Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
172

Ubuntu 21.04 USN-4913-2 Critical: Underscore Code Injection Issue

Underscore could be made to inject arbitrary code if it received a specially crafted input.. =========================================================================Ubuntu Security Notice USN-4913-2 April 28, 2021 underscore vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.04 Summary: Underscore could be made to inject arbitrary code if it received a specially crafted input. Software Description: - underscore: Javascript’s functional programming helper library Details: USN-4913-1 fixed vulnerabilities in Underscore. This update provides the corresponding updates for Ubuntu 21.04. Original advisory details: It was discovered that Underscore incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.04: libjs-underscore 1.9.1~dfsg-1ubuntu0.21.04.1 node-underscore 1.9.1~dfsg-1ubuntu0.21.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4913-2 https://ubuntu.com/security/notices/USN-4913-1 CVE-2021-23358 Package Information: https://launchpad.net/ubuntu/+source/underscore/1.9.1~dfsg-1ubuntu0.21.04.1 . The recent Underscore patch rectifies a significant security vulnerability in Ubuntu 21.04, providing comprehensive guidance on necessary remediation steps.. Underscore Code Injection, Ubuntu 21.04 Update, Security Advisory, Arbitrary Code Execution. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 28, 2021 Critical Ubuntu
172

Ubuntu 20.10-20.04 LTS USN-4913-1 Moderate: Underscore Code Injection

Underscore could be made to inject arbitrary code if it received a specially crafted input.. =========================================================================Ubuntu Security Notice USN-4913-1 April 14, 2021 underscore vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 ESM Summary: Underscore could be made to inject arbitrary code if it received a specially crafted input. Software Description: - underscore: None Details: It was discovered that Underscore incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.10: libjs-underscore 1.9.1~dfsg-1ubuntu0.20.10.1 node-underscore 1.9.1~dfsg-1ubuntu0.20.10.1 Ubuntu 20.04 LTS: libjs-underscore 1.9.1~dfsg-1ubuntu0.20.04.1 node-underscore 1.9.1~dfsg-1ubuntu0.20.04.1 Ubuntu 18.04 LTS: libjs-underscore 1.8.3~dfsg-1ubuntu0.1 node-underscore 1.8.3~dfsg-1ubuntu0.1 Ubuntu 16.04 LTS: libjs-underscore 1.7.0~dfsg-1ubuntu1.1 node-underscore 1.7.0~dfsg-1ubuntu1.1 Ubuntu 14.04 ESM: libjs-underscore 1.4.4-2ubuntu1+esm1 node-underscore 1.4.4-2ubuntu1+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4913-1 CVE-2021-23358 Package Information: https://launchpad.net/ubuntu/+source/underscore/1.9.1~dfsg-1ubuntu0.20.10.1 https://launchpad.net/ubuntu/+source/underscore/1.9.1~dfsg-1ubuntu0.20.04.1 https://launchpad.net/ubuntu/+source/underscore/1.8.3~dfsg-1ubuntu0.1 https://launchpad.net/ubuntu/+source/underscore/1.7.0~dfsg-1ubuntu1.1 . Potentialsecurity vulnerability detected in underscore package across various Ubuntu versions. Follow the outlined steps for patching.. Code Injection Risk, Ubuntu Security Updates, Underscore Vulnerability. . LinuxSecurity.com Team

Calendar%202 Apr 14, 2021 Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200