Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
172

Ubuntu 20.10: USN-4467-3 Critical: QEMU Denial of Service Risk

USN-4467-1 introduced a regression in QEMU.. =========================================================================Ubuntu Security Notice USN-4467-3 February 22, 2021 qemu regression ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: USN-4467-1 introduced a regression in QEMU. Software Description: - qemu: Machine emulator and virtualizer Details: USN-4467-1 fixed vulnerabilities in QEMU. The fix for CVE-2020-13754 introduced a regression in certain environments. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Ren Ding, Hanqing Zhao, Alexander Bulekov, and Anatoly Trosinenko discovered that the QEMU incorrectly handled certain msi-x mmio operations. An attacker inside a guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2020-13754) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.10: qemu 1:5.0-5ubuntu9.6 qemu-system 1:5.0-5ubuntu9.6 qemu-system-arm 1:5.0-5ubuntu9.6 qemu-system-mips 1:5.0-5ubuntu9.6 qemu-system-misc 1:5.0-5ubuntu9.6 qemu-system-ppc 1:5.0-5ubuntu9.6 qemu-system-s390x 1:5.0-5ubuntu9.6 qemu-system-sparc 1:5.0-5ubuntu9.6 qemu-system-x86 1:5.0-5ubuntu9.6 qemu-system-x86-microvm 1:5.0-5ubuntu9.6 qemu-system-x86-xen 1:5.0-5ubuntu9.6 Ubuntu 20.04 LTS: qemu 1:4.2-3ubuntu6.14 qemu-system 1:4.2-3ubuntu6.14 qemu-system-arm 1:4.2-3ubuntu6.14 qemu-system-mips 1:4.2-3ubuntu6.14 qemu-system-misc 1:4.2-3ubuntu6.14 qemu-system-ppc 1:4.2-3ubuntu6.14 qemu-system-s390x 1:4.2-3ubuntu6.14 qemu-system-sparc 1:4.2-3ubuntu6.14 qemu-system-x86 1:4.2-3ubuntu6.14 qemu-system-x86-microvm 1:4.2-3ubuntu6.14 qemu-system-x86-xen 1:4.2-3ubuntu6.14 Ubuntu 18.04 LTS: qemu 1:2.11+dfsg-1ubuntu7.36 qemu-system 1:2.11+dfsg-1ubuntu7.36 qemu-system-arm 1:2.11+dfsg-1ubuntu7.36 qemu-system-mips 1:2.11+dfsg-1ubuntu7.36 qemu-system-misc 1:2.11+dfsg-1ubuntu7.36 qemu-system-ppc 1:2.11+dfsg-1ubuntu7.36 qemu-system-s390x 1:2.11+dfsg-1ubuntu7.36 qemu-system-sparc 1:2.11+dfsg-1ubuntu7.36 qemu-system-x86 1:2.11+dfsg-1ubuntu7.36 Ubuntu 16.04 LTS: qemu 1:2.5+dfsg-5ubuntu10.51 qemu-system 1:2.5+dfsg-5ubuntu10.51 qemu-system-aarch64 1:2.5+dfsg-5ubuntu10.51 qemu-system-arm 1:2.5+dfsg-5ubuntu10.51 qemu-system-mips 1:2.5+dfsg-5ubuntu10.51 qemu-system-misc 1:2.5+dfsg-5ubuntu10.51 qemu-system-ppc 1:2.5+dfsg-5ubuntu10.51 qemu-system-s390x 1:2.5+dfsg-5ubuntu10.51 qemu-system-sparc 1:2.5+dfsg-5ubuntu10.51 qemu-system-x86 1:2.5+dfsg-5ubuntu10.51 After a standard system update you need to restart all QEMU virtual machines to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4467-3 https://ubuntu.com/security/notices/USN-4467-1 https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1914883 Package Information: https://launchpad.net/ubuntu/+source/qemu/1:5.0-5ubuntu9.6 https://launchpad.net/ubuntu/+source/qemu/1:4.2-3ubuntu6.14 https://launchpad.net/ubuntu/+source/qemu/1:2.11+dfsg-1ubuntu7.36 https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.51 . A critical announcement for Ubuntu focusing on a fix for QEMU issues and vulnerabilities linked to Denial-of-Service attacks. Refer to the update guidelines.. QEMU Update, Ubuntu Security Notice, Regression Fixes, Denial of Service. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Feb 22, 2021 Critical Ubuntu
98

Red Hat 7.4: RHSA-2020:2214-01 Important: Kernel Security Issues

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2020:2214-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:2214 Issue date: 2020-05-19 CVE Names: CVE-2017-18595 CVE-2019-19768 CVE-2020-10711 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.4) - noarch, x86_64 Red Hat Enterprise Linux Server E4S (v. 7.4) - noarch, ppc64le, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.4) - x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.4) - ppc64le, x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.4) - x86_64 Red Hat Enterprise Linux Server TUS (v. 7.4) - noarch, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (CVE-2017-18595) * kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c (CVE-2019-19768) * Kernel:NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1758671 - CVE-2017-18595 kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c 1786164 - CVE-2019-19768 kernel: use-after-free in __blk_add_trace in kernel/trace/blktrace.c 1825116 - CVE-2020-10711 Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.4): Source: kernel-3.10.0-693.67.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.67.1.el7.noarch.rpm kernel-doc-3.10.0-693.67.1.el7.noarch.rpm x86_64: kernel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-headers-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.67.1.el7.x86_64.rpm perf-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server E4S (v.7.4): Source: kernel-3.10.0-693.67.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.67.1.el7.noarch.rpm kernel-doc-3.10.0-693.67.1.el7.noarch.rpm ppc64le: kernel-3.10.0-693.67.1.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debug-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-693.67.1.el7.ppc64le.rpm kernel-devel-3.10.0-693.67.1.el7.ppc64le.rpm kernel-headers-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-libs-3.10.0-693.67.1.el7.ppc64le.rpm perf-3.10.0-693.67.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm python-perf-3.10.0-693.67.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm x86_64: kernel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-headers-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.67.1.el7.x86_64.rpm perf-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server TUS (v.7.4): Source: kernel-3.10.0-693.67.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-693.67.1.el7.noarch.rpm kernel-doc-3.10.0-693.67.1.el7.noarch.rpm x86_64: kernel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-devel-3.10.0-693.67.1.el7.x86_64.rpm kernel-headers-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-693.67.1.el7.x86_64.rpm perf-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.4): x86_64: kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional E4S (v.7.4): ppc64le: kernel-debug-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debug-devel-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-693.67.1.el7.ppc64le.rpm perf-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.ppc64le.rpm x86_64: kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional TUS (v. 7.4): x86_64: kernel-debug-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-693.67.1.el7.x86_64.rpm perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-693.67.1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2017-18595 https://access.redhat.com/security/cve/CVE-2019-19768 https://access.redhat.com/security/cve/CVE-2020-10711 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXsPwQNzjgjWX9erEAQjrVA/8D9RdiE7wf6RAWKKV/I0HmKuXrGecJhbW dDSyURIXi3zPtUHqa7aa64geBTi/Sb3WhxNgKfbVOToMSC5yLkHYW4ecZirDHTmr F2SGSmzFq0GSPN6nPVNQJ4CkV3oaFfXGBmeX4jCA8kdnFpW3v2EZgo90ikGQYwIn QohESsrwZIKJsWyenapuymk5E6klLIOmVv+mihHsN1rZQIaItwbUBlfCM6HGjzv4 sfJDXwRMc8+22xdc9KlMkbRyOLqZ5TU9Xm5qENis+612OQ6wEYjyZnlDmnZEfWem U3krM03JzycNZXizYIq8vXYb9j+kZ6BbFV7SV700QZzDvKvIk7V3xwHU/aN0P9Da 2R3Fe7A+yK1wKBQCIgDKILmD+BH4WK4z+RKGTOSzFN7DEdCWAYDS2gyDNH4I+SSJ GTpKbwD89YRYZsFuaLJ+3Fmlay1B0zfri0TJuCxjC95Xr5fC6cQ5z/t2eShnY7JB /Vd1JGCBDQA0I+K/Gon+Bj2NScP5aXuTfwthAaMqj9bcKOhEhswRhsyXOb2rVddd qOBaJrkFnltvQQHl7JdaUWMoefkg3C4/qwCQKPOTUVpjFpLvaxmhmUGW8UCvkY8o HnjmV1VEpLPl67D7I5gnzGzuoZVXd576u1qisRwgs05/Pmm0j+f0JNr81D5DUinC gt3XbK7EqqA=vE0e -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Urgent kernel upgrade released for Red Hat Enterprise Linux addressing significant vulnerabilities that could pose risks.. Red Hat, kernel update, security advisory, Important update, Linux patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 May 19, 2020 Important Red Hat
87

Debian: DSA-3269-2 Critical: PostgreSQL-9.1 Restart Regression Issue

The update for postgresql-9.1 in DSA-3269-1 introduced a regression which can causes PostgreSQL to refuse to restart after an unexpected shutdown or when restoring from a binary backup. Updated packages are now available to address this regression. Please refer to the upstream . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3269-2 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Salvatore Bonaccorso May 31, 2015 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : postgresql-9.1 Debian Bug : 786874 The update for postgresql-9.1 in DSA-3269-1 introduced a regression which can causes PostgreSQL to refuse to restart after an unexpected shutdown or when restoring from a binary backup. Updated packages are now available to address this regression. Please refer to the upstream Bug FAQ for additional information: https://wiki.postgresql.org/wiki/May_2015_Fsync_Permissions_Bug For reference, the original advisory text follows. Several vulnerabilities have been found in PostgreSQL-9.1, a SQL database system. CVE-2015-3165 (Remote crash) SSL clients disconnecting just before the authentication timeout expires can cause the server to crash. CVE-2015-3166 (Information exposure) The replacement implementation of snprintf() failed to check for errors reported by the underlying system library calls; the main case that might be missed is out-of-memory situations. In the worst case this might lead to information exposure CVE-2015-3167 (Possible side-channel key exposure) In contrib/pgcrypto, some cases of decryption with an incorrect key could report other error message texts. Fix by using a one-size-fits-all message. For the oldstable distribution (wheezy), this problem has been fixed in version 9.1.16-0+deb7u2. We recommend that you upgrade your postgresql-9.1packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The recent Debian Security Notice DSA-3269-2 discusses an issue related to PostgreSQL-9.1 that affects the ability to properly reboot the system.. Debian Security Advisory, PostgreSQL Update, Regression Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 May 31, 2015 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200