Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
217
security advisorymoderateauthenticationOracle Linux 8: OpenSSH Moderate ELSA-2025-23481 CVE-2025-61984
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:. Oracle Linux Security Advisory ELSA-2025-23481 http://linux.oracle.com/errata/ELSA-2025-23481.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: openssh-8.0p1-27.0.1.el8_10.x86_64.rpm openssh-askpass-8.0p1-27.0.1.el8_10.x86_64.rpm openssh-cavs-8.0p1-27.0.1.el8_10.x86_64.rpm openssh-clients-8.0p1-27.0.1.el8_10.x86_64.rpm openssh-keycat-8.0p1-27.0.1.el8_10.x86_64.rpm openssh-ldap-8.0p1-27.0.1.el8_10.x86_64.rpm openssh-server-8.0p1-27.0.1.el8_10.x86_64.rpm pam_ssh_agent_auth-0.10.3-7.27.0.1.el8_10.x86_64.rpm aarch64: openssh-8.0p1-27.0.1.el8_10.aarch64.rpm openssh-askpass-8.0p1-27.0.1.el8_10.aarch64.rpm openssh-cavs-8.0p1-27.0.1.el8_10.aarch64.rpm openssh-clients-8.0p1-27.0.1.el8_10.aarch64.rpm openssh-keycat-8.0p1-27.0.1.el8_10.aarch64.rpm openssh-ldap-8.0p1-27.0.1.el8_10.aarch64.rpm openssh-server-8.0p1-27.0.1.el8_10.aarch64.rpm pam_ssh_agent_auth-0.10.3-7.27.0.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/openssh-8.0p1-27.0.1.el8_10.src.rpm Related CVEs: CVE-2025-61984 CVE-2025-61985 Description of changes: [8.0p1-27.0.1] - Update upstream references [Orabug: 36587718] [8.0p1-27] - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390 _______________________________________________ El-errata mailing list
Dec 20, 2025
Oracle
100
security advisorybuffer overflowimportantSUSE: 2021:3582-1 Important: OpenSC Stack Overflow Threat
An update that fixes four vulnerabilities is now available. . SUSE Security Update: Security update for opensc ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:3582-1 Rating: important References: #1191957 #1191992 #1192000 #1192005 Cross-References: CVE-2021-42779 CVE-2021-42780 CVE-2021-42781 CVE-2021-42782 CVSS scores: CVE-2021-42779 (SUSE): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-42780 (SUSE): 2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-42781 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVE-2021-42782 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud 8 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP2-BCL HPE Helion Openstack 8 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for opensc fixes the following issues: - CVE-2021-42780: Fixed use after return in insert_pin() (bsc#1192005). - CVE-2021-42779: Fixed use after free in sc_file_valid() (bsc#1191992). - CVE-2021-42781: Fixed multiple heap buffer overflows in pkcs15-oberthur.c (bsc#1192000). - CVE-2021-42782: Stack buffer overflow issues in various places (bsc#1191957). PatchInstructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2021-3582=1 - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-3582=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2021-3582=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2021-3582=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2021-3582=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-3582=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-3582=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2021-3582=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-3582=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-3582=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2021-3582=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2021-3582=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE OpenStack Cloud Crowbar 8 (x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE OpenStack Cloud 9 (x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE OpenStack Cloud 8 (x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 - HPE Helion Openstack 8 (x86_64): opensc-0.13.0-3.19.1 opensc-debuginfo-0.13.0-3.19.1 opensc-debugsource-0.13.0-3.19.1 References: https://www.suse.com/security/cve/CVE-2021-42779.html https://www.suse.com/security/cve/CVE-2021-42780.html https://www.suse.com/security/cve/CVE-2021-42781.html https://www.suse.com/security/cve/CVE-2021-42782.html https://bugzilla.suse.com/1191957 https://bugzilla.suse.com/1191992 https://bugzilla.suse.com/1192000 https://bugzilla.suse.com/1192005 . SUSE has issued a security patch for opensc, tackling various vulnerabilities within the system. The advisory outlines the specific issues and steps to implement updates.. SUSE Opensc Update, Patch Instructions, Buffer Overflow Fixes, Security Advisory. . Severity:Important. LinuxSecurity.com Team
Oct 29, 2021
•Important
SuSE
98
security advisorymoderateRed HatRed Hat: RHSA-2004:021-01 Moderate: Mailman Script Injection Vulnerability
Dirk Mueller discovered a cross-site scripting bug in the admin interfacein versions of Mailman 2.1 before 2.1.4. The Common Vulnerabilities andExposures project (cve.mitre.org) has assigned the name CAN-2003-0965 tothis issue.. --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated mailman packages close cross-site scripting vulnerabilities Advisory ID: RHSA-2004:020-01 Issue date: 2004-02-05 Updated on: 2004-02-05 Product: Red Hat Linux Keywords: xss Cross references: Obsoletes: RHBA-2003:179 CVE Names: CAN-2003-0965 CAN-2003-0992 --------------------------------------------------------------------- 1. Topic: Updated mailman packages that close various cross-site scripting vulnerabilities are now available. 2. Relevant releases/architectures: Red Hat Linux 9 - i386 3. Problem description: Mailman is a mailing list manager. Dirk Mueller discovered a cross-site scripting bug in the admin interface in versions of Mailman 2.1 before 2.1.4. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0965 to this issue. A cross-site scripting bug in the 'create' CGI script affects versions of Mailman 2.1 before 2.1.3. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0992 to this issue. Users of Mailman are advised to upgrade to the erratum packages, which include backported security fixes and are not vulnerable to these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards(*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. RPMs required: Red Hat Linux 9: SRPMS: i386: 6. Verification: MD5 sum Package Name -------------------------------------------------------------------------- 40acda00aa52b23dbb068cd0bf48d898 9/en/os/SRPMS/mailman-2.1.1-5.src.rpm 6efb83ea4e0658457ca3dd883f4d533d 9/en/os/i386/mailman-2.1.1-5.i386.rpm These packages are GPG signed by Red Hat for security. Our key is available from https://access.redhat.com/security/team/key You can verify each package with the following command: rpm --checksig -v If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: md5sum 7. References: CVE -CVE-2003-0965 CVE -CVE-2003-0992 8. Contact: The Red Hat security contact is . More contact details at https://www.redhat.com/en/products Copyright 2003 Red Hat, Inc. . Recent revisions in Red Hat's mail services bolster defenses against possible cross-site scripting threats. Immediate application is recommended.. Mailman Update, Cross-Site Scripting, Red Hat Advisory. . LinuxSecurity.com Team
Feb 05, 2004
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!