Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
203

Mageia 7: MGASA-2020-0381 Moderate: MediaWiki Cross-Site Scripting

Multiple security issues were discovered in MediaWiki: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate limiting against brute force attempts (CVE-2020-25812, CVE-2020-25813, CVE-2020-25814, CVE-2020-25815, CVE-2020-25827, . MGASA-2020-0381 - Updated mediawiki packages fix security vulnerability Publication date: 30 Sep 2020 URL: https://advisories.mageia.org/MGASA-2020-0381.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-25812, CVE-2020-25813, CVE-2020-25814, CVE-2020-25815, CVE-2020-25827, CVE-2020-25828, CVE-2020-25869 Multiple security issues were discovered in MediaWiki: SpecialUserRights could leak whether a user existed or not, multiple code paths lacked HTML sanitisation allowing for cross-site scripting and TOTP validation applied insufficient rate limiting against brute force attempts (CVE-2020-25812, CVE-2020-25813, CVE-2020-25814, CVE-2020-25815, CVE-2020-25827, CVE-2020-25828). Possible issues with actors not being loaded from the correct database or wiki (CVE-2020-25869). References: - https://bugs.mageia.org/show_bug.cgi?id=27331 - https://lists.wikimedia.org/hyperkitty/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/3VXQLPPJ77EZS3V4GMLWRHFDMOFPAX5H/ - https://lists.wikimedia.org/hyperkitty/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/MUBKHDTKOOFV2IOS4QS3LFINAXBT5INX/ - https://lists.debian.org/debian-security-announce/2020/msg00174.html - https://www.cve.org/CVERecord?id=CVE-2020-25812 - https://www.cve.org/CVERecord?id=CVE-2020-25813 - https://www.cve.org/CVERecord?id=CVE-2020-25814 - https://www.cve.org/CVERecord?id=CVE-2020-25815 - https://www.cve.org/CVERecord?id=CVE-2020-25827 - https://www.cve.org/CVERecord?id=CVE-2020-25828 - https://www.cve.org/CVERecord?id=CVE-2020-25869 SRPMS: - 7/core/mediawiki-1.31.10-1.mga7 . Mageia's mediawiki packages updated to address multiple security flawsincluding cross-site scripting and rate limiting.. MediaWiki Security, Mageia Advisory, Cross-Site Scripting, Rate Limiting. . LinuxSecurity.com Team

Calendar 2 Sep 30, 2020 Mageia
100

SUSE: 2019:3228-1 Important: Linux Kernel Live Patch for SLE 12 SP3

An update that solves four vulnerabilities and has one errata is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3) ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:3228-1 Rating: important References: #1153108 #1156317 #1156321 #1156331 #1157770 Cross-References: CVE-2018-20856 CVE-2019-10220 CVE-2019-13272 CVE-2019-15239 Affected Products: SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server 12-SP3-LTSS ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for the Linux Kernel 4.4.180-94_100 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321). - CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317). - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108). The following bugs were fixed: - Fixed boot up hang revealed by int3 self test (bsc#1157770). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2019-3228=1SUSE-SLE-SAP-12-SP3-2019-3229=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-3228=1 SUSE-SLE-SERVER-12-SP3-2019-3229=1 Package List: - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): kgraft-patch-4_4_180-94_100-default-4-2.1 kgraft-patch-4_4_180-94_100-default-debuginfo-4-2.1 kgraft-patch-4_4_180-94_97-default-6-2.1 kgraft-patch-4_4_180-94_97-default-debuginfo-6-2.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (ppc64le x86_64): kgraft-patch-4_4_180-94_100-default-4-2.1 kgraft-patch-4_4_180-94_100-default-debuginfo-4-2.1 kgraft-patch-4_4_180-94_97-default-6-2.1 kgraft-patch-4_4_180-94_97-default-debuginfo-6-2.1 References: https://www.suse.com/security/cve/CVE-2018-20856.html https://www.suse.com/security/cve/CVE-2019-10220.html https://www.suse.com/security/cve/CVE-2019-13272.html https://www.suse.com/security/cve/CVE-2019-15239.html https://bugzilla.suse.com/1153108 https://bugzilla.suse.com/1156317 https://bugzilla.suse.com/1156321 https://bugzilla.suse.com/1156331 https://bugzilla.suse.com/1157770 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . Important release for openSUSE Linux Kernel addresses several security flaws and mitigates issues concerning user permissions.. SUSE Linux Kernel Patch, Security Update, Privilege Escalation, Kernel Fixes. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 10, 2019 Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here