Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":546,"type":"x","order":1,"pct":78.45,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.31,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.36,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
98

Red Hat: RHSA-2022-4896-01 Severe Security Fixes in Virtualization

An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0] Advisory ID: RHSA-2022:4896-01 Product: Red Hat Virtualization Advisory URL: https://access.redhat.com/errata/RHSA-2022:4896 Issue date: 2022-06-03 CVE Names: CVE-2018-25032 CVE-2021-4028 CVE-2021-4083 CVE-2022-0778 CVE-2022-1271 CVE-2022-24903 CVE-2022-25636 ==================================================================== 1. Summary: An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: RHEL 8-based RHEV-H for RHEV 4 (build requirements) - noarch, x86_64 Red Hat Virtualization 4 Hypervisor for RHEL 8 - x86_64 3. Description: The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. Security Fix(es): * kernel: use-after-freein RDMA listen() (CVE-2021-4028) * kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083) * kernel: heap out of bounds write in nf_dup_netdev.c (CVE-2022-25636) * openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778) * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) * gzip: arbitrary-file-write vulnerability (CVE-2022-1271) * rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fixes: * elfutils package has been update within RHV-H Channel to match the same version released in RHEL (BZ#2038081) * Rebase package(s) to version 1.2.24 For highlights, important fixes, or notable enhancements: see bugs in "Depend On". (BZ#2057338) * Rebase package(s) to version: 4.5.0 Highlights, important fixes, or notable enhancements: (BZ#2057342) * Rebase package(s) to version anaconda-33.16.6.6-1.el8 For highlights and important bug fixes: include UI change for blocking installation if root password is not set. (BZ#1899821) * Red hat Virtualization Host has been rebased on Red Hat Enterprise Linux 8.6 (BZ#1997074) * Previously, concurrent executions of LV refresh (lvchange) failed. This hindered simultaneous starts of virtual machines that have thin-provisioned disks based on the same disk on a block storage domain. In this release, concurrent execution of LV refresh has been fixed in LVM2. (BZ#2020497) * Red Hat Virtualization Host has been rebased on latest Ceph 4.3 (BZ#2090138) * In previous releases systemtap package could have been installed on top of RHV-H from RHV-H channel. With 4.4 SP1 systemtap package installation is not supported anymore (BZ#2052963) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/2974891 5. Bugs fixed (https://bugzilla.redhat.com/): 1899821 - RHVH 4.4.3 anaconda UI proceeds to begin installation without root password provided 1997074 - Rebase RHV-H on RHEL 8.6 2020497 - Need to include lvm2-2.03.14-1.el8 2027201 - CVE-2021-4028 kernel: use-after-free in RDMA listen() 2029923 - CVE-2021-4083 kernel: fget: check that the fd still exists after getting a ref to it 2038081 - Upgrade elfutils to elfutils-0.186-1.el8 2052963 - [DOC] systemtap support dropped in RHV-H 4.4 SP1 2056334 - [RHVH-4.5.0] On UEFI machines, RHVH enters emergency mode when upgraded to 4.5.0 2056745 - sssd-ad can't be installed due to missing deps libsss_idmap 2056830 - CVE-2022-25636 kernel: heap out of bounds write in nf_dup_netdev.c 2057338 - Upgrade imgbased to 1.2.24 2057342 - Upgrade redhat-release-virtualization-host to 4.5.0 2062202 - CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 2073310 - CVE-2022-1271 gzip: arbitrary-file-write vulnerability 2081353 - CVE-2022-24903 rsyslog: Heap-based overflow in TCP syslog server 2086834 - Cannot install sssd daemon needed for AD Authentication 2090138 - Rebase RHV-H on Ceph 4.3 6. Package List: Red Hat Virtualization 4 Hypervisor for RHEL 8: Source: elfutils-0.186-1.el8.src.rpm redhat-virtualization-host-4.5.0-202205291010_8.6.src.rpm x86_64: elfutils-debuginfo-0.186-1.el8.x86_64.rpm elfutils-debuginfod-client-0.186-1.el8.x86_64.rpm elfutils-debuginfod-client-debuginfo-0.186-1.el8.x86_64.rpm elfutils-debuginfod-debuginfo-0.186-1.el8.x86_64.rpm elfutils-debugsource-0.186-1.el8.x86_64.rpm elfutils-devel-0.186-1.el8.x86_64.rpm elfutils-libelf-debuginfo-0.186-1.el8.x86_64.rpm elfutils-libs-debuginfo-0.186-1.el8.x86_64.rpm redhat-virtualization-host-image-update-4.5.0-202205291010_8.6.x86_64.rpm RHEL 8-based RHEV-H for RHEV 4 (buildrequirements): Source: imgbased-1.2.24-1.el8ev.src.rpm ovirt-node-ng-4.4.2-1.el8ev.src.rpm redhat-release-virtualization-host-4.5.0-5.el8ev.src.rpm redhat-virtualization-host-productimg-4.5.0-2.el8.src.rpm noarch: imgbased-1.2.24-1.el8ev.noarch.rpm ovirt-node-ng-nodectl-4.4.2-1.el8ev.noarch.rpm python3-imgbased-1.2.24-1.el8ev.noarch.rpm python3-ovirt-node-ng-nodectl-4.4.2-1.el8ev.noarch.rpm redhat-virtualization-host-image-update-placeholder-4.5.0-5.el8ev.noarch.rpm x86_64: redhat-release-virtualization-host-4.5.0-5.el8ev.x86_64.rpm redhat-release-virtualization-host-content-4.5.0-5.el8ev.x86_64.rpm redhat-virtualization-host-productimg-4.5.0-2.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/cve/CVE-2021-4028 https://access.redhat.com/security/cve/CVE-2021-4083 https://access.redhat.com/security/cve/CVE-2022-0778 https://access.redhat.com/security/cve/CVE-2022-1271 https://access.redhat.com/security/cve/CVE-2022-24903 https://access.redhat.com/security/cve/CVE-2022-25636 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYpp1hNzjgjWX9erEAQigjg//Yd1rq7BifJ+eHKO+aY62G5pReOc9TpsF 1yKtl6xFVrI6Ysm402O89xHvb/4E0KdUrsFKA/omCVyJ3GhDluJeySmh9dRTwnag asjm73t8wFWxczn0PJc0XdSDMp4OLj//H8Uf+pSIWv4ZjBTdjeXoIBJmpFk/Uvj8 5+E8D2mJ4BzX9slCHIEnlPS9S7aVnkjVSXZEYrTLJl9rI9Ol7IJM0jpugZ+U2oCs +Ag3WbtoTI7Y59ycYmPDmYwYPrp8Bh7dKg4tbeiC9HiCtJEsgj9ufnzwPzpjdjmp 2pF0fpnmMkFGRwmNKxRO9GhmepRz41KwfEIRs6NJoujsyWTFEX7EZHpkVi3abCoC jDlpK53Y3rQPmxZY4pUgWA/h1zkkCdibaqDS0V8L7jbp8lZrho1gK/SBN7mXLR2K ZCEi147PL9DDOblgiRb/kZIvpVw8aGe3kuppW73S4QQcbDupFglImOiLZFifvNUR snt5Totx89rfZOZeow4O28tWbXnxos6QkE4SC0feagbDvyI9PqmaXgiugBuq5Es5 IPnwEvHrXU0NACh4k1txE/v/exTK/e5K0WN1/CoqTnFVZufzn7eAv/oFsn7Sb6SS fqnamgBbRicQRnROn5LtBUgYTDoSpIB9NxYZV7EtmXM5JKGnJhfVgzHQneNjh/A2 fi6NFspdKzI=fz0l -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Crucial update for Red Hat Virtualization addresses various bugs, including those with serious security implications for users.. Red Hat Virtualization, Security Update, Bug Fixes. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 03, 2022 Important Red Hat
98

Red Hat 9: RHSA-2022:4592-01 Important: Rsync Zlib Flaw

An update for rsync is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: rsync security update Advisory ID: RHSA-2022:4592-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:4592 Issue date: 2022-05-18 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for rsync is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - noarch Red Hat Enterprise Linux BaseOS (v. 9) - aarch64, ppc64le, s390x, x86_64 3. Description: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. Package List: Red Hat Enterprise Linux AppStream (v. 9): noarch: rsync-daemon-3.2.3-9.el9_0.1.noarch.rpm Red Hat Enterprise Linux BaseOS (v. 9): Source: rsync-3.2.3-9.el9_0.1.src.rpm aarch64: rsync-3.2.3-9.el9_0.1.aarch64.rpm rsync-debuginfo-3.2.3-9.el9_0.1.aarch64.rpm rsync-debugsource-3.2.3-9.el9_0.1.aarch64.rpm ppc64le: rsync-3.2.3-9.el9_0.1.ppc64le.rpm rsync-debuginfo-3.2.3-9.el9_0.1.ppc64le.rpm rsync-debugsource-3.2.3-9.el9_0.1.ppc64le.rpm s390x: rsync-3.2.3-9.el9_0.1.s390x.rpm rsync-debuginfo-3.2.3-9.el9_0.1.s390x.rpm rsync-debugsource-3.2.3-9.el9_0.1.s390x.rpm x86_64: rsync-3.2.3-9.el9_0.1.x86_64.rpm rsync-debuginfo-3.2.3-9.el9_0.1.x86_64.rpm rsync-debugsource-3.2.3-9.el9_0.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYpn+4NzjgjWX9erEAQhD5RAAp5oeP4kLRZdMYsPX8yw3MfwYzbD0jpaB p9l0LyFJZbLgEO9C+VbWJNMswrebfs1W1bVVC0bNjUc+KBZi6TENW0b9BVrCGHyI NxD4avG+ZjBWbBmzmHYVYyNcvc4oOIOjWhNOd8aqjAIFjIgWkyqPQIxOiXS3fxj6 b0Edl0yox5SG6+BrGBPRHv5OSnvF7pXVRWYvvS8TMDSVjo8ta8zTkj5cDE0wQCGw 5euy3PkhzfTEvwxc0ZqLXbIiXB95j2P0K4r5X4GLbp/D4z6l76+ecs7SDxJtQTo5 xdoCjI0Ed0YOZOR1r99in5SHZeA/+ne07t9a5YIkBCBsWXL1yJej/hU+9C8Yqmtk /I9fwdijTZ2P3ySa6hvSocgPccvi8HSZEJW2o7YrvikR7KRfdJpie8gErT1Obqrq r+rv+AeIZbktecug2lu/5d+U6IbB2NAspra5R4Ecijmf0YZy/EwDhNpDOasHIqjI 7G5JdhuMDV880lQhe2GW6s1c4ftqZD0Mv/tKgO7Dcb8axa4vT2/q+srjKRZwRfos gWpkhr6uET7Ip3cEYsKN4+R/uLIgAuYPCxb1MIZi0XyQFnovEXzUdqXff5LMk4fS DwZT3b0XX8JbIl0sChbWnAWZRe20YvSRrqzvQKdrMzzMLrYGfcaRzTOWtDubB+a8 mHyN4wORzEQ=ifdd -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Essential security patch for rsync tackles significant zlib vulnerability in Red Hat Enterprise Linux 9. Discover further details here.. Rsync Security Update, Red Hat Enterprise, Important Security Advisory, Linux OS Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 03, 2022 Important Red Hat
98

Red Hat Enterprise Linux 8: RHSA-2022:2201-01 Critical rsync Security Fix

An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: rsync security update Advisory ID: RHSA-2022:2201-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:2201 Issue date: 2022-05-11 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. Package List: Red Hat Enterprise Linux BaseOS (v. 8): Source: rsync-3.1.3-14.el8_6.2.src.rpm aarch64: rsync-3.1.3-14.el8_6.2.aarch64.rpm rsync-debuginfo-3.1.3-14.el8_6.2.aarch64.rpm rsync-debugsource-3.1.3-14.el8_6.2.aarch64.rpm noarch: rsync-daemon-3.1.3-14.el8_6.2.noarch.rpm ppc64le: rsync-3.1.3-14.el8_6.2.ppc64le.rpm rsync-debuginfo-3.1.3-14.el8_6.2.ppc64le.rpm rsync-debugsource-3.1.3-14.el8_6.2.ppc64le.rpm s390x: rsync-3.1.3-14.el8_6.2.s390x.rpm rsync-debuginfo-3.1.3-14.el8_6.2.s390x.rpm rsync-debugsource-3.1.3-14.el8_6.2.s390x.rpm x86_64: rsync-3.1.3-14.el8_6.2.x86_64.rpm rsync-debuginfo-3.1.3-14.el8_6.2.x86_64.rpm rsync-debugsource-3.1.3-14.el8_6.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYnw2ANzjgjWX9erEAQiUew//d2IkXt3PJxVJqwsd+jOQJ8kh9Z691F8h SMEZ8dhA0J1EX7GP0gnrdySCcZ+Oxa6uMzE8yWns1SPuURzEUQUp9c/2qvHu6fQv LbkZixqOV7z0X00hhypKZgLFNAmDLhT9WsauXo8UUKVdwVsZL1QHj8pgdRHGHgn4 rADof1x7YAH/yjgZvmXHAbk2VrGjbvX43xNgIeCVb/GyJQs3AgyheUGkSaw7pHIF 4DyaHm6UWQpBJlFunRNKlGWBGE29YtCikwsRN29vzSx1FayP/4z8N2Bud10siGdR +5pt5gCI8DTclKN25zDNUH0iJFlAqlp5DGI3G938CfMGhltp7NbocOncWLOqxVgz eTV53muACYL8Xw7wjxhZFcHpHYmQFkbhy58Cko9mS8kDqCsl1SAoLJDx+a7NBAZk AVzmJUiGsClqhiNpC+4CfXtZ5yv5o5yWVykgNvbYX8NWLK1pMNcb8Gdp0NZ3wLhU RRoUBMUhVmquOlRzqY8u0GAo4Al9yPXwr5q5o011+/qW55a0fL6C+BxtHh/ON76N pIKkXaYqM1Z6wgHXRHkkuXJ9vsoN9GEKEHYZo1V7xCnWr0dzb39dZxmc1zuzN3+s YCQLSNOOYvF+u8HWnvix0Ljc1reoRSn+hYc1+23RPahI7YZPP2U81NjMH/s9N8dB j889CttfYw8=ugku -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Critical rsync vulnerability addressed in Red Hat Enterprise Linux 8, as announced by Red Hat Security Team. Rsync Security Update, Red Hat Enterprise Linux, Important Security Fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 11, 2022 Important Red Hat
98

Red Hat Enterprise Linux 8.1 RHSA-2022:2197-01 Critical: Rsync Zlib Flaw

An update for rsync is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: rsync security update Advisory ID: RHSA-2022:2197-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:2197 Issue date: 2022-05-11 CVE Names: CVE-2018-25032 ==================================================================== 1. Summary: An update for rsync is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS E4S (v. 8.1) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugsfixed (https://bugzilla.redhat.com/): 2067945 - CVE-2018-25032 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 6. Package List: Red Hat Enterprise Linux BaseOS E4S (v. 8.1): Source: rsync-3.1.3-6.el8_1.1.src.rpm aarch64: rsync-3.1.3-6.el8_1.1.aarch64.rpm rsync-debuginfo-3.1.3-6.el8_1.1.aarch64.rpm rsync-debugsource-3.1.3-6.el8_1.1.aarch64.rpm noarch: rsync-daemon-3.1.3-6.el8_1.1.noarch.rpm ppc64le: rsync-3.1.3-6.el8_1.1.ppc64le.rpm rsync-debuginfo-3.1.3-6.el8_1.1.ppc64le.rpm rsync-debugsource-3.1.3-6.el8_1.1.ppc64le.rpm s390x: rsync-3.1.3-6.el8_1.1.s390x.rpm rsync-debuginfo-3.1.3-6.el8_1.1.s390x.rpm rsync-debugsource-3.1.3-6.el8_1.1.s390x.rpm x86_64: rsync-3.1.3-6.el8_1.1.x86_64.rpm rsync-debuginfo-3.1.3-6.el8_1.1.x86_64.rpm rsync-debugsource-3.1.3-6.el8_1.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-25032 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYnw19dzjgjWX9erEAQiq+w//YUJEvnSSUG1jh+EplRlwXQhmFYxtQ//a 885yoz9+xqVBMFKRuA0BzbxyOEjHhcINGbxM+YoToQk8w2NSI3bmaYaVgMACrG5a tjQ4KkfbfBb+S20BbFfWhBIZdljOH/1sRfIOJYVgweyJgF1ucDqsghwk8eq/uU16 FEaOc3WA4sKvjPZdKBRy7fzrW39ODnIUzqwtCceT29Hewa+q+rS3PkuFqinK0UBo 1HD94FMF+s44FoGggcD4biu1pz3ROjPVbpykXvm7X3dQ2SPrSmIHYwGX4hLbO2DM /jWGg9KWhHnv7GG+ygttNsaxw91rzdQHcvtDrkWb8deCnhnw9qxkqwW5M/AEcIY2 kC8btY95+a7cErvhAX1u+VCHOVuBcAhBUg3Qtk9LBLo6doHXfrKBYay8kgTiu0rv Y4RvnU0wfZN3nKyTBSyUaUBjB+VRsi9okTh43XfPruUfmWtdIJ7R9XjO3iSfC/MN fG0FSsl4RLePNMMIyBXCn/+gydu8B+VmY4kPiu5HeaY+ieESPgoXK94sGyWHfKLz fslAzT/9vOLgJRiQepiey9cmJ5HDCDk9BstlWQwmhe8oWDmLMkWiHChuc/lClMpf HiWexWTphW1J79MkcYPSt6v+1FHjameF2nuHHKRFTk2QbptBLBe3UbUV8kg1atPJ 8kiir+JRyME=o1J2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . A significant security notice has been released regarding an rsync upgrade for Red Hat Enterprise Linux, which mitigates a critical vulnerability affecting system integrity.. Rsync Update, Red Hat Enterprise, Important Security Fix, Zlib Flaw, Security Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 11, 2022 Important Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":546,"type":"x","order":1,"pct":78.45,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.31,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.36,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here