errata/RHSA-2005:598.html Issue date: 2005-08-09 Updated on: 2005-08-09 Product: Red Hat Enterprise Linux CVE Names: CAN-2005-2104 - ---------------------------------------------------------------------1. Summary: An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - noarch Red Hat Linux Advanced Workstation 2.1 - noarch Red Hat Enterprise Linux ES version 2.1 - noarch Red Hat Enterprise Linux WS version 2.1 - noarch Red Hat Enterprise Linux AS version 3 - noarch Red Hat Desktop version 3 - noarch Red Hat Enterprise Linux ES version 3 - noarch Red Hat Enterprise Linux WS version 3 - noarch Red Hat Enterprise Linux AS version 4 - noarch Red Hat Enterprise Linux Desktop version 4 - noarch Red Hat Enterprise Linux ES version 4 - noarch Red Hat Enterprise Linux WS version 4 - noarch 3. Problem description: Sysreport is a utility that gathers information about a system's hardware and configuration. The information can then be used for diagnostic purposes and debugging. Bill Stearns discovered a bug in the way sysreport creates temporary files. It is possible that a local attacker could obtain sensitive information about the system when sysreport is run. The Common Vulnerabilities and Exposures project assigned the name CAN-2005-2104 to this issue. Users of sysreport should update tothis erratum package, which contains a patch that resolves this issue. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed (http://bugzilla.redhat.com/): 162978 - CAN-2005-2104 sysreport insecure temporary directory usage 6. RPMs required: Red Hat Enterprise Linux AS (Advanced Server) version 2.1: SRPMS: 4558755e1cc511396658944e1053f6aa sysreport-1.3.7.0-7.src.rpm noarch: daf737b43a6d4f16404f5770611c65a3 sysreport-1.3.7.0-7.noarch.rpm Red Hat Linux Advanced Workstation 2.1: SRPMS: 4558755e1cc511396658944e1053f6aa sysreport-1.3.7.0-7.src.rpm noarch: daf737b43a6d4f16404f5770611c65a3 sysreport-1.3.7.0-7.noarch.rpm Red Hat Enterprise Linux ES version 2.1: SRPMS: 4558755e1cc511396658944e1053f6aa sysreport-1.3.7.0-7.src.rpm noarch: daf737b43a6d4f16404f5770611c65a3 sysreport-1.3.7.0-7.noarch.rpm Red Hat Enterprise Linux WS version 2.1: SRPMS: 4558755e1cc511396658944e1053f6aa sysreport-1.3.7.0-7.src.rpm noarch: daf737b43a6d4f16404f5770611c65a3 sysreport-1.3.7.0-7.noarch.rpm Red Hat Enterprise Linux AS version 3: SRPMS: 3f70a16e5d4f624b5be103e605c90173 sysreport-1.3.7.2-9.src.rpm noarch: 6f4d2d6c29e37480481c63f6926fe0bd sysreport-1.3.7.2-9.noarch.rpm Red Hat Desktop version 3: SRPMS: 3f70a16e5d4f624b5be103e605c90173 sysreport-1.3.7.2-9.src.rpm noarch: 6f4d2d6c29e37480481c63f6926fe0bd sysreport-1.3.7.2-9.noarch.rpm Red Hat Enterprise Linux ES version 3: SRPMS: 3f70a16e5d4f624b5be103e605c90173 sysreport-1.3.7.2-9.src.rpm noarch: 6f4d2d6c29e37480481c63f6926fe0bd sysreport-1.3.7.2-9.noarch.rpm Red Hat Enterprise Linux WS version3: SRPMS: 3f70a16e5d4f624b5be103e605c90173 sysreport-1.3.7.2-9.src.rpm noarch: 6f4d2d6c29e37480481c63f6926fe0bd sysreport-1.3.7.2-9.noarch.rpm Red Hat Enterprise Linux AS version 4: SRPMS: aa4ea7507b4bf5709f6b19b48cb70350 sysreport-1.3.15-5.src.rpm noarch: f7f12746b9e39765250b75ccca71a9b6 sysreport-1.3.15-5.noarch.rpm Red Hat Enterprise Linux Desktop version 4: SRPMS: aa4ea7507b4bf5709f6b19b48cb70350 sysreport-1.3.15-5.src.rpm noarch: f7f12746b9e39765250b75ccca71a9b6 sysreport-1.3.15-5.noarch.rpm Red Hat Enterprise Linux ES version 4: SRPMS: aa4ea7507b4bf5709f6b19b48cb70350 sysreport-1.3.15-5.src.rpm noarch: f7f12746b9e39765250b75ccca71a9b6 sysreport-1.3.15-5.noarch.rpm Red Hat Enterprise Linux WS version 4: SRPMS: aa4ea7507b4bf5709f6b19b48cb70350 sysreport-1.3.15-5.src.rpm noarch: f7f12746b9e39765250b75ccca71a9b6 sysreport-1.3.15-5.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CAN-2005-2104 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2005 Red Hat, Inc. . New version released for sysreport software addressing minor security vulnerability in Red Hat Linux, associated with advisory identifier RHSA-2005:598-02.. Red Hat Enterprise Linux Update, sysreport Security Fix. . Severity: Low. LinuxSecurity.com Team

Calendar 2 Aug 09, 2005 Low Red Hat
200

Scientific Linux: 2005-499-01 Moderate: Gedit, Gftp, And Sysreport Updates

Moderate: sysreport security update. Date: Tue, 14 Jun 2005 14:47:58 -0500 Reply-To: Connie Sieh Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: ERRATA for SL 302/303/304 x86_64 now available Comments: To: scientific , This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it. The following ERRATA for SL 302/303/304 x86_64 are now available from: Synopsis: Moderate: gedit security update Advisory ID: RHSA-2005:499-01 CVE Names: CAN-2005-1686 gedit-2.2.2-4.rhel3.x86_64.rpm Synopsis: Moderate: gftp security update Advisory ID: RHSA-2005:410-01 CVE Names: CAN-2005-0372 gftp-2.0.14-4.x86_64.rpm Synopsis: Low: gzip security update Advisory ID: RHSA-2005:357-01 CVE Names: CAN-2005-0758 CAN-2005-0988 CAN-2005-1228 gzip-1.3.3-12.rhel3.x86_64.rpm Synopsis: Low: mikmod security update Advisory ID: RHSA-2005:506-01 CVE Names: CAN-2003-0427 mikmod-3.1.6-22.EL3.i386.rpm mikmod-3.1.6-22.EL3.x86_64.rpm mikmod-devel-3.1.6-22.EL3.x86_64.rpm Synopsis: Moderate: sysreport security update Advisory ID: RHSA-2005:502-01 CVE Names: CAN-2005-1760 sysreport-1.3.7.2-6.noarch.rpm -Connie Sieh . Regular security patches for Scientific Linux software, covering sysreport, gedit, and gftp. Urgent updates are also provided.. scientific linux, security update, sysreport, gedit, gftp. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 14, 2005 Important Scientific Linux
200

Moderate Update for Sysreport: Scientific Linux Versions 301 to 304

Moderate: sysreport security update. Date: Tue, 14 Jun 2005 14:42:19 -0500 Reply-To: Connie Sieh Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: ERRATA for SL 301/302/303/304 i386 now available Comments: To: scientific , This email address is being protected from spambots. You need JavaScript enabled to view it., This email address is being protected from spambots. You need JavaScript enabled to view it. The following ERRATA for SL 301/302/303/304 i386 are now available from: Synopsis: Moderate: gedit security update Advisory ID: RHSA-2005:499-01 CVE Names: CAN-2005-1686 gedit-2.2.2-4.rhel3.i386.rpm Synopsis: Moderate: gftp security update Advisory ID: RHSA-2005:410-01 CVE Names: CAN-2005-0372 gftp-2.0.14-4.i386.rpm Synopsis: Low: gzip security update Advisory ID: RHSA-2005:357-01 CVE Names: CAN-2005-0758 CAN-2005-0988 CAN-2005-1228 gzip-1.3.3-12.rhel3.i386.rpm Synopsis: Low: mikmod security update Advisory ID: RHSA-2005:506-01 CVE Names: CAN-2003-0427 mikmod-3.1.6-22.EL3.i386.rpm mikmod-devel-3.1.6-22.EL3.i386.rpm Synopsis: Moderate: sysreport security update Advisory ID: RHSA-2005:502-01 CVE Names: CAN-2005-1760 sysreport-1.3.7.2-6.noarch.rpm -Connie Sieh . Critical patches released for Scientific Linux versions 301/302/303/304, enhancing sysreport and gedit functionalities. Immediate upgrades are advised.. Security Patch, Scientific Linux, Sysreport Update, Gedit Security Fix. . LinuxSecurity.com Team

Calendar 2 Jun 14, 2005 Scientific Linux
98

Red Hat 2.1 RHSA-2005:502-01 Moderate: Sysreport Information Leak Fix

An updated sysreport package that fixes an information disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Moderate: sysreport security update Advisory ID: RHSA-2005:502-01 Advisory URL: https://access.redhat.com/errata/RHSA-2005:502.html Issue date: 2005-06-13 Updated on: 2005-06-13 Product: Red Hat Enterprise Linux CVE Names: CAN-2005-1760 - ---------------------------------------------------------------------1. Summary: An updated sysreport package that fixes an information disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - noarch Red Hat Linux Advanced Workstation 2.1 - noarch Red Hat Enterprise Linux ES version 2.1 - noarch Red Hat Enterprise Linux WS version 2.1 - noarch Red Hat Enterprise Linux AS version 3 - noarch Red Hat Desktop version 3 - noarch Red Hat Enterprise Linux ES version 3 - noarch Red Hat Enterprise Linux WS version 3 - noarch Red Hat Enterprise Linux AS version 4 - noarch Red Hat Enterprise Linux Desktop version 4 - noarch Red Hat Enterprise Linux ES version 4 - noarch Red Hat Enterprise Linux WS version 4 - noarch 3. Problem description: Sysreport is a utility that gathers information about a system's hardware and configuration. The information can then be used for diagnostic purposes and debugging. When run by the root user, sysreport includes the contents of the /etc/sysconfig/rhn/up2date configuration file. If up2date has been configured to connect to a proxy server that requires an authentication password, that password is included in plain text in the system report. The Common Vulnerabilitiesand Exposures project assigned the name CAN-2005-1760 to this issue. Users of sysreport should update to this erratum package, which contains a patch that removes any proxy authentication passwords. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed (http://bugzilla.redhat.com/): 159502 - CAN-2005-1760 sysreport includes proxy password in cleartext 6. RPMs required: Red Hat Enterprise Linux AS (Advanced Server) version 2.1: SRPMS: ee0162efdf945753f3870eabbd6f2ace sysreport-1.3.7.0-4.src.rpm noarch: 877c7a9ce70dc7f83852485666cd7b81 sysreport-1.3.7.0-4.noarch.rpm Red Hat Linux Advanced Workstation 2.1: SRPMS: ee0162efdf945753f3870eabbd6f2ace sysreport-1.3.7.0-4.src.rpm noarch: 877c7a9ce70dc7f83852485666cd7b81 sysreport-1.3.7.0-4.noarch.rpm Red Hat Enterprise Linux ES version 2.1: SRPMS: ee0162efdf945753f3870eabbd6f2ace sysreport-1.3.7.0-4.src.rpm noarch: 877c7a9ce70dc7f83852485666cd7b81 sysreport-1.3.7.0-4.noarch.rpm Red Hat Enterprise Linux WS version 2.1: SRPMS: ee0162efdf945753f3870eabbd6f2ace sysreport-1.3.7.0-4.src.rpm noarch: 877c7a9ce70dc7f83852485666cd7b81 sysreport-1.3.7.0-4.noarch.rpm Red Hat Enterprise Linux AS version 3: SRPMS: 3d862802529be0c1751719fcc0769460 sysreport-1.3.7.2-6.src.rpm noarch: cb23bfbecf4a03066410253fed765549 sysreport-1.3.7.2-6.noarch.rpm Red Hat Desktop version 3: SRPMS: 3d862802529be0c1751719fcc0769460 sysreport-1.3.7.2-6.src.rpm noarch: cb23bfbecf4a03066410253fed765549 sysreport-1.3.7.2-6.noarch.rpm Red Hat Enterprise Linux ES version 3: SRPMS: 3d862802529be0c1751719fcc0769460 sysreport-1.3.7.2-6.src.rpm noarch: cb23bfbecf4a03066410253fed765549 sysreport-1.3.7.2-6.noarch.rpm Red Hat Enterprise Linux WS version 3: SRPMS: 3d862802529be0c1751719fcc0769460 sysreport-1.3.7.2-6.src.rpm noarch: cb23bfbecf4a03066410253fed765549 sysreport-1.3.7.2-6.noarch.rpm Red Hat Enterprise Linux AS version 4: SRPMS: 776bab105ff07f51652caab88d1d6597 sysreport-1.3.15-2.src.rpm noarch: ec397dff4766feb681352573cb105db8 sysreport-1.3.15-2.noarch.rpm Red Hat Enterprise Linux Desktop version 4: SRPMS: 776bab105ff07f51652caab88d1d6597 sysreport-1.3.15-2.src.rpm noarch: ec397dff4766feb681352573cb105db8 sysreport-1.3.15-2.noarch.rpm Red Hat Enterprise Linux ES version 4: SRPMS: 776bab105ff07f51652caab88d1d6597 sysreport-1.3.15-2.src.rpm noarch: ec397dff4766feb681352573cb105db8 sysreport-1.3.15-2.noarch.rpm Red Hat Enterprise Linux WS version 4: SRPMS: 776bab105ff07f51652caab88d1d6597 sysreport-1.3.15-2.src.rpm noarch: ec397dff4766feb681352573cb105db8 sysreport-1.3.15-2.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CAN-2005-1760 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2005 Red Hat, Inc. . Ubuntu Security Notification alerts users of potential data exposure through the sysstatus tool, stressing the need for prompt software updates to safeguard systems.. Red Hat Security, Sysreport Patch, Security Update, Information Leak, Update Advisory. . LinuxSecurity.com Team

Calendar 2 Jun 13, 2005 Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here