Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE go1.25-openssl Important Security Issues 2026-3151-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE aws-nitro-enclaves-cli Important Issues Advisory 2026-3152-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE nghttp2 Moderate HTTP Request Smuggling Issue 2026-3153-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE python-tornado6 Moderate Credential Leak Vulnerability 2026-3155-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Kernel Important Security Update Vulnerability Fix 2026-3156-1

Calendar White Jul 21, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE php7 Moderate Buffer Vulnerability Resolution SUSE-SU-2026-3165-1

Calendar White Jul 21, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE libkrun Important Patch 2026-0255-1 for 8 Issues

Calendar White Jul 21, 2026
Important
Rockylinux Esm H900
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 AccountsService Critical Exec Command Threat USN-8580-2

Calendar White Jul 21, 2026
Critical
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 6 articles for you...
217
Ls Advisories Oracle Esm H240
Price Tag%201security advisorysecurity updateweb application

Oracle Linux 9 ELSA-2025-2035 Important: webkit2gtk security fix

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-2035 http://linux.oracle.com/errata/ELSA-2025-2035.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: webkit2gtk3-2.46.6-1.el9_5.i686.rpm webkit2gtk3-2.46.6-1.el9_5.x86_64.rpm webkit2gtk3-devel-2.46.6-1.el9_5.i686.rpm webkit2gtk3-devel-2.46.6-1.el9_5.x86_64.rpm webkit2gtk3-jsc-2.46.6-1.el9_5.i686.rpm webkit2gtk3-jsc-2.46.6-1.el9_5.x86_64.rpm webkit2gtk3-jsc-devel-2.46.6-1.el9_5.i686.rpm webkit2gtk3-jsc-devel-2.46.6-1.el9_5.x86_64.rpm aarch64: webkit2gtk3-2.46.6-1.el9_5.aarch64.rpm webkit2gtk3-devel-2.46.6-1.el9_5.aarch64.rpm webkit2gtk3-jsc-2.46.6-1.el9_5.aarch64.rpm webkit2gtk3-jsc-devel-2.46.6-1.el9_5.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//webkit2gtk3-2.46.6-1.el9_5.src.rpm Related CVEs: CVE-2024-54543 CVE-2025-24143 CVE-2025-24150 CVE-2025-24158 CVE-2025-24162 Description of changes: [2.46.6-1] - Update to 2.46.6 _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Revised RPM packages for Oracle Linux 9 tackling critical security vulnerabilities within the webkit2gtk modules.. Oracle Linux, webkit2gtk, security updates, Linux advisory, package updates. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 07, 2025 •Important Oracle
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderate impactupdate packages

Red Hat OpenShift 3.0/3.1 RHSA-2015:2544-01 Moderate: Pod Log Access

Updated openshift packages that fix one security issue are now available for Red Hat OpenShift Enterprise 3.0 and 3.1. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openshift security update Advisory ID: RHSA-2015:2544-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2015:2544 Issue date: 2015-12-03 CVE Names: CVE-2015-7528 ==================================================================== 1. Summary: Updated openshift packages that fix one security issue are now available for Red Hat OpenShift Enterprise 3.0 and 3.1. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: RHOSE 3.0 - x86_64 RHOSE 3.1 - x86_64 3. Description: OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service (PaaS) solution designed for on-premise or private cloud deployments. It was found that OpenShift's API back end did not verify requests for pod log locations, allowing a pod on a Node to request logs for any other pod on that Node. A remote attacker could use this flaw to view sensitive information via pod logs that they would normally not have access to. (CVE-2015-7528) This issue was discovered by Jordan Liggitt of Red Hat Atomic OpenShift. All OpenShift Enterprise 3.0 and 3.1 users are advised to upgrade to these updated packages, which correct this issue. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how toapply this update, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1286745 - CVE-2015-7528 OpenShift: pod log location must validate container if provided 6. Package List: RHOSE 3.0: Source: openshift-3.0.2.0-0.git.38.7576bc5.el7ose.src.rpm x86_64: openshift-3.0.2.0-0.git.38.7576bc5.el7ose.x86_64.rpm openshift-clients-3.0.2.0-0.git.38.7576bc5.el7ose.x86_64.rpm openshift-master-3.0.2.0-0.git.38.7576bc5.el7ose.x86_64.rpm openshift-node-3.0.2.0-0.git.38.7576bc5.el7ose.x86_64.rpm openshift-sdn-ovs-3.0.2.0-0.git.38.7576bc5.el7ose.x86_64.rpm tuned-profiles-openshift-node-3.0.2.0-0.git.38.7576bc5.el7ose.x86_64.rpm RHOSE 3.1: Source: atomic-openshift-3.1.0.4-1.git.15.5e061c3.el7aos.src.rpm x86_64: atomic-openshift-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm atomic-openshift-clients-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm atomic-openshift-clients-redistributable-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm atomic-openshift-dockerregistry-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm atomic-openshift-master-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm atomic-openshift-node-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm atomic-openshift-pod-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm atomic-openshift-recycle-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm atomic-openshift-sdn-ovs-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm tuned-profiles-atomic-openshift-node-3.1.0.4-1.git.15.5e061c3.el7aos.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2015-7528 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2015 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iD8DBQFWYJaBXlSAg2UNWIIRAtHaAKCfIqKUWks4nzr1zs98BcL8MqAQzQCePLRC lhLKHHhD29Tp6Z7EwSxhcuw=e+Qq -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . The recent update for RedHat OpenShift addresses a significant security vulnerability aimed at preventing unauthorized access to container logs within corporate environments.. OpenShift Update, API Security, Pod Log Access, Red Hat Advisory, Security Update. . LinuxSecurity.com Team

Calendar%202 Dec 03, 2015 Red Hat
Banner 1 1028x280 1708121660 1771599717
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed Hat Enterprise Linuximportant security impact

Red Hat Enterprise Linux: 2014:1881-01 Important: Java Security Fix

Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Important security [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: java-1.5.0-ibm security update Advisory ID: RHSA-2014:1881-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2014:1881.html Issue date: 2014-11-20 CVE Names: CVE-2014-3065 CVE-2014-3566 CVE-2014-6457 CVE-2014-6502 CVE-2014-6506 CVE-2014-6511 CVE-2014-6512 CVE-2014-6531 CVE-2014-6558 ==================================================================== 1. Summary: Updated java-1.5.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node Supplementary (v. 6) - x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, ppc, s390x, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: IBM J2SE version 5.0 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBMSecurity alerts page, listed in the References section. (CVE-2014-3065, CVE-2014-3566, CVE-2014-6457, CVE-2014-6502, CVE-2014-6506, CVE-2014-6511, CVE-2014-6512, CVE-2014-6531, CVE-2014-6558) The CVE-2014-6512 issue was discovered by Florian Weimer of Red Hat Product Security. Note: With this update, the IBM SDK now disables the SSL 3.0 protocol to address the CVE-2014-3566 issue (also known as POODLE). Refer to the IBM article linked to in the References section for additional details about this change and instructions on how to re-enable SSL 3.0 support if needed. All users of java-1.5.0-ibm are advised to upgrade to these updated packages, containing the IBM J2SE 5.0 SR16-FP8 release. All running instances of IBM Java must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1071210 - CVE-2014-6512 OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509) 1150155 - CVE-2014-6506 OpenJDK: insufficient permission checks when setting resource bundle on system logger (Libraries, 8041564) 1150651 - CVE-2014-6531 OpenJDK: insufficient ResourceBundle name check (Libraries, 8044274) 1150669 - CVE-2014-6502 OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797) 1151046 - CVE-2014-6457 OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066) 1151063 - CVE-2014-6558 OpenJDK: CipherInputStream incorrect exception handling (Security, 8037846) 1151517 - CVE-2014-6511 ICU: Layout Engine ContextualSubstitution missing boundary checks (JDK 2D, 8041540) 1152789 - CVE-2014-3566 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack 1162554 - CVE-2014-3065 IBM JDK: privilege escalation via shared classcache 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 5): i386: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-accessibility-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.i386.rpm x86_64: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-accessibility-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.x86_64.rpm Red Hat Enterprise Linux Server Supplementary (v.5): i386: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-accessibility-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.i386.rpm ppc: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.ppc.rpm java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.ppc64.rpm java-1.5.0-ibm-accessibility-1.5.0.16.8-1jpp.1.el5.ppc.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.ppc.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.ppc64.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.ppc.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.ppc64.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el5.ppc.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el5.ppc64.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el5.ppc.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el5.ppc.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.ppc.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.ppc64.rpm s390x: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.s390.rpm java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.s390x.rpm java-1.5.0-ibm-accessibility-1.5.0.16.8-1jpp.1.el5.s390x.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.s390.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.s390x.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.s390.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.s390x.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el5.s390.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.s390.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.s390x.rpm x86_64: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-accessibility-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el5.x86_64.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.i386.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el5.x86_64.rpm Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.i686.rpm x86_64: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm Red Hat Enterprise Linux HPC Node Supplementary (v. 6): x86_64: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm Red Hat Enterprise Linux Server Supplementary (v.6): i386: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.i686.rpm ppc64: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.ppc64.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.ppc64.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.ppc.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.ppc64.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el6_6.ppc64.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.ppc.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el6_6.ppc.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.ppc64.rpm s390x: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.s390x.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.s390x.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.s390.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.s390x.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.s390.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.s390x.rpm x86_64: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm Red Hat Enterprise Linux Workstation Supplementary (v.6): i386: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.i686.rpm x86_64: java-1.5.0-ibm-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-demo-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-devel-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-javacomm-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm java-1.5.0-ibm-jdbc-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-plugin-1.5.0.16.8-1jpp.1.el6_6.i686.rpm java-1.5.0-ibm-src-1.5.0.16.8-1jpp.1.el6_6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2014-3065 https://access.redhat.com/security/cve/CVE-2014-3566 https://access.redhat.com/security/cve/CVE-2014-6457 https://access.redhat.com/security/cve/CVE-2014-6502 https://access.redhat.com/security/cve/CVE-2014-6506 https://access.redhat.com/security/cve/CVE-2014-6511 https://access.redhat.com/security/cve/CVE-2014-6512 https://access.redhat.com/security/cve/CVE-2014-6531 https://access.redhat.com/security/cve/CVE-2014-6558 https://access.redhat.com/security/updates/classification#important https://www.ibm.com/support/pages/java-sdk/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2014 Red Hat, Inc. . The latest java-1.5.0-ibm packages address multiple security vulnerabilities affecting Red Hat customers. Discover the significant enhancements in these updates.. Red Hat Java Update, Important Security Advisory, Server Security Impact. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 20, 2014 •Important Red Hat
99
Ls Advisories Slackware Esm H240
Price Tag%201security advisoryslackwarememory leak

Ubuntu: 2021-045-02 Critical: OpenSSH Remote Code Execution

New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] openssl (SSA:2014-288-01) New openssl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+ patches/packages/openssl-solibs-1.0.1j-i486-1_slack14.1.txz: Upgraded. (* Security fix *) patches/packages/openssl-1.0.1j-i486-1_slack14.1.txz: Upgraded. This update fixes several security issues: SRTP Memory Leak (CVE-2014-3513): A flaw in the DTLS SRTP extension parsing code allows an attacker, who sends a carefully crafted handshake message, to cause OpenSSL to fail to free up to 64k of memory causing a memory leak. This could be exploited in a Denial Of Service attack. Session Ticket Memory Leak (CVE-2014-3567): When an OpenSSL SSL/TLS/DTLS server receives a session ticket the integrity of that ticket is first verified. In the event of a session ticket integrity check failing, OpenSSL will fail to free memory causing a memory leak. By sending a large number of invalid session tickets an attacker could exploit this issue in a Denial Of Service attack. SSL 3.0 Fallback protection: OpenSSL has added support for TLS_FALLBACK_SCSV to allow applications to block the ability for a MITM attacker to force a protocol downgrade. Some client applications (such as browsers) will reconnect using a downgraded protocol to work around interoperability bugs in older servers. This could be exploited by an active man-in-the-middle to downgrade connections to SSL 3.0 even if both sides of the connection support higher protocols. SSL 3.0 contains a number of weaknesses including POODLE (CVE-2014-3566). Build option no-ssl3 is incomplete (CVE-2014-3568): When OpenSSL is configured with "no-ssl3" as a build option, servers could accept and complete a SSL 3.0 handshake, and clients could be configured to send them. For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-3513 https://www.cve.org/CVERecord?id=CVE-2014-3566 https://www.cve.org/CVERecord?id=CVE-2014-3567 https://www.cve.org/CVERecord?id=CVE-2014-3568 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated packages for Slackware 13.0: Updated packages for Slackware x86_64 13.0: Updated packages for Slackware 13.1: Updated packages for Slackware x86_64 13.1: Updated packages for Slackware 13.37: Updated packages for Slackware x86_64 13.37: Updated packages for Slackware 14.0: Updated packages for Slackware x86_64 14.0: Updated packages for Slackware 14.1: Updated packages for Slackware x86_64 14.1: Updated packages for Slackware -current: Updated packages for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 13.0 packages: 44d336a121b39296f0e6bbeeb283dd2b openssl-0.9.8zc-i486-1_slack13.0.txz 8342cfb351e59ecf5ea6d8cba66f0040 openssl-solibs-0.9.8zc-i486-1_slack13.0.txz Slackware x86_64 13.0 packages: 671f12535bdc10ab24388b713351aca2 openssl-0.9.8zc-x86_64-1_slack13.0.txz 21e380284cdfab2fd15fffe2e0aed526 openssl-solibs-0.9.8zc-x86_64-1_slack13.0.txz Slackware 13.1 packages: 64cb819f1e07522bd5d7ceedd0a9ab50 openssl-0.9.8zc-i486-1_slack13.1.txz 5fe4e385b2251cfd7e8ae5963ec6cef1 openssl-solibs-0.9.8zc-i486-1_slack13.1.txz Slackware x86_64 13.1 packages: 94feb6699d6f2cc7750a6b2e17ccaaa2 openssl-0.9.8zc-x86_64-1_slack13.1.txz 2c17e4286509c29074ab0168367b851e openssl-solibs-0.9.8zc-x86_64-1_slack13.1.txz Slackware 13.37 packages: 4483d91c776c7e23c59246c4e0aa24aa openssl-0.9.8zc-i486-1_slack13.37.txz fedd58eb19bc13c9dd88d947827a7370 openssl-solibs-0.9.8zc-i486-1_slack13.37.txz Slackware x86_64 13.37 packages: 5d48ac1e9339efc35e304c7d48b2e762 openssl-0.9.8zc-x86_64-1_slack13.37.txz 6f5e2b576259477c13f12cbed9be8804 openssl-solibs-0.9.8zc-x86_64-1_slack13.37.txz Slackware 14.0 packages: 2b678160283bc696565dc8bd8b28c0eb openssl-1.0.1j-i486-1_slack14.0.txz f7762615c990713e9e86d4da962f1022 openssl-solibs-1.0.1j-i486-1_slack14.0.txz Slackware x86_64 14.0 packages: 41010ca37d49b74e7d7dc3f1c6ddc57e openssl-1.0.1j-x86_64-1_slack14.0.txz 40dc6f3de217279d6140c1efcc0d45c8 openssl-solibs-1.0.1j-x86_64-1_slack14.0.txz Slackware 14.1 packages: 024ecea55e22e47f9fbb4b81a7b72a51 openssl-1.0.1j-i486-1_slack14.1.txz 0a575668bb41ec4c2160800611f7f627 openssl-solibs-1.0.1j-i486-1_slack14.1.txz Slackware x86_64 14.1 packages: d07fe289f7998a584c2b0d9810a8b9aa openssl-1.0.1j-x86_64-1_slack14.1.txz 1ffc5d0c02b0c60cefa5cf9189bfc71d openssl-solibs-1.0.1j-x86_64-1_slack14.1.txz Slackware -current packages: 53c9f51a79460bbfc5dec5720317cd53 a/openssl-solibs-1.0.1j-i486-1.txz cc059aa63494f3b005a886c70bc3f5d6 n/openssl-1.0.1j-i486-1.txz Slackware x86_64 -current packages: 500709555e652adcd84b4e02dfab4eeb a/openssl-solibs-1.0.1j-x86_64-1.txz c483ca9c450fa90a901ac013276ccc53 n/openssl-1.0.1j-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the packages as root: # upgradepkg openssl-1.0.1j-i486-1_slack14.1.txz openssl-solibs-1.0.1j-i486-1_slack14.1.txz +-----+ . Updated openssl distributions for Slackware address various security concerns, notably memory leak incidents and denial of service vulnerabilities.. Slackware OpenSSL Updates, OpenSSL Security Fixes, Memory Leak Vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Oct 15, 2014 •Critical Slackware
Banner 1 1028x280 1708121660 1771599717
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorybuffer overflowimportant

Scientific Linux 6: Important Update for LibreOffice Buffer Overflow

Important: libreoffice security update. Date: Thu, 2 Aug 2012 09:07:37 -0500 Reply-To: This email address is being protected from spambots. You need JavaScript enabled to view it. Sender: Security Errata for Scientific Linux From: Patrick Riehecky Subject: Security ERRATA Important: libreoffice on SL6.x i386/x86_64 Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. Synopsis: Important: libreoffice security update Issue Date: 2012-08-01 CVE Numbers: CVE-2012-2665 LibreOffice is an open source, community-developed office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet application, presentation manager, formula editor, and a drawing program. Multiple heap-based buffer overflow flaws were found in the way LibreOffice processed encryption information in the manifest files of OpenDocument Format files. An attacker could provide a specially-crafted OpenDocument Format file that, when opened in a LibreOffice application, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2012-2665) All LibreOffice users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. All running instances of LibreOffice applications must be restarted for this update to take effect. SL6: i386 libreoffice-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-base-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-bsh-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-calc-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-core-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-debuginfo-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-draw-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-emailmerge-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-gdb-debug-support-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-graphicfilter-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-headless-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-impress-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-javafilter-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-af-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ar-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-as-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-bg-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-bn-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ca-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-cs-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-cy-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-da-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-de-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-dz-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-el-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-en-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-es-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-et-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-eu-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-fi-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-fr-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ga-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-gl-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-gu-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-he-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-hi-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-hr-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-hu-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-it-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ja-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-kn-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ko-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-lt-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-mai-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ml-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-mr-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ms-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-nb-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-nl-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-nn-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-nr-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-nso-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-or-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-pa-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-pl-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-pt-BR-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-pt-PT-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ro-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ru-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-sk-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-sl-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-sr-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ss-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-st-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-sv-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ta-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-te-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-th-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-tn-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-tr-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ts-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-uk-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ur-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-ve-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-xh-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-zh-Hans-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-zh-Hant-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-langpack-zu-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-math-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-ogltrans-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-pdfimport-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-presentation-minimizer-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-presenter-screen-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-pyuno-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-report-builder-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-rhino-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-sdk-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-sdk-doc-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-testtools-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-ure-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-wiki-publisher-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-writer-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-xsltfilter-3.4.5.2-16.1.el6_3.i686.rpm noarch autocorr-af-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-bg-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-cs-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-da-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-de-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-en-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-es-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-eu-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-fa-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-fi-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-fr-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-ga-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-hr-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-hu-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-it-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-ja-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-ko-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-lb-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-lt-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-mn-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-nl-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-pl-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-pt-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-ru-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-sk-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-sl-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-sr-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-sv-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-tr-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-vi-3.4.5.2-16.1.el6_3.noarch.rpm autocorr-zh-3.4.5.2-16.1.el6_3.noarch.rpm libreoffice-opensymbol-fonts-3.4.5.2-16.1.el6_3.noarch.rpm x86_64 libreoffice-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-base-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-bsh-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-calc-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-core-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-debuginfo-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-debuginfo-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-draw-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-emailmerge-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-gdb-debug-support-3.4.5.2-16.1.el6_3.i686.rpm libreoffice-gdb-debug-support-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-graphicfilter-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-headless-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-impress-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-javafilter-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-af-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ar-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-as-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-bg-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-bn-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ca-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-cs-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-cy-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-da-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-de-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-dz-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-el-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-en-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-es-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-et-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-eu-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-fi-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-fr-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ga-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-gl-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-gu-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-he-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-hi-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-hr-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-hu-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-it-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ja-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-kn-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ko-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-lt-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-mai-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ml-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-mr-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ms-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-nb-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-nl-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-nn-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-nr-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-nso-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-or-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-pa-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-pl-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-pt-BR-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-pt-PT-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ro-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ru-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-sk-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-sl-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-sr-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ss-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-st-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-sv-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ta-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-te-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-th-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-tn-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-tr-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ts-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-uk-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ur-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-ve-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-xh-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-zh-Hans-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-zh-Hant-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-langpack-zu-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-math-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-ogltrans-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-pdfimport-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-presentation-minimizer-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-presenter-screen-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-pyuno-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-report-builder-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-rhino-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-sdk-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-sdk-doc-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-testtools-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-ure-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-wiki-publisher-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-writer-3.4.5.2-16.1.el6_3.x86_64.rpm libreoffice-xsltfilter-3.4.5.2-16.1.el6_3.x86_64.rpm - Scientific Linux Development Team . The latest release of LibreOffice includes a critical security patch tackling various vulnerabilities related to buffer overflows that could potentially lead to severe consequences.. LibreOffice Security Update, Scientific Linux Security, Buffer Overflow Fix, Important Update Notice. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Aug 02, 2012 •Important Scientific Linux
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed Hatcritical

Red Hat: 2011:1455-01 Critical: Freetype Input Flaw Advisory

Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Important: freetype security update Advisory ID: RHSA-2011:1455-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:1455.html Issue date: 2011-11-16 CVE Names: CVE-2011-3439 ==================================================================== 1. Summary: Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 3. Description: FreeType isa free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs efficiently. The freetype packages for Red Hat Enterprise Linux 4 provide both the FreeType 1 and FreeType 2 font engines. The freetype packages for Red Hat Enterprise Linux 5 and 6 provide only the FreeType 2 font engine. Multiple input validation flaws were found in the way FreeType processed CID-keyed fonts. If a specially-crafted font file was loaded by an application linked against FreeType, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2011-3439) Note: These issues only affected the FreeType 2 font engine. Users are advised to upgrade to these updated packages, which contain a backported patch to correct these issues. The X server must be restarted (log out, then log back in) for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 753799 - CVE-2011-3439 freetype: Multiple security flaws when loading CID-keyed Type 1 fonts 6. Package List: Red Hat Enterprise Linux AS version4: Source: i386: freetype-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-demos-2.1.9-21.el4.i386.rpm freetype-devel-2.1.9-21.el4.i386.rpm freetype-utils-2.1.9-21.el4.i386.rpm ia64: freetype-2.1.9-21.el4.i386.rpm freetype-2.1.9-21.el4.ia64.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.ia64.rpm freetype-demos-2.1.9-21.el4.ia64.rpm freetype-devel-2.1.9-21.el4.ia64.rpm freetype-utils-2.1.9-21.el4.ia64.rpm ppc: freetype-2.1.9-21.el4.ppc.rpm freetype-2.1.9-21.el4.ppc64.rpm freetype-debuginfo-2.1.9-21.el4.ppc.rpm freetype-debuginfo-2.1.9-21.el4.ppc64.rpm freetype-demos-2.1.9-21.el4.ppc.rpm freetype-devel-2.1.9-21.el4.ppc.rpm freetype-utils-2.1.9-21.el4.ppc.rpm s390: freetype-2.1.9-21.el4.s390.rpm freetype-debuginfo-2.1.9-21.el4.s390.rpm freetype-demos-2.1.9-21.el4.s390.rpm freetype-devel-2.1.9-21.el4.s390.rpm freetype-utils-2.1.9-21.el4.s390.rpm s390x: freetype-2.1.9-21.el4.s390.rpm freetype-2.1.9-21.el4.s390x.rpm freetype-debuginfo-2.1.9-21.el4.s390.rpm freetype-debuginfo-2.1.9-21.el4.s390x.rpm freetype-demos-2.1.9-21.el4.s390x.rpm freetype-devel-2.1.9-21.el4.s390x.rpm freetype-utils-2.1.9-21.el4.s390x.rpm x86_64: freetype-2.1.9-21.el4.i386.rpm freetype-2.1.9-21.el4.x86_64.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.x86_64.rpm freetype-demos-2.1.9-21.el4.x86_64.rpm freetype-devel-2.1.9-21.el4.x86_64.rpm freetype-utils-2.1.9-21.el4.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: Source: i386: freetype-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-demos-2.1.9-21.el4.i386.rpm freetype-devel-2.1.9-21.el4.i386.rpm freetype-utils-2.1.9-21.el4.i386.rpm x86_64: freetype-2.1.9-21.el4.i386.rpm freetype-2.1.9-21.el4.x86_64.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.x86_64.rpm freetype-demos-2.1.9-21.el4.x86_64.rpm freetype-devel-2.1.9-21.el4.x86_64.rpm freetype-utils-2.1.9-21.el4.x86_64.rpm Red Hat Enterprise Linux ES version4: Source: i386: freetype-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-demos-2.1.9-21.el4.i386.rpm freetype-devel-2.1.9-21.el4.i386.rpm freetype-utils-2.1.9-21.el4.i386.rpm ia64: freetype-2.1.9-21.el4.i386.rpm freetype-2.1.9-21.el4.ia64.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.ia64.rpm freetype-demos-2.1.9-21.el4.ia64.rpm freetype-devel-2.1.9-21.el4.ia64.rpm freetype-utils-2.1.9-21.el4.ia64.rpm x86_64: freetype-2.1.9-21.el4.i386.rpm freetype-2.1.9-21.el4.x86_64.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.x86_64.rpm freetype-demos-2.1.9-21.el4.x86_64.rpm freetype-devel-2.1.9-21.el4.x86_64.rpm freetype-utils-2.1.9-21.el4.x86_64.rpm Red Hat Enterprise Linux WS version 4: Source: i386: freetype-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-demos-2.1.9-21.el4.i386.rpm freetype-devel-2.1.9-21.el4.i386.rpm freetype-utils-2.1.9-21.el4.i386.rpm ia64: freetype-2.1.9-21.el4.i386.rpm freetype-2.1.9-21.el4.ia64.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.ia64.rpm freetype-demos-2.1.9-21.el4.ia64.rpm freetype-devel-2.1.9-21.el4.ia64.rpm freetype-utils-2.1.9-21.el4.ia64.rpm x86_64: freetype-2.1.9-21.el4.i386.rpm freetype-2.1.9-21.el4.x86_64.rpm freetype-debuginfo-2.1.9-21.el4.i386.rpm freetype-debuginfo-2.1.9-21.el4.x86_64.rpm freetype-demos-2.1.9-21.el4.x86_64.rpm freetype-devel-2.1.9-21.el4.x86_64.rpm freetype-utils-2.1.9-21.el4.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: freetype-2.2.1-28.el5_7.2.i386.rpm freetype-debuginfo-2.2.1-28.el5_7.2.i386.rpm x86_64: freetype-2.2.1-28.el5_7.2.i386.rpm freetype-2.2.1-28.el5_7.2.x86_64.rpm freetype-debuginfo-2.2.1-28.el5_7.2.i386.rpm freetype-debuginfo-2.2.1-28.el5_7.2.x86_64.rpm RHEL Desktop Workstation (v. 5client): Source: i386: freetype-debuginfo-2.2.1-28.el5_7.2.i386.rpm freetype-demos-2.2.1-28.el5_7.2.i386.rpm freetype-devel-2.2.1-28.el5_7.2.i386.rpm x86_64: freetype-debuginfo-2.2.1-28.el5_7.2.i386.rpm freetype-debuginfo-2.2.1-28.el5_7.2.x86_64.rpm freetype-demos-2.2.1-28.el5_7.2.x86_64.rpm freetype-devel-2.2.1-28.el5_7.2.i386.rpm freetype-devel-2.2.1-28.el5_7.2.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: freetype-2.2.1-28.el5_7.2.i386.rpm freetype-debuginfo-2.2.1-28.el5_7.2.i386.rpm freetype-demos-2.2.1-28.el5_7.2.i386.rpm freetype-devel-2.2.1-28.el5_7.2.i386.rpm ia64: freetype-2.2.1-28.el5_7.2.i386.rpm freetype-2.2.1-28.el5_7.2.ia64.rpm freetype-debuginfo-2.2.1-28.el5_7.2.i386.rpm freetype-debuginfo-2.2.1-28.el5_7.2.ia64.rpm freetype-demos-2.2.1-28.el5_7.2.ia64.rpm freetype-devel-2.2.1-28.el5_7.2.ia64.rpm ppc: freetype-2.2.1-28.el5_7.2.ppc.rpm freetype-2.2.1-28.el5_7.2.ppc64.rpm freetype-debuginfo-2.2.1-28.el5_7.2.ppc.rpm freetype-debuginfo-2.2.1-28.el5_7.2.ppc64.rpm freetype-demos-2.2.1-28.el5_7.2.ppc.rpm freetype-devel-2.2.1-28.el5_7.2.ppc.rpm freetype-devel-2.2.1-28.el5_7.2.ppc64.rpm s390x: freetype-2.2.1-28.el5_7.2.s390.rpm freetype-2.2.1-28.el5_7.2.s390x.rpm freetype-debuginfo-2.2.1-28.el5_7.2.s390.rpm freetype-debuginfo-2.2.1-28.el5_7.2.s390x.rpm freetype-demos-2.2.1-28.el5_7.2.s390x.rpm freetype-devel-2.2.1-28.el5_7.2.s390.rpm freetype-devel-2.2.1-28.el5_7.2.s390x.rpm x86_64: freetype-2.2.1-28.el5_7.2.i386.rpm freetype-2.2.1-28.el5_7.2.x86_64.rpm freetype-debuginfo-2.2.1-28.el5_7.2.i386.rpm freetype-debuginfo-2.2.1-28.el5_7.2.x86_64.rpm freetype-demos-2.2.1-28.el5_7.2.x86_64.rpm freetype-devel-2.2.1-28.el5_7.2.i386.rpm freetype-devel-2.2.1-28.el5_7.2.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 6): Source: i386: freetype-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm x86_64: freetype-2.3.11-6.el6_1.8.i686.rpm freetype-2.3.11-6.el6_1.8.x86_64.rpm freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.x86_64.rpm RedHat Enterprise Linux Desktop Optional (v. 6): Source: i386: freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-demos-2.3.11-6.el6_1.8.i686.rpm freetype-devel-2.3.11-6.el6_1.8.i686.rpm x86_64: freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.x86_64.rpm freetype-demos-2.3.11-6.el6_1.8.x86_64.rpm freetype-devel-2.3.11-6.el6_1.8.i686.rpm freetype-devel-2.3.11-6.el6_1.8.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: freetype-2.3.11-6.el6_1.8.i686.rpm freetype-2.3.11-6.el6_1.8.x86_64.rpm freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.x86_64.rpm freetype-demos-2.3.11-6.el6_1.8.x86_64.rpm freetype-devel-2.3.11-6.el6_1.8.i686.rpm freetype-devel-2.3.11-6.el6_1.8.x86_64.rpm Red Hat Enterprise Linux Server (v. 6): Source: i386: freetype-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-devel-2.3.11-6.el6_1.8.i686.rpm ppc64: freetype-2.3.11-6.el6_1.8.ppc.rpm freetype-2.3.11-6.el6_1.8.ppc64.rpm freetype-debuginfo-2.3.11-6.el6_1.8.ppc.rpm freetype-debuginfo-2.3.11-6.el6_1.8.ppc64.rpm freetype-devel-2.3.11-6.el6_1.8.ppc.rpm freetype-devel-2.3.11-6.el6_1.8.ppc64.rpm s390x: freetype-2.3.11-6.el6_1.8.s390.rpm freetype-2.3.11-6.el6_1.8.s390x.rpm freetype-debuginfo-2.3.11-6.el6_1.8.s390.rpm freetype-debuginfo-2.3.11-6.el6_1.8.s390x.rpm freetype-devel-2.3.11-6.el6_1.8.s390.rpm freetype-devel-2.3.11-6.el6_1.8.s390x.rpm x86_64: freetype-2.3.11-6.el6_1.8.i686.rpm freetype-2.3.11-6.el6_1.8.x86_64.rpm freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.x86_64.rpm freetype-devel-2.3.11-6.el6_1.8.i686.rpm freetype-devel-2.3.11-6.el6_1.8.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.6): Source: i386: freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-demos-2.3.11-6.el6_1.8.i686.rpm ppc64: freetype-debuginfo-2.3.11-6.el6_1.8.ppc64.rpm freetype-demos-2.3.11-6.el6_1.8.ppc64.rpm s390x: freetype-debuginfo-2.3.11-6.el6_1.8.s390x.rpm freetype-demos-2.3.11-6.el6_1.8.s390x.rpm x86_64: freetype-debuginfo-2.3.11-6.el6_1.8.x86_64.rpm freetype-demos-2.3.11-6.el6_1.8.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: freetype-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-devel-2.3.11-6.el6_1.8.i686.rpm x86_64: freetype-2.3.11-6.el6_1.8.i686.rpm freetype-2.3.11-6.el6_1.8.x86_64.rpm freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-debuginfo-2.3.11-6.el6_1.8.x86_64.rpm freetype-devel-2.3.11-6.el6_1.8.i686.rpm freetype-devel-2.3.11-6.el6_1.8.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 6): Source: i386: freetype-debuginfo-2.3.11-6.el6_1.8.i686.rpm freetype-demos-2.3.11-6.el6_1.8.i686.rpm x86_64: freetype-debuginfo-2.3.11-6.el6_1.8.x86_64.rpm freetype-demos-2.3.11-6.el6_1.8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2011-3439 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2011 Red Hat, Inc. . Important security patch issued for freetype in Red Hat to rectify various input validation vulnerabilities affecting multiple releases.. Freetype Security, Red Hat Advisory, Update Packages. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Nov 16, 2011 •Important Red Hat
Banner 1 1028x280 1708121660 1771599717
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisoryRed Hatkernel update

Red Hat Enterprise Linux 4.7 RHSA-2010:0677 Important Stack Overflow Risk

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS). -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2010:0677-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0677.html Issue date: 2010-09-07 CVE Names: CVE-2010-2240 ==================================================================== 1. Summary: Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 4.7.z - i386, ia64, noarch, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux ES version 4.7.z - i386, ia64, noarch, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: * When an application has a stack overflow, the stack could silently overwrite another memory mapped area instead of a segmentation fault occurring, which could cause an application to execute arbitrary code, possibly leading to privilege escalation. It is known that the X Window System server can be used to trigger this flaw. (CVE-2010-2240, Important) Red Hat would like to thank the X.Org security team for reporting this issue. Upstream acknowledges Rafal Wojtczuk as the original reporter. Users should upgrade to theseupdated packages, which contain backported patches to correct this issue. The system must be rebooted for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system. 5. Bugs fixed (http://bugzilla.redhat.com/): 606611 - CVE-2010-2240 kernel: mm: keep a guard page below a grow-down stack segment 6. Package List: Red Hat Enterprise Linux AS version4.7.z: Source: kernel-2.6.9-78.0.32.EL.src.rpm i386: kernel-2.6.9-78.0.32.EL.i686.rpm kernel-debuginfo-2.6.9-78.0.32.EL.i686.rpm kernel-devel-2.6.9-78.0.32.EL.i686.rpm kernel-hugemem-2.6.9-78.0.32.EL.i686.rpm kernel-hugemem-devel-2.6.9-78.0.32.EL.i686.rpm kernel-smp-2.6.9-78.0.32.EL.i686.rpm kernel-smp-devel-2.6.9-78.0.32.EL.i686.rpm kernel-xenU-2.6.9-78.0.32.EL.i686.rpm kernel-xenU-devel-2.6.9-78.0.32.EL.i686.rpm ia64: kernel-2.6.9-78.0.32.EL.ia64.rpm kernel-debuginfo-2.6.9-78.0.32.EL.ia64.rpm kernel-devel-2.6.9-78.0.32.EL.ia64.rpm kernel-largesmp-2.6.9-78.0.32.EL.ia64.rpm kernel-largesmp-devel-2.6.9-78.0.32.EL.ia64.rpm noarch: kernel-doc-2.6.9-78.0.32.EL.noarch.rpm ppc: kernel-2.6.9-78.0.32.EL.ppc64.rpm kernel-2.6.9-78.0.32.EL.ppc64iseries.rpm kernel-debuginfo-2.6.9-78.0.32.EL.ppc64.rpm kernel-debuginfo-2.6.9-78.0.32.EL.ppc64iseries.rpm kernel-devel-2.6.9-78.0.32.EL.ppc64.rpm kernel-devel-2.6.9-78.0.32.EL.ppc64iseries.rpm kernel-largesmp-2.6.9-78.0.32.EL.ppc64.rpm kernel-largesmp-devel-2.6.9-78.0.32.EL.ppc64.rpm s390: kernel-2.6.9-78.0.32.EL.s390.rpm kernel-debuginfo-2.6.9-78.0.32.EL.s390.rpm kernel-devel-2.6.9-78.0.32.EL.s390.rpm s390x: kernel-2.6.9-78.0.32.EL.s390x.rpm kernel-debuginfo-2.6.9-78.0.32.EL.s390x.rpm kernel-devel-2.6.9-78.0.32.EL.s390x.rpm x86_64: kernel-2.6.9-78.0.32.EL.x86_64.rpm kernel-debuginfo-2.6.9-78.0.32.EL.x86_64.rpm kernel-devel-2.6.9-78.0.32.EL.x86_64.rpm kernel-largesmp-2.6.9-78.0.32.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-78.0.32.EL.x86_64.rpm kernel-smp-2.6.9-78.0.32.EL.x86_64.rpm kernel-smp-devel-2.6.9-78.0.32.EL.x86_64.rpm kernel-xenU-2.6.9-78.0.32.EL.x86_64.rpm kernel-xenU-devel-2.6.9-78.0.32.EL.x86_64.rpm Red Hat Enterprise Linux ES version4.7.z: Source: kernel-2.6.9-78.0.32.EL.src.rpm i386: kernel-2.6.9-78.0.32.EL.i686.rpm kernel-debuginfo-2.6.9-78.0.32.EL.i686.rpm kernel-devel-2.6.9-78.0.32.EL.i686.rpm kernel-hugemem-2.6.9-78.0.32.EL.i686.rpm kernel-hugemem-devel-2.6.9-78.0.32.EL.i686.rpm kernel-smp-2.6.9-78.0.32.EL.i686.rpm kernel-smp-devel-2.6.9-78.0.32.EL.i686.rpm kernel-xenU-2.6.9-78.0.32.EL.i686.rpm kernel-xenU-devel-2.6.9-78.0.32.EL.i686.rpm ia64: kernel-2.6.9-78.0.32.EL.ia64.rpm kernel-debuginfo-2.6.9-78.0.32.EL.ia64.rpm kernel-devel-2.6.9-78.0.32.EL.ia64.rpm kernel-largesmp-2.6.9-78.0.32.EL.ia64.rpm kernel-largesmp-devel-2.6.9-78.0.32.EL.ia64.rpm noarch: kernel-doc-2.6.9-78.0.32.EL.noarch.rpm x86_64: kernel-2.6.9-78.0.32.EL.x86_64.rpm kernel-debuginfo-2.6.9-78.0.32.EL.x86_64.rpm kernel-devel-2.6.9-78.0.32.EL.x86_64.rpm kernel-largesmp-2.6.9-78.0.32.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-78.0.32.EL.x86_64.rpm kernel-smp-2.6.9-78.0.32.EL.x86_64.rpm kernel-smp-devel-2.6.9-78.0.32.EL.x86_64.rpm kernel-xenU-2.6.9-78.0.32.EL.x86_64.rpm kernel-xenU-devel-2.6.9-78.0.32.EL.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2010-2240 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2010 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFMhk/QXlSAg2UNWIIRAqoWAJ9JwBUdCUUty7RY8WlkCElcKSR/EwCePAiK aNVYvqTYmWEdn/MbJnHiuYE=jF2h -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . New kernel updates released addressing critical security vulnerabilities in Red Hat Enterprise Linux 4.7, aimed at mitigating privilege escalation threats.. Red Hat Enterprise Linux, Kernel Update, Security Patches, PrivilegeEscalation. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Sep 07, 2010 •Important Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderateexploit

Red Hat Enterprise Linux: RHSA-2010:0129-01 Moderate: CUPS Exploit

Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: cups security update Advisory ID: RHSA-2010:0129-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0129.html Issue date: 2010-03-03 CVE Names: CVE-2010-0302 ==================================================================== 1. Summary: Updated cups packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX operating systems. It was discovered that the Red Hat Security Advisory RHSA-2009:1595 did not fully correct the use-after-free flaw in the way CUPS handled references in its file descriptors-handling interface. A remote attacker could send specially-crafted queries to the CUPS server, causing it to crash. (CVE-2010-0302) Users of cups are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the update, the cupsd daemon will be restarted automatically. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed(http://bugzilla.redhat.com/): 557775 - CVE-2010-0302 cups Incomplete fix for CVE-2009-3553 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: cups-1.3.7-11.el5_4.6.i386.rpm cups-debuginfo-1.3.7-11.el5_4.6.i386.rpm cups-libs-1.3.7-11.el5_4.6.i386.rpm cups-lpd-1.3.7-11.el5_4.6.i386.rpm x86_64: cups-1.3.7-11.el5_4.6.x86_64.rpm cups-debuginfo-1.3.7-11.el5_4.6.i386.rpm cups-debuginfo-1.3.7-11.el5_4.6.x86_64.rpm cups-libs-1.3.7-11.el5_4.6.i386.rpm cups-libs-1.3.7-11.el5_4.6.x86_64.rpm cups-lpd-1.3.7-11.el5_4.6.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: cups-debuginfo-1.3.7-11.el5_4.6.i386.rpm cups-devel-1.3.7-11.el5_4.6.i386.rpm x86_64: cups-debuginfo-1.3.7-11.el5_4.6.i386.rpm cups-debuginfo-1.3.7-11.el5_4.6.x86_64.rpm cups-devel-1.3.7-11.el5_4.6.i386.rpm cups-devel-1.3.7-11.el5_4.6.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: cups-1.3.7-11.el5_4.6.i386.rpm cups-debuginfo-1.3.7-11.el5_4.6.i386.rpm cups-devel-1.3.7-11.el5_4.6.i386.rpm cups-libs-1.3.7-11.el5_4.6.i386.rpm cups-lpd-1.3.7-11.el5_4.6.i386.rpm ia64: cups-1.3.7-11.el5_4.6.ia64.rpm cups-debuginfo-1.3.7-11.el5_4.6.i386.rpm cups-debuginfo-1.3.7-11.el5_4.6.ia64.rpm cups-devel-1.3.7-11.el5_4.6.ia64.rpm cups-libs-1.3.7-11.el5_4.6.i386.rpm cups-libs-1.3.7-11.el5_4.6.ia64.rpm cups-lpd-1.3.7-11.el5_4.6.ia64.rpm ppc: cups-1.3.7-11.el5_4.6.ppc.rpm cups-debuginfo-1.3.7-11.el5_4.6.ppc.rpm cups-debuginfo-1.3.7-11.el5_4.6.ppc64.rpm cups-devel-1.3.7-11.el5_4.6.ppc.rpm cups-devel-1.3.7-11.el5_4.6.ppc64.rpm cups-libs-1.3.7-11.el5_4.6.ppc.rpm cups-libs-1.3.7-11.el5_4.6.ppc64.rpm cups-lpd-1.3.7-11.el5_4.6.ppc.rpm s390x: cups-1.3.7-11.el5_4.6.s390x.rpm cups-debuginfo-1.3.7-11.el5_4.6.s390.rpm cups-debuginfo-1.3.7-11.el5_4.6.s390x.rpm cups-devel-1.3.7-11.el5_4.6.s390.rpm cups-devel-1.3.7-11.el5_4.6.s390x.rpm cups-libs-1.3.7-11.el5_4.6.s390.rpm cups-libs-1.3.7-11.el5_4.6.s390x.rpm cups-lpd-1.3.7-11.el5_4.6.s390x.rpm x86_64: cups-1.3.7-11.el5_4.6.x86_64.rpm cups-debuginfo-1.3.7-11.el5_4.6.i386.rpm cups-debuginfo-1.3.7-11.el5_4.6.x86_64.rpm cups-devel-1.3.7-11.el5_4.6.i386.rpm cups-devel-1.3.7-11.el5_4.6.x86_64.rpm cups-libs-1.3.7-11.el5_4.6.i386.rpm cups-libs-1.3.7-11.el5_4.6.x86_64.rpm cups-lpd-1.3.7-11.el5_4.6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2010-0302 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2010 Red Hat, Inc. . The latest cups updates for Red Hat Enterprise Linux address a significant security vulnerability affecting remote printservices.. cups security update, Red Hat advisory, Linux security patch, CUPS exploit fix. . LinuxSecurity.com Team

Calendar%202 Mar 03, 2010 Red Hat
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics