Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
91

Gentoo: GLSA-202105-27 Normal: MySQL Multiple Risks of Code Execution

Multiple vulnerabilities have been found in MySQL, the worst of which could result in the arbitrary execution of code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202105-27 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: MySQL: Multiple vulnerabilities Date: May 26, 2021 Bugs: #699876, #708090, #717628, #732974, #766339, #789243 ID: 202105-27 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in MySQL, the worst of which could result in the arbitrary execution of code. Background ========= MySQL is a popular multi-threaded, multi-user SQL server. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-db/mysql < 8.0.24 > = 5.7.34:5.7 > = 8.0.24 2 dev-db/mysql-connector-c < 8.0.24 > = 8.0.24 ------------------------------------------------------------------- 2 affected packages Description ========== Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details. Impact ===== An attacker could possibly execute arbitrary code with the privileges of the process, escalate privileges, gain access to critical data or complete access to all MySQL server accessible data, or cause a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All MySQL usersshould upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-db/mysql-5.7.34" All mysql users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-db/mysql-8.0.24" References ========= [ 1 ] CVE-2019-2938 https://nvd.nist.gov/vuln/detail/CVE-2019-2938 [ 2 ] CVE-2019-2974 https://nvd.nist.gov/vuln/detail/CVE-2019-2974 [ 3 ] CVE-2020-14539 https://nvd.nist.gov/vuln/detail/CVE-2020-14539 [ 4 ] CVE-2020-14540 https://nvd.nist.gov/vuln/detail/CVE-2020-14540 [ 5 ] CVE-2020-14547 https://nvd.nist.gov/vuln/detail/CVE-2020-14547 [ 6 ] CVE-2020-14550 https://nvd.nist.gov/vuln/detail/CVE-2020-14550 [ 7 ] CVE-2020-14553 https://nvd.nist.gov/vuln/detail/CVE-2020-14553 [ 8 ] CVE-2020-14559 https://nvd.nist.gov/vuln/detail/CVE-2020-14559 [ 9 ] CVE-2020-14564 https://nvd.nist.gov/vuln/detail/CVE-2020-14564 [ 10 ] CVE-2020-14567 https://nvd.nist.gov/vuln/detail/CVE-2020-14567 [ 11 ] CVE-2020-14568 https://nvd.nist.gov/vuln/detail/CVE-2020-14568 [ 12 ] CVE-2020-14575 https://nvd.nist.gov/vuln/detail/CVE-2020-14575 [ 13 ] CVE-2020-14576 https://nvd.nist.gov/vuln/detail/CVE-2020-14576 [ 14 ] CVE-2020-14586 https://nvd.nist.gov/vuln/detail/CVE-2020-14586 [ 15 ] CVE-2020-14591 https://nvd.nist.gov/vuln/detail/CVE-2020-14591 [ 16 ] CVE-2020-14597 https://nvd.nist.gov/vuln/detail/CVE-2020-14597 [ 17 ] CVE-2020-14614 https://nvd.nist.gov/vuln/detail/CVE-2020-14614 [ 18 ] CVE-2020-14619 https://nvd.nist.gov/vuln/detail/CVE-2020-14619 [ 19 ] CVE-2020-14620 https://nvd.nist.gov/vuln/detail/CVE-2020-14620 [ 20 ] CVE-2020-14623 https://nvd.nist.gov/vuln/detail/CVE-2020-14623 [ 21 ] CVE-2020-14624 https://nvd.nist.gov/vuln/detail/CVE-2020-14624 [ 22 ] CVE-2020-14626 https://nvd.nist.gov/vuln/detail/CVE-2020-14626 [ 23 ]CVE-2020-14631 https://nvd.nist.gov/vuln/detail/CVE-2020-14631 [ 24 ] CVE-2020-14632 https://nvd.nist.gov/vuln/detail/CVE-2020-14632 [ 25 ] CVE-2020-14633 https://nvd.nist.gov/vuln/detail/CVE-2020-14633 [ 26 ] CVE-2020-14634 https://nvd.nist.gov/vuln/detail/CVE-2020-14634 [ 27 ] CVE-2020-14641 https://nvd.nist.gov/vuln/detail/CVE-2020-14641 [ 28 ] CVE-2020-14643 https://nvd.nist.gov/vuln/detail/CVE-2020-14643 [ 29 ] CVE-2020-14651 https://nvd.nist.gov/vuln/detail/CVE-2020-14651 [ 30 ] CVE-2020-14654 https://nvd.nist.gov/vuln/detail/CVE-2020-14654 [ 31 ] CVE-2020-14656 https://nvd.nist.gov/vuln/detail/CVE-2020-14656 [ 32 ] CVE-2020-14663 https://nvd.nist.gov/vuln/detail/CVE-2020-14663 [ 33 ] CVE-2020-14672 https://nvd.nist.gov/vuln/detail/CVE-2020-14672 [ 34 ] CVE-2020-14678 https://nvd.nist.gov/vuln/detail/CVE-2020-14678 [ 35 ] CVE-2020-14680 https://nvd.nist.gov/vuln/detail/CVE-2020-14680 [ 36 ] CVE-2020-14697 https://nvd.nist.gov/vuln/detail/CVE-2020-14697 [ 37 ] CVE-2020-14702 https://nvd.nist.gov/vuln/detail/CVE-2020-14702 [ 38 ] CVE-2020-14725 https://nvd.nist.gov/vuln/detail/CVE-2020-14725 [ 39 ] CVE-2020-14760 https://nvd.nist.gov/vuln/detail/CVE-2020-14760 [ 40 ] CVE-2020-14765 https://nvd.nist.gov/vuln/detail/CVE-2020-14765 [ 41 ] CVE-2020-14769 https://nvd.nist.gov/vuln/detail/CVE-2020-14769 [ 42 ] CVE-2020-14771 https://nvd.nist.gov/vuln/detail/CVE-2020-14771 [ 43 ] CVE-2020-14773 https://nvd.nist.gov/vuln/detail/CVE-2020-14773 [ 44 ] CVE-2020-14775 https://nvd.nist.gov/vuln/detail/CVE-2020-14775 [ 45 ] CVE-2020-14776 https://nvd.nist.gov/vuln/detail/CVE-2020-14776 [ 46 ] CVE-2020-14777 https://nvd.nist.gov/vuln/detail/CVE-2020-14777 [ 47 ] CVE-2020-14785 https://nvd.nist.gov/vuln/detail/CVE-2020-14785 [ 48 ] CVE-2020-14786 https://nvd.nist.gov/vuln/detail/CVE-2020-14786 [ 49 ] CVE-2020-14789 https://nvd.nist.gov/vuln/detail/CVE-2020-14789 [ 50 ] CVE-2020-14790 https://nvd.nist.gov/vuln/detail/CVE-2020-14790 [ 51 ] CVE-2020-14791 https://nvd.nist.gov/vuln/detail/CVE-2020-14791 [ 52 ] CVE-2020-14793 https://nvd.nist.gov/vuln/detail/CVE-2020-14793 [ 53 ] CVE-2020-14794 https://nvd.nist.gov/vuln/detail/CVE-2020-14794 [ 54 ] CVE-2020-14799 https://nvd.nist.gov/vuln/detail/CVE-2020-14799 [ 55 ] CVE-2020-14800 https://nvd.nist.gov/vuln/detail/CVE-2020-14800 [ 56 ] CVE-2020-14804 https://nvd.nist.gov/vuln/detail/CVE-2020-14804 [ 57 ] CVE-2020-14809 https://nvd.nist.gov/vuln/detail/CVE-2020-14809 [ 58 ] CVE-2020-14812 https://nvd.nist.gov/vuln/detail/CVE-2020-14812 [ 59 ] CVE-2020-14814 https://nvd.nist.gov/vuln/detail/CVE-2020-14814 [ 60 ] CVE-2020-14821 https://nvd.nist.gov/vuln/detail/CVE-2020-14821 [ 61 ] CVE-2020-14827 https://nvd.nist.gov/vuln/detail/CVE-2020-14827 [ 62 ] CVE-2020-14828 https://nvd.nist.gov/vuln/detail/CVE-2020-14828 [ 63 ] CVE-2020-14829 https://nvd.nist.gov/vuln/detail/CVE-2020-14829 [ 64 ] CVE-2020-14830 https://nvd.nist.gov/vuln/detail/CVE-2020-14830 [ 65 ] CVE-2020-14836 https://nvd.nist.gov/vuln/detail/CVE-2020-14836 [ 66 ] CVE-2020-14837 https://nvd.nist.gov/vuln/detail/CVE-2020-14837 [ 67 ] CVE-2020-14838 https://nvd.nist.gov/vuln/detail/CVE-2020-14838 [ 68 ] CVE-2020-14839 https://nvd.nist.gov/vuln/detail/CVE-2020-14839 [ 69 ] CVE-2020-14844 https://nvd.nist.gov/vuln/detail/CVE-2020-14844 [ 70 ] CVE-2020-14845 https://nvd.nist.gov/vuln/detail/CVE-2020-14845 [ 71 ] CVE-2020-14846 https://nvd.nist.gov/vuln/detail/CVE-2020-14846 [ 72 ] CVE-2020-14848 https://nvd.nist.gov/vuln/detail/CVE-2020-14848 [ 73 ] CVE-2020-14852 https://nvd.nist.gov/vuln/detail/CVE-2020-14852 [ 74 ] CVE-2020-14853 https://nvd.nist.gov/vuln/detail/CVE-2020-14853 [ 75 ] CVE-2020-14860 https://nvd.nist.gov/vuln/detail/CVE-2020-14860 [ 76 ] CVE-2020-14861 https://nvd.nist.gov/vuln/detail/CVE-2020-14861 [ 77 ] CVE-2020-14866 https://nvd.nist.gov/vuln/detail/CVE-2020-14866 [ 78 ] CVE-2020-14867 https://nvd.nist.gov/vuln/detail/CVE-2020-14867 [ 79 ] CVE-2020-14868 https://nvd.nist.gov/vuln/detail/CVE-2020-14868 [ 80 ] CVE-2020-14869 https://nvd.nist.gov/vuln/detail/CVE-2020-14869 [ 81 ] CVE-2020-14870 https://nvd.nist.gov/vuln/detail/CVE-2020-14870 [ 82 ] CVE-2020-14873 https://nvd.nist.gov/vuln/detail/CVE-2020-14873 [ 83 ] CVE-2020-14878 https://nvd.nist.gov/vuln/detail/CVE-2020-14878 [ 84 ] CVE-2020-14888 https://nvd.nist.gov/vuln/detail/CVE-2020-14888 [ 85 ] CVE-2020-14891 https://nvd.nist.gov/vuln/detail/CVE-2020-14891 [ 86 ] CVE-2020-14893 https://nvd.nist.gov/vuln/detail/CVE-2020-14893 [ 87 ] CVE-2020-2570 https://nvd.nist.gov/vuln/detail/CVE-2020-2570 [ 88 ] CVE-2020-2572 https://nvd.nist.gov/vuln/detail/CVE-2020-2572 [ 89 ] CVE-2020-2573 https://nvd.nist.gov/vuln/detail/CVE-2020-2573 [ 90 ] CVE-2020-2574 https://nvd.nist.gov/vuln/detail/CVE-2020-2574 [ 91 ] CVE-2020-2577 https://nvd.nist.gov/vuln/detail/CVE-2020-2577 [ 92 ] CVE-2020-2579 https://nvd.nist.gov/vuln/detail/CVE-2020-2579 [ 93 ] CVE-2020-2580 https://nvd.nist.gov/vuln/detail/CVE-2020-2580 [ 94 ] CVE-2020-2584 https://nvd.nist.gov/vuln/detail/CVE-2020-2584 [ 95 ] CVE-2020-2588 https://nvd.nist.gov/vuln/detail/CVE-2020-2588 [ 96 ] CVE-2020-2589 https://nvd.nist.gov/vuln/detail/CVE-2020-2589 [ 97 ] CVE-2020-2627 https://nvd.nist.gov/vuln/detail/CVE-2020-2627 [ 98 ] CVE-2020-2660 https://nvd.nist.gov/vuln/detail/CVE-2020-2660 [ 99 ] CVE-2020-2679 https://nvd.nist.gov/vuln/detail/CVE-2020-2679 [ 100 ] CVE-2020-2686 https://nvd.nist.gov/vuln/detail/CVE-2020-2686 [ 101 ] CVE-2020-2694 https://nvd.nist.gov/vuln/detail/CVE-2020-2694 [ 102 ] CVE-2020-2752 https://nvd.nist.gov/vuln/detail/CVE-2020-2752 [ 103 ] CVE-2020-2759 https://nvd.nist.gov/vuln/detail/CVE-2020-2759 [ 104 ] CVE-2020-2760 https://nvd.nist.gov/vuln/detail/CVE-2020-2760 [ 105 ] CVE-2020-2761 https://nvd.nist.gov/vuln/detail/CVE-2020-2761 [ 106 ] CVE-2020-2762 https://nvd.nist.gov/vuln/detail/CVE-2020-2762 [ 107 ] CVE-2020-2763 https://nvd.nist.gov/vuln/detail/CVE-2020-2763 [ 108 ] CVE-2020-2765 https://nvd.nist.gov/vuln/detail/CVE-2020-2765 [ 109 ] CVE-2020-2768 https://nvd.nist.gov/vuln/detail/CVE-2020-2768 [ 110 ] CVE-2020-2770 https://nvd.nist.gov/vuln/detail/CVE-2020-2770 [ 111 ] CVE-2020-2774 https://nvd.nist.gov/vuln/detail/CVE-2020-2774 [ 112 ] CVE-2020-2779 https://nvd.nist.gov/vuln/detail/CVE-2020-2779 [ 113 ] CVE-2020-2780 https://nvd.nist.gov/vuln/detail/CVE-2020-2780 [ 114 ] CVE-2020-2790 https://nvd.nist.gov/vuln/detail/CVE-2020-2790 [ 115 ] CVE-2020-2804 https://nvd.nist.gov/vuln/detail/CVE-2020-2804 [ 116 ] CVE-2020-2806 https://nvd.nist.gov/vuln/detail/CVE-2020-2806 [ 117 ] CVE-2020-2812 https://nvd.nist.gov/vuln/detail/CVE-2020-2812 [ 118 ] CVE-2020-2814 https://nvd.nist.gov/vuln/detail/CVE-2020-2814 [ 119 ] CVE-2020-2853 https://nvd.nist.gov/vuln/detail/CVE-2020-2853 [ 120 ] CVE-2020-2875 https://nvd.nist.gov/vuln/detail/CVE-2020-2875 [ 121 ] CVE-2020-2892 https://nvd.nist.gov/vuln/detail/CVE-2020-2892 [ 122 ] CVE-2020-2893 https://nvd.nist.gov/vuln/detail/CVE-2020-2893 [ 123 ] CVE-2020-2895 https://nvd.nist.gov/vuln/detail/CVE-2020-2895 [ 124 ] CVE-2020-2896 https://nvd.nist.gov/vuln/detail/CVE-2020-2896 [ 125 ] CVE-2020-2897 https://nvd.nist.gov/vuln/detail/CVE-2020-2897 [ 126 ] CVE-2020-2898 https://nvd.nist.gov/vuln/detail/CVE-2020-2898 [ 127 ] CVE-2020-2901 https://nvd.nist.gov/vuln/detail/CVE-2020-2901 [ 128 ] CVE-2020-2903 https://nvd.nist.gov/vuln/detail/CVE-2020-2903 [ 129 ] CVE-2020-2904 https://nvd.nist.gov/vuln/detail/CVE-2020-2904 [ 130 ] CVE-2020-2921 https://nvd.nist.gov/vuln/detail/CVE-2020-2921 [ 131 ] CVE-2020-2922 https://nvd.nist.gov/vuln/detail/CVE-2020-2922 [ 132 ] CVE-2020-2923 https://nvd.nist.gov/vuln/detail/CVE-2020-2923 [ 133 ] CVE-2020-2924 https://nvd.nist.gov/vuln/detail/CVE-2020-2924 [ 134 ] CVE-2020-2925 https://nvd.nist.gov/vuln/detail/CVE-2020-2925 [ 135 ] CVE-2020-2926 https://nvd.nist.gov/vuln/detail/CVE-2020-2926 [ 136 ] CVE-2020-2928 https://nvd.nist.gov/vuln/detail/CVE-2020-2928 [ 137 ] CVE-2020-2930 https://nvd.nist.gov/vuln/detail/CVE-2020-2930 [ 138 ] CVE-2020-2933 https://nvd.nist.gov/vuln/detail/CVE-2020-2933 [ 139 ] CVE-2020-2934 https://nvd.nist.gov/vuln/detail/CVE-2020-2934 [ 140 ] CVE-2021-1998 https://nvd.nist.gov/vuln/detail/CVE-2021-1998 [ 141 ] CVE-2021-2001 https://nvd.nist.gov/vuln/detail/CVE-2021-2001 [ 142 ] CVE-2021-2002 https://nvd.nist.gov/vuln/detail/CVE-2021-2002 [ 143 ] CVE-2021-2006 https://nvd.nist.gov/vuln/detail/CVE-2021-2006 [ 144 ] CVE-2021-2007 https://nvd.nist.gov/vuln/detail/CVE-2021-2007 [ 145 ] CVE-2021-2009 https://nvd.nist.gov/vuln/detail/CVE-2021-2009 [ 146 ] CVE-2021-2010 https://nvd.nist.gov/vuln/detail/CVE-2021-2010 [ 147 ] CVE-2021-2011 https://nvd.nist.gov/vuln/detail/CVE-2021-2011 [ 148 ] CVE-2021-2012 https://nvd.nist.gov/vuln/detail/CVE-2021-2012 [ 149 ] CVE-2021-2014 https://nvd.nist.gov/vuln/detail/CVE-2021-2014 [ 150 ] CVE-2021-2016 https://nvd.nist.gov/vuln/detail/CVE-2021-2016 [ 151 ] CVE-2021-2019 https://nvd.nist.gov/vuln/detail/CVE-2021-2019 [ 152 ] CVE-2021-2020 https://nvd.nist.gov/vuln/detail/CVE-2021-2020 [ 153 ] CVE-2021-2021 https://nvd.nist.gov/vuln/detail/CVE-2021-2021 [ 154 ] CVE-2021-2022 https://nvd.nist.gov/vuln/detail/CVE-2021-2022 [ 155 ] CVE-2021-2024 https://nvd.nist.gov/vuln/detail/CVE-2021-2024 [ 156 ] CVE-2021-2028 https://nvd.nist.gov/vuln/detail/CVE-2021-2028 [ 157 ] CVE-2021-2030 https://nvd.nist.gov/vuln/detail/CVE-2021-2030 [ 158 ] CVE-2021-2031 https://nvd.nist.gov/vuln/detail/CVE-2021-2031 [ 159 ] CVE-2021-2032 https://nvd.nist.gov/vuln/detail/CVE-2021-2032 [ 160 ] CVE-2021-2036 https://nvd.nist.gov/vuln/detail/CVE-2021-2036 [ 161 ] CVE-2021-2038 https://nvd.nist.gov/vuln/detail/CVE-2021-2038 [ 162 ] CVE-2021-2042 https://nvd.nist.gov/vuln/detail/CVE-2021-2042 [ 163 ] CVE-2021-2046 https://nvd.nist.gov/vuln/detail/CVE-2021-2046 [ 164 ] CVE-2021-2048 https://nvd.nist.gov/vuln/detail/CVE-2021-2048 [ 165 ] CVE-2021-2055 https://nvd.nist.gov/vuln/detail/CVE-2021-2055 [ 166 ] CVE-2021-2056 https://nvd.nist.gov/vuln/detail/CVE-2021-2056 [ 167 ] CVE-2021-2058 https://nvd.nist.gov/vuln/detail/CVE-2021-2058 [ 168 ] CVE-2021-2060 https://nvd.nist.gov/vuln/detail/CVE-2021-2060 [ 169 ] CVE-2021-2061 https://nvd.nist.gov/vuln/detail/CVE-2021-2061 [ 170 ] CVE-2021-2065 https://nvd.nist.gov/vuln/detail/CVE-2021-2065 [ 171 ] CVE-2021-2070 https://nvd.nist.gov/vuln/detail/CVE-2021-2070 [ 172 ] CVE-2021-2072 https://nvd.nist.gov/vuln/detail/CVE-2021-2072 [ 173 ] CVE-2021-2076 https://nvd.nist.gov/vuln/detail/CVE-2021-2076 [ 174 ] CVE-2021-2081 https://nvd.nist.gov/vuln/detail/CVE-2021-2081 [ 175 ] CVE-2021-2087 https://nvd.nist.gov/vuln/detail/CVE-2021-2087 [ 176 ] CVE-2021-2088 https://nvd.nist.gov/vuln/detail/CVE-2021-2088 [ 177 ] CVE-2021-2122 https://nvd.nist.gov/vuln/detail/CVE-2021-2122 [ 178 ] CVE-2021-2154 https://nvd.nist.gov/vuln/detail/CVE-2021-2154 [ 179 ] CVE-2021-2166 https://nvd.nist.gov/vuln/detail/CVE-2021-2166 [ 180 ] CVE-2021-2180 https://nvd.nist.gov/vuln/detail/CVE-2021-2180 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202105-27 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2021 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . A recent security bulletin underscores numerous MySQL flaws within Gentoo, posing potential risks for remote execution. Immediate upgrade recommended.. MySQL Security Advisory, Code Execution Risks, Gentoo Vulnerabilities. . LinuxSecurity.com Team

Calendar 2 May 26, 2021 Gentoo
172

Ubuntu 19.10: USN-4317-1 Moderate: Firefox Denial Of Service

Firefox could be made to crash or run programs as your login if it opened a malicious website.. =========================================================================Ubuntu Security Notice USN-4317-1 April 04, 2020 firefox vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Firefox could be made to crash or run programs as your login if it opened a malicious website. Software Description: - firefox: Mozilla Open Source web browser Details: Two use-after-free bugs were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could exploit these to cause a denial of service or execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10: firefox 74.0.1+build1-0ubuntu0.19.10.1 Ubuntu 18.04 LTS: firefox 74.0.1+build1-0ubuntu0.18.04.1 Ubuntu 16.04 LTS: firefox 74.0.1+build1-0ubuntu0.16.04.1 After a standard system update you need to restart Firefox to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4317-1 CVE-2020-6819, CVE-2020-6820 Package Information: https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.19.10.1 https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.18.04.1 https://launchpad.net/ubuntu/+source/firefox/74.0.1+build1-0ubuntu0.16.04.1 . Security flaws in Firefox on Ubuntu may lead to system crashes or unauthorized code execution from harmful websites. Ensure Firefox is updated for enhanced protection.. firefox vulnerabilities, Ubuntu security, exploit code execution, denial of service. . LinuxSecurity.com Team

Calendar 2 Apr 04, 2020 Ubuntu
198

Arch Linux: 202310-15 Severity: Botan Security Information Leak Alert

The package botan before version 2.3.0-1 is vulnerable to information disclosure. . Arch Linux Security Advisory ASA-201710-17 ========================================= Severity: Medium Date : 2017-10-12 CVE-ID : CVE-2017-14737 Package : botan Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-416 Summary ====== The package botan before version 2.3.0-1 is vulnerable to information disclosure. Resolution ========= Upgrade to 2.3.0-1. # pacman -Syu "botan> =2.3.0-1" The problem has been fixed upstream in version 2.3.0. Workaround ========= None. Description ========== A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key. Impact ===== A local attacker is able to use a cache-based side channel attack to recover information about RSA secret keys. References ========= https://github.com/randombit/botan/issues/1222 https://github.com/randombit/botan/commit/95df7f155570949837e8e28e733f3d59408092da https://github.com/randombit/botan/commit/2718c02d429d024b2cd65534f7e54cab1d123348 https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/wang-shuai https://security.archlinux.org/CVE-2017-14737 . Arch Linux Security Announcement regarding botan flaw indicates moderate risk of information leakage, prompting recommended updates.. botan package security, Arch Linux vulnerabilities, information disclosure threats. . Severity: Medium. LinuxSecurity.com Team

Calendar 2 Oct 13, 2017 Medium ArchLinux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here