Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
98
security advisoryRed Hatremote code executionRed Hat: RHSA-2022:0082-01 Critical: Process Automation Manager Remote Exec
An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Critical: Red Hat Process Automation Manager 7.11.1 security update Advisory ID: RHSA-2022:0082-01 Product: Red Hat Process Automation Manager Advisory URL: https://access.redhat.com/errata/RHSA-2022:0082 Issue date: 2022-01-11 CVE Names: CVE-2021-44228 ==================================================================== 1. Summary: An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: Red Hat Process Automation Manager is an open source business process management suite that combines process management and decision service management and enables business and IT users to create, manage, validate, and deploy process applications and decision services. This release of Red Hat Process Automation Manager 7.11.1 serves as an update to Red Hat Process Automation Manager 7.11.0, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References. Security Fix(es): * log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value (CVE-2021-44228) 3. Solution: For on-premise installations, before applying the update, back up your existing installation, including all applications, configuration files, databases and databasesettings, and so on. It is recommended to halt the server by stopping the JBoss Application Server process before installing this update; after installing the update, restart the server by starting the JBoss Application Server process. The References section of this erratum contains a download link (you must log in to download the update). 4. Bugs fixed (https://bugzilla.redhat.com/): 2030932 - CVE-2021-44228 log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value 5. References: https://access.redhat.com/security/cve/CVE-2021-44228 https://access.redhat.com/security/updates/classification/#critical 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYd37j9zjgjWX9erEAQjn5g/+II2LUyaDfuB2wLF33DVr9TK/TTMdXELx DtWHDQIAby/XDC6/ZPpfBrkY9lyQ2cwNuk6QcRFa0LxXFSDBR6aICP3+dXU6gjux WCLdn9VHctLGdmVR+kWbpuMU/1zO/FYxW5GDqx26ZbA5JaJeuDS8fsQewBo1yeOJ kkcSHB2QJInYE/hXLR7JkESCopQ7ddyFwXNSdow95FkThnzBxwfFj+Q9pbmpv2cE AXBJofaW8/t7Ed65OmDWD+t/8jgSIaHONqdVN7h7m6cMCrqHmgA+ZUtC30h5y9Ln /QVOmBW0CQbTGWQJtPIfoawdwH7thZm7wcxfGSxjT/Qym+7UsV40E65+hD4UcGJi MgxXTteUF61gyU4p89KxUgVXQzFvvzLH4h9R9b39R0V53ObuzGRZfYO7FXhnmSfl 0Vvhyt5cr723G/s5u2a86GWEOhobfLf6MT37Le8plSQ46s9X0bLbkGaIIM+JSqCq l5eT+MGLaeUDxvcFZXfsiiuHtwNdG13/dTA5mHh2xHZ+jZrR1NLP7QoP2zsqN2I/ OGb3gfY41o9+j/2Fk55zfL1L8AcxBdO/ltrsyHy+C6it6SB8iKHHxQV9RZYEqoKT gAkoxazAplNNql1Ze/RTwr1pn7/uNbTjN7OQoJH/OYdTJxD9o7MkTm17SXhIN4sQ eUggGwuUu4I=/NnU -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 11, 2022
•Critical
Red Hat
202
security advisorydenial of servicemoderate severityopenSUSE: 2018:2694-1 Moderate: php5 Denial of Service and Crash Issues
An update that fixes four vulnerabilities is now available.. openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2694-1 Rating: moderate References: #1096984 #1099098 #1103659 #1105466 Cross-References: CVE-2017-9118 CVE-2018-10360 CVE-2018-12882 CVE-2018-14851 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for php5 fixes the following issues: The following security issues were fixed: - CVE-2018-10360: Fixed an out-of-bounds read in the do_core_note function in readelf.c in libmagic.a, which allowed remote attackers to cause a denial of service via a crafted ELF file (bsc#1096984) - CVE-2018-14851: Fixed an out-of-bound read in exif_process_IFD_in_MAKERNOTE, which could be exploited by an attacker via crafted JPG files, and could result in an application crash. (bsc#1103659) - CVE-2018-12882: Fixed an use-after-free in exif_read_from_impl in ext/exif/exif.c (bsc#1099098) - CVE-2017-9118: Fixed an out of bounds access in php_pcre_replace_impl via a crafted preg_replace call (bsc#1105466) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-998=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-103.1 apache2-mod_php5-debuginfo-5.5.14-103.1 php5-5.5.14-103.1 php5-bcmath-5.5.14-103.1 php5-bcmath-debuginfo-5.5.14-103.1 php5-bz2-5.5.14-103.1 php5-bz2-debuginfo-5.5.14-103.1 php5-calendar-5.5.14-103.1 php5-calendar-debuginfo-5.5.14-103.1 php5-ctype-5.5.14-103.1 php5-ctype-debuginfo-5.5.14-103.1 php5-curl-5.5.14-103.1 php5-curl-debuginfo-5.5.14-103.1 php5-dba-5.5.14-103.1 php5-dba-debuginfo-5.5.14-103.1 php5-debuginfo-5.5.14-103.1 php5-debugsource-5.5.14-103.1 php5-devel-5.5.14-103.1 php5-dom-5.5.14-103.1 php5-dom-debuginfo-5.5.14-103.1 php5-enchant-5.5.14-103.1 php5-enchant-debuginfo-5.5.14-103.1 php5-exif-5.5.14-103.1 php5-exif-debuginfo-5.5.14-103.1 php5-fastcgi-5.5.14-103.1 php5-fastcgi-debuginfo-5.5.14-103.1 php5-fileinfo-5.5.14-103.1 php5-fileinfo-debuginfo-5.5.14-103.1 php5-firebird-5.5.14-103.1 php5-firebird-debuginfo-5.5.14-103.1 php5-fpm-5.5.14-103.1 php5-fpm-debuginfo-5.5.14-103.1 php5-ftp-5.5.14-103.1 php5-ftp-debuginfo-5.5.14-103.1 php5-gd-5.5.14-103.1 php5-gd-debuginfo-5.5.14-103.1 php5-gettext-5.5.14-103.1 php5-gettext-debuginfo-5.5.14-103.1 php5-gmp-5.5.14-103.1 php5-gmp-debuginfo-5.5.14-103.1 php5-iconv-5.5.14-103.1 php5-iconv-debuginfo-5.5.14-103.1 php5-imap-5.5.14-103.1 php5-imap-debuginfo-5.5.14-103.1 php5-intl-5.5.14-103.1 php5-intl-debuginfo-5.5.14-103.1 php5-json-5.5.14-103.1 php5-json-debuginfo-5.5.14-103.1 php5-ldap-5.5.14-103.1 php5-ldap-debuginfo-5.5.14-103.1 php5-mbstring-5.5.14-103.1 php5-mbstring-debuginfo-5.5.14-103.1 php5-mcrypt-5.5.14-103.1 php5-mcrypt-debuginfo-5.5.14-103.1 php5-mssql-5.5.14-103.1 php5-mssql-debuginfo-5.5.14-103.1 php5-mysql-5.5.14-103.1 php5-mysql-debuginfo-5.5.14-103.1 php5-odbc-5.5.14-103.1 php5-odbc-debuginfo-5.5.14-103.1 php5-opcache-5.5.14-103.1 php5-opcache-debuginfo-5.5.14-103.1 php5-openssl-5.5.14-103.1 php5-openssl-debuginfo-5.5.14-103.1 php5-pcntl-5.5.14-103.1 php5-pcntl-debuginfo-5.5.14-103.1 php5-pdo-5.5.14-103.1 php5-pdo-debuginfo-5.5.14-103.1 php5-pgsql-5.5.14-103.1 php5-pgsql-debuginfo-5.5.14-103.1 php5-phar-5.5.14-103.1 php5-phar-debuginfo-5.5.14-103.1 php5-posix-5.5.14-103.1 php5-posix-debuginfo-5.5.14-103.1 php5-pspell-5.5.14-103.1 php5-pspell-debuginfo-5.5.14-103.1 php5-readline-5.5.14-103.1 php5-readline-debuginfo-5.5.14-103.1 php5-shmop-5.5.14-103.1 php5-shmop-debuginfo-5.5.14-103.1 php5-snmp-5.5.14-103.1 php5-snmp-debuginfo-5.5.14-103.1 php5-soap-5.5.14-103.1 php5-soap-debuginfo-5.5.14-103.1 php5-sockets-5.5.14-103.1 php5-sockets-debuginfo-5.5.14-103.1 php5-sqlite-5.5.14-103.1 php5-sqlite-debuginfo-5.5.14-103.1 php5-suhosin-5.5.14-103.1 php5-suhosin-debuginfo-5.5.14-103.1 php5-sysvmsg-5.5.14-103.1 php5-sysvmsg-debuginfo-5.5.14-103.1 php5-sysvsem-5.5.14-103.1 php5-sysvsem-debuginfo-5.5.14-103.1 php5-sysvshm-5.5.14-103.1 php5-sysvshm-debuginfo-5.5.14-103.1 php5-tidy-5.5.14-103.1 php5-tidy-debuginfo-5.5.14-103.1 php5-tokenizer-5.5.14-103.1 php5-tokenizer-debuginfo-5.5.14-103.1 php5-wddx-5.5.14-103.1 php5-wddx-debuginfo-5.5.14-103.1 php5-xmlreader-5.5.14-103.1 php5-xmlreader-debuginfo-5.5.14-103.1 php5-xmlrpc-5.5.14-103.1 php5-xmlrpc-debuginfo-5.5.14-103.1 php5-xmlwriter-5.5.14-103.1 php5-xmlwriter-debuginfo-5.5.14-103.1 php5-xsl-5.5.14-103.1 php5-xsl-debuginfo-5.5.14-103.1 php5-zip-5.5.14-103.1 php5-zip-debuginfo-5.5.14-103.1 php5-zlib-5.5.14-103.1 php5-zlib-debuginfo-5.5.14-103.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-103.1 References: https://www.suse.com/security/cve/CVE-2017-9118.html https://www.suse.com/security/cve/CVE-2018-10360.html https://www.suse.com/security/cve/CVE-2018-12882.html https://www.suse.com/security/cve/CVE-2018-14851.html https://bugzilla.suse.com/1096984 https://bugzilla.suse.com/1099098 https://bugzilla.suse.com/1103659 https://bugzilla.suse.com/1105466 -- . Acquire the most recent openSUSE security patch for php5, addressing several concerns of moderate risk. Maintain your safety!. openSUSE Security, php5 Update, Security Patches, Linux Security, php5 Denial of Service. . LinuxSecurity.com Team
Sep 12, 2018
OpenSUSE
100
security advisoryimportantsoftware maintenanceSUSE Linux Enterprise 2012: 0894-1 Important: Libtiff Overflow Exploit
An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.. SUSE Security Update: Security update for libtiff ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:0894-1 Rating: important References: #767852 #767854 Cross-References: CVE-2012-2088 CVE-2012-2113 Affected Products: SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP1 for VMware SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 10 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 10 SP4 SLE SDK 10 SP4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: The following issue has been fixed: * Specially crafted tiff files could have caused overflows in libtiff (CVE-2012-2088, CVE-2012-2113). Security Issue references: * CVE-2012-2088 * CVE-2012-2113 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11 SP2: zypper in -t patch sdksp1-libtiff-devel-6475 - SUSE Linux Enterprise Software Development Kit 11 SP1: zypper in -t patch sdksp1-libtiff-devel-6475 - SUSE Linux Enterprise Server 11 SP2: zypper in -t patch slessp1-libtiff-devel-6475 - SUSE Linux Enterprise Server 11 SP1 for VMware: zypper in -t patch slessp1-libtiff-devel-6475 - SUSE Linux Enterprise Server 11 SP1: zypper in -t patch slessp1-libtiff-devel-6475 - SUSE Linux Enterprise Desktop 11 SP2: zypper in -t patch sledsp1-libtiff-devel-6475 - SUSE Linux Enterprise Desktop 11 SP1: zypper in -t patch sledsp1-libtiff-devel-6475 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 ia64 ppc64 s390x x86_64): libtiff-devel-3.8.2-141.146.1 - SUSE Linux Enterprise Software Development Kit 11 SP2 (ppc64 s390x x86_64): libtiff-devel-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (i586 ia64 ppc64 s390x x86_64): libtiff-devel-3.8.2-141.146.1 - SUSE Linux Enterprise Software Development Kit 11 SP1 (ppc64 s390x x86_64): libtiff-devel-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP2 (i586 ia64 ppc64 s390x x86_64): libtiff3-3.8.2-141.146.1 tiff-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP2 (ppc64 s390x x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP2 (ia64): libtiff3-x86-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (i586 x86_64): libtiff3-3.8.2-141.146.1 tiff-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 for VMware (x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 (i586 ia64 ppc64 s390x x86_64): libtiff3-3.8.2-141.146.1 tiff-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 (ppc64 s390x x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Server 11 SP1 (ia64): libtiff3-x86-3.8.2-141.146.1 - SUSE Linux Enterprise Server 10 SP4 (i586 ia64 ppc s390x x86_64): libtiff-3.8.2-5.28.1 libtiff-devel-3.8.2-5.28.1 tiff-3.8.2-5.28.1 - SUSE Linux Enterprise Server 10 SP4 (s390x x86_64): libtiff-32bit-3.8.2-5.28.1 libtiff-devel-32bit-3.8.2-5.28.1 - SUSE LinuxEnterprise Server 10 SP4 (ia64): libtiff-x86-3.8.2-5.28.1 - SUSE Linux Enterprise Server 10 SP4 (ppc): libtiff-64bit-3.8.2-5.28.1 libtiff-devel-64bit-3.8.2-5.28.1 - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64): libtiff3-3.8.2-141.146.1 - SUSE Linux Enterprise Desktop 11 SP2 (x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Desktop 11 SP1 (i586 x86_64): libtiff3-3.8.2-141.146.1 - SUSE Linux Enterprise Desktop 11 SP1 (x86_64): libtiff3-32bit-3.8.2-141.146.1 - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64): libtiff-3.8.2-5.28.1 libtiff-devel-3.8.2-5.28.1 tiff-3.8.2-5.28.1 - SUSE Linux Enterprise Desktop 10 SP4 (x86_64): libtiff-32bit-3.8.2-5.28.1 - SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64): libtiff-devel-3.8.2-5.28.1 - SLE SDK 10 SP4 (s390x x86_64): libtiff-devel-32bit-3.8.2-5.28.1 - SLE SDK 10 SP4 (ppc): libtiff-devel-64bit-3.8.2-5.28.1 References: https://www.suse.com/security/cve/CVE-2012-2088.html https://www.suse.com/security/cve/CVE-2012-2113.html . SUSE Security Update for libjpeg tackling critical vulnerabilities, including memory leaks, with efficient remediation measures.. SUSE Linux, Libtiff Update, Patch Management, Linux Software Security. . Severity: Important. LinuxSecurity.com Team
Jul 19, 2012
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!