Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

Stay Secure with the Latest Linux Advisories

Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 LTS python-pip Moderate DoS Regression Fix USN-8344-3

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS GStreamer Base Significant DoS Attack Vulnerability Alert

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS MySQL Important Security Issues USN-8363-2

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 LTS nginx Security Advisory for Critical DoS Vulnerabilities

Calendar White Jun 03, 2026
Critical
Oracle Large Esm H900
Oracle

Oracle Linux 8 gnutls Important Buffer Overflow Auth Bypass ELSA-2026-20611

Calendar White Jun 03, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 ELSA-2026-22315 compat-openssl10 Moderate DoS Fix

Calendar White Jun 02, 2026
moderate
Oracle Large Esm H800
Oracle

Oracle Linux 8 httpd Important Denial of Service Vuln ELSA-2026-22140

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 Important Kernel Security Advisory ELSA-2026-21706

Calendar White Jun 02, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

Calendar White Jun 02, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -3 articles for you...
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorycriticalarbitrary access

Mageia 9: 2024-0060 Critical: FontTools XXE Injection Attack

As of fonttools> =4.28.2 the subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an attacker to resolve arbitrary entities when a candidate font (OT-SVG fonts), which contains a SVG table, is parsed. This allows attackers to include arbitrary files from the filesystem . MGASA-2024-0060 - Updated fonttools packages fix security vulnerabilities Publication date: 14 Mar 2024 URL: https://advisories.mageia.org/MGASA-2024-0060.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-45139 As of fonttools> =4.28.2 the subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an attacker to resolve arbitrary entities when a candidate font (OT-SVG fonts), which contains a SVG table, is parsed. This allows attackers to include arbitrary files from the filesystem fontTools is running on or make web requests from the host system. References: - https://bugs.mageia.org/show_bug.cgi?id=32955 - https://www.openwall.com/lists/oss-security/2024/03/08/2 - https://github.com/fonttools/fonttools/security/advisories/GHSA-6673-4983-2vx5 - https://www.cve.org/CVERecord?id=CVE-2023-45139 SRPMS: - 9/core/fonttools-4.38.0-2.1.mga9 . Revised fonttools libraries in Mageia address security concerns linked to XXE vulnerability present in OT-SVG typefaces.. FontTools Security Update, Mageia Security Advisory, XXE Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 14, 2024 •Critical Mageia
217
Ls Advisories Oracle Esm H240
Price Tag 1security advisoryupdateimportant

Oracle Linux 7: ELSA-2022-8799 Important: Pki-Core XXE Risk

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-8799 https://linux.oracle.com/errata/ELSA-2022-8799.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: aarch64: pki-base-10.5.18-24.el7_9.noarch.rpm pki-base-java-10.5.18-24.el7_9.noarch.rpm pki-ca-10.5.18-24.el7_9.noarch.rpm pki-kra-10.5.18-24.el7_9.noarch.rpm pki-server-10.5.18-24.el7_9.noarch.rpm pki-symkey-10.5.18-24.el7_9.aarch64.rpm pki-tools-10.5.18-24.el7_9.aarch64.rpm pki-javadoc-10.5.18-24.el7_9.noarch.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/pki-core-10.5.18-24.el7_9.src.rpm Related CVEs: CVE-2022-2414 Description of changes: [10.5.18-24] - ########################################################################## - # RHEL 7.9 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen) - ########################################################################## - # RHCS 9.7 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [certificate_system_9.7.z] (ckelley, mharmsen) _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux Security Notice ELSA-2022-8799 provides a critical patch for the pki-core application on aarch64 architecture.. Oracle Linux Security,pki-core update,security update,Oracle Linux,ELSA-2022-8799. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 06, 2022 •Important Oracle
Banner 3 1028x280 1708121785 1771599793
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryred hatimportant

Red Hat Enterprise Linux 7 RHSA-2022:8799-01 Important pki-core XXE Issue

An update for pki-core is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: pki-core security update Advisory ID: RHSA-2022:8799-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:8799 Issue date: 2022-12-06 CVE Names: CVE-2022-2414 ==================================================================== 1. Summary: An update for pki-core is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64le, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - noarch, ppc64, ppc64le, s390x Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - noarch 3. Description: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Security Fix(es): * pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For detailson how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2104676 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE 6. Package List: Red Hat Enterprise Linux Client Optional (v. 7): Source: pki-core-10.5.18-24.el7_9.src.rpm noarch: pki-base-10.5.18-24.el7_9.noarch.rpm pki-base-java-10.5.18-24.el7_9.noarch.rpm pki-ca-10.5.18-24.el7_9.noarch.rpm pki-javadoc-10.5.18-24.el7_9.noarch.rpm pki-kra-10.5.18-24.el7_9.noarch.rpm pki-server-10.5.18-24.el7_9.noarch.rpm x86_64: pki-core-debuginfo-10.5.18-24.el7_9.x86_64.rpm pki-symkey-10.5.18-24.el7_9.x86_64.rpm pki-tools-10.5.18-24.el7_9.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): Source: pki-core-10.5.18-24.el7_9.src.rpm noarch: pki-base-10.5.18-24.el7_9.noarch.rpm pki-base-java-10.5.18-24.el7_9.noarch.rpm pki-ca-10.5.18-24.el7_9.noarch.rpm pki-javadoc-10.5.18-24.el7_9.noarch.rpm pki-kra-10.5.18-24.el7_9.noarch.rpm pki-server-10.5.18-24.el7_9.noarch.rpm x86_64: pki-core-debuginfo-10.5.18-24.el7_9.x86_64.rpm pki-symkey-10.5.18-24.el7_9.x86_64.rpm pki-tools-10.5.18-24.el7_9.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: pki-core-10.5.18-24.el7_9.src.rpm noarch: pki-base-10.5.18-24.el7_9.noarch.rpm pki-base-java-10.5.18-24.el7_9.noarch.rpm pki-ca-10.5.18-24.el7_9.noarch.rpm pki-kra-10.5.18-24.el7_9.noarch.rpm pki-server-10.5.18-24.el7_9.noarch.rpm ppc64le: pki-core-debuginfo-10.5.18-24.el7_9.ppc64le.rpm pki-tools-10.5.18-24.el7_9.ppc64le.rpm x86_64: pki-core-debuginfo-10.5.18-24.el7_9.x86_64.rpm pki-symkey-10.5.18-24.el7_9.x86_64.rpm pki-tools-10.5.18-24.el7_9.x86_64.rpm Red Hat Enterprise Linux Server Optional (v.7): Source: pki-core-10.5.18-24.el7_9.src.rpm noarch: pki-base-10.5.18-24.el7_9.noarch.rpm pki-base-java-10.5.18-24.el7_9.noarch.rpm pki-ca-10.5.18-24.el7_9.noarch.rpm pki-javadoc-10.5.18-24.el7_9.noarch.rpm pki-kra-10.5.18-24.el7_9.noarch.rpm pki-server-10.5.18-24.el7_9.noarch.rpm ppc64: pki-core-debuginfo-10.5.18-24.el7_9.ppc64.rpm pki-symkey-10.5.18-24.el7_9.ppc64.rpm pki-tools-10.5.18-24.el7_9.ppc64.rpm ppc64le: pki-core-debuginfo-10.5.18-24.el7_9.ppc64le.rpm pki-symkey-10.5.18-24.el7_9.ppc64le.rpm s390x: pki-core-debuginfo-10.5.18-24.el7_9.s390x.rpm pki-symkey-10.5.18-24.el7_9.s390x.rpm pki-tools-10.5.18-24.el7_9.s390x.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: pki-core-10.5.18-24.el7_9.src.rpm noarch: pki-base-10.5.18-24.el7_9.noarch.rpm pki-base-java-10.5.18-24.el7_9.noarch.rpm pki-ca-10.5.18-24.el7_9.noarch.rpm pki-kra-10.5.18-24.el7_9.noarch.rpm pki-server-10.5.18-24.el7_9.noarch.rpm x86_64: pki-core-debuginfo-10.5.18-24.el7_9.x86_64.rpm pki-symkey-10.5.18-24.el7_9.x86_64.rpm pki-tools-10.5.18-24.el7_9.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): noarch: pki-javadoc-10.5.18-24.el7_9.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2022-2414 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBY487xdzjgjWX9erEAQg5oQ//aEHlyg76MCBy/Czm84niXRrvfg+eJzzh A3AzrX3LMRWYrJSfv+NFx2eEaZtzwqi0O1Dser5NM6Wper9Qvp2XrtZTjJmPxu03 LMEYFeMXJXPMEaO+luV+gJe+BfXCGo7yGbnHUZbKYapr1cLiphU+Lt3phx+fZu9P 3mQdGfCuaCfi+7uzctc9ybYy1bvi/UqbQ0K+f68XrFbp4+wM+QeLFvvqx8eIC2Mk aLKZYTePpSCk6YSlSZTVfDIWhX5fz6E+LXD8CqNlcBYNRY3JAhdYthtMPtS7wthk ioPQ4mWERDR+W5WTJoH11G6iiORsnziYK8Ea5+DIKDSxPtmdFYaEUwaUpP5izCkQ q9LkvwN7jBgdFbam/x77/yLSkBSYBJEs5nOc+xr9FvJnNLZE6deHYzQYhlD/a5Ha msiHvkStwKNudFy4AqVn9ytyH74kpUImVMh2/4TIXPAypdmU00rtV8rAkGZo2XON M9c6/p72cW9G/GpgTuU5enpafmqkB7EZUS77nX2S+uCWRmL3mC/38rm6THbioMkw 8/BdLK12waoVzs8tjK/ncuziJujIRaKBAa/nrmqts2CMt4/yytPLYrVhzkUTqHiM cZJCCyo1Ra4+mDq/TogwSnMxIY6j6LFbfFkzzUIMtHp30a87Bp0yvy3js8E3+i6C 5W4lq2gL0Jk=jk91 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Red Hat issued a critical security patch for pki-core targeting XXE vulnerabilities in Enterprise Linux 7 environments.. Red Hat Security,pki-core Update,Important Security Advisory,Linux Security Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 06, 2022 •Important Red Hat
197
Ls Advisories Deblts Esm H240
Price Tag 1security advisorycriticaldebian

Debian: DLA-2678-1 Critical Update for Ruby Nokogiri XXE Vulnerability

An XXE vulnerability was found in Nokogiri, a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. XML Schemas parsed by Nokogiri::XML::Schema were trusted by default, allowing . -------------------------------------------------------------------------Debian LTS Advisory DLA-2678-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Markus Koschany June 06, 2021 https://wiki.debian.org/LTS -------------------------------------------------------------------------Package : ruby-nokogiri Version : 1.6.8.1-1+deb9u1 CVE ID : CVE-2020-26247 Debian Bug : 978967 An XXE vulnerability was found in Nokogiri, a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. XML Schemas parsed by Nokogiri::XML::Schema were trusted by default, allowing external resources to be accessed over the network, potentially enabling XXE or SSRF attacks. The new default behavior is to treat all input as untrusted. The upstream advisory provides further information how to mitigate the problem or restore the old behavior again. https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-vr8q-g5c7-m54m For Debian 9 stretch, this problem has been fixed in version 1.6.8.1-1+deb9u1. We recommend that you upgrade your ruby-nokogiri packages. For the detailed security status of ruby-nokogiri please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/ruby-nokogiri Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . A critical XXE vulnerability in the Ruby library Nokogiri affects versions before 1.12.5, risking sensitive data access; upgrade and review configurations quickly. Debian Security, Ruby Nokogiri, XXE Risk, Security Update. . Severity: Critical.LinuxSecurity.com Team

Calendar 2 Jun 06, 2021 •Critical Debian LTS
Banner 3 1028x280 1708121785 1771599793
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorypackage updatesecurity fix

Red Hat OpenShift: 4.4.33 RHSA-2021:0282-01 Important XXE Issues

Red Hat OpenShift Container Platform release 4.4.33 is now available with updates to packages and images that fix several bugs. This release includes a security update for jenkins-2-plugins, openshift, and openshift-kuryr for Red Hat OpenShift Container Platform 4.4.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: OpenShift Container Platform 4.4.33 packages and security update Advisory ID: RHSA-2021:0282-01 Product: Red Hat OpenShift Enterprise Advisory URL: https://access.redhat.com/errata/RHSA-2021:0282 Issue date: 2021-02-03 CVE Names: CVE-2020-2304 CVE-2020-2305 ==================================================================== 1. Summary: Red Hat OpenShift Container Platform release 4.4.33 is now available with updates to packages and images that fix several bugs. This release includes a security update for jenkins-2-plugins, openshift, and openshift-kuryr for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenShift Container Platform 4.4 - noarch, ppc64le, s390x, x86_64 3. Description: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. Security Fix(es): * jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks (CVE-2020-2304) * jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks (CVE-2020-2305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information,refer to the CVE page(s) listed in the References section. This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.4.33. See the following advisory for the container images for this release: https://access.redhat.com/errata/RHSA-2021:0281 All OpenShift Container Platform 4.4 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift Console or the CLI oc command. Instructions for upgrading a cluster are available at - -between-minor.html#understanding-upgrade-channels_updating-cluster-between - -minor. 4. Solution: For OpenShift Container Platform 4.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.4/html/release_notes/ocp-4-4-release-notes Details on how to access this content are available at - -cli.html. 5. Bugs fixed (https://bugzilla.redhat.com/): 1895939 - CVE-2020-2304 jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks 1895940 - CVE-2020-2305 jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks 1921164 - Placeholder bug for OCP 4.4.z rpm release 6. Package List: Red Hat OpenShift Container Platform 4.4: Source: jenkins-2-plugins-4.4.1611203637-1.el7.src.rpm openshift-4.4.0-202101221150.p0.git.0.f7ab6b8.el7.src.rpm noarch: jenkins-2-plugins-4.4.1611203637-1.el7.noarch.rpm ppc64le: openshift-hyperkube-4.4.0-202101221150.p0.git.0.f7ab6b8.el7.ppc64le.rpm s390x: openshift-hyperkube-4.4.0-202101221150.p0.git.0.f7ab6b8.el7.s390x.rpm x86_64: openshift-hyperkube-4.4.0-202101221150.p0.git.0.f7ab6b8.el7.x86_64.rpm Red Hat OpenShift Container Platform4.4: Source: openshift-4.4.0-202101221150.p0.git.0.f7ab6b8.el8.src.rpm openshift-kuryr-4.4.0-202101082241.p0.git.1821.1a159eb.el8.src.rpm noarch: openshift-kuryr-cni-4.4.0-202101082241.p0.git.1821.1a159eb.el8.noarch.rpm openshift-kuryr-common-4.4.0-202101082241.p0.git.1821.1a159eb.el8.noarch.rpm openshift-kuryr-controller-4.4.0-202101082241.p0.git.1821.1a159eb.el8.noarch.rpm python3-kuryr-kubernetes-4.4.0-202101082241.p0.git.1821.1a159eb.el8.noarch.rpm ppc64le: openshift-hyperkube-4.4.0-202101221150.p0.git.0.f7ab6b8.el8.ppc64le.rpm s390x: openshift-hyperkube-4.4.0-202101221150.p0.git.0.f7ab6b8.el8.s390x.rpm x86_64: openshift-hyperkube-4.4.0-202101221150.p0.git.0.f7ab6b8.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2020-2304 https://access.redhat.com/security/cve/CVE-2020-2305 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYBpw6tzjgjWX9erEAQgVBhAAneQpF4Xzr6qoejZM7YdfrpZ555tCeG5I /CZk2Nf1Net1Rv7wgE+nC95nI1AxqeEFbwlPfG+r8EOz5oAPIBwnSxg9wn+Hw/Hk oR6uj8EdE35Akny9d9UXRJDfWreiswT6tbtOu1/xF7jbW16Z1g97Uh2sgeX6xT8H UxPHkeVH+UWe+7EB5EuhS7Sv+kr97yxCNt5wXut62LiSOSdSBvgmJaHCS3JHYIN8 McTIvY1BER8pSCA4qcGe4gvQXnAy81hNqtSVp9sJzFswABuFPcAf5dD0vINzfRhC XOPzXu4Y2Khp7yRGQrP6RNlhvZsL+L6qhMFZZq7RNyINLl6opwt/jv9lHuRvJ++s KSPamOfcFaekfVa63xgfAb25gkZVfTP3Y6cvPtYxNQnojrOaE84M27eOI5ZhRxfJ Hq0XbcO+2KjYdClsbdr8kXIV7hbu5wjH4XkJlF9XGDnqnaD5IFRgOBSIj06Ibd9n MVjYhs/rcjZnpCkKS2uBXU3umph3gvK80D5Cjvrg4h4uM0WbrGET01z+Y/+AGAHw svguYB8oDMdcT4yrpF7S5K+AzOoUfoXCMXA7alGklbLLFSLue7pVJ+XFJsXteO9m pKHCSKKLlu5I6bwA/cUIhP1U6l7aSl98Lz2WDQaxQTV79PqQG2kN51x6h5t4aNcl 7TA+2cb8ZdU=ORpn -----END PGP SIGNATURE----- -- RHSA-announcemailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu Server 20.04 LTS updated to version 20.04.3, bringing crucial security enhancements and patches for multiple components.. OpenShift Container Platform, Security Updates, Package Fixes. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Feb 03, 2021 •Important Red Hat
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorysecurity issueupdate

Mageia 7: MGASA-2020-0319 Moderate: PostgreSQL JDBC XML Threat

XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692). References: - https://bugs.mageia.org/show_bug.cgi?id=27017 - https://access.redhat.com/errata/RHSA-2020:3176 . MGASA-2020-0319 - Updated postgresql-jdbc packages fix security vulnerability Publication date: 18 Aug 2020 URL: https://advisories.mageia.org/MGASA-2020-0319.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-13692 XML external entity (XXE) vulnerability in PgSQLXML (CVE-2020-13692). References: - https://bugs.mageia.org/show_bug.cgi?id=27017 - https://access.redhat.com/errata/RHSA-2020:3176 - https://www.cve.org/CVERecord?id=CVE-2020-13692 SRPMS: - 7/core/postgresql-jdbc-42.2.5-1.1.mga7 . The Mageia security advisory MGASA-2020-0320 highlights a critical vulnerability in the libxml2 library, detailing risks and essential remediation steps. Mageia Security Advisory, PostgreSQL JDBC, XML Vulnerability, XXE, Security Update. . Severity: Medium. LinuxSecurity.com Team

Calendar 2 Aug 18, 2020 •Medium Mageia
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here