Menu

Category Archives: GNU/Linux

Everything about GNU+Linux security

Several security issues were fixed in the Linux kernel.

An update that solves one vulnerability and has two fixes is now available.

Expat could be made to crash or execute arbitrary code.

An update that fixes one vulnerability is now available.

Multiple vulnerabilities have been found in Oracle JDK and JRE, the worst of which could result in the arbitrary execution of code.

Multiple vulnerabilities have been discovered in Fetchmail, the worst of which could result in email disclosure to third parties.

Multiple vulnerabilities have been discovered in libaacplus, the worst of which could result in denial of service.

Multiple vulnerabilities have been discovered in GRUB, the worst of which may allow for secureboot bypass.

Multiple vulnerabilities have been discovered in HarfBuzz, the worst of which could result in arbitrary code execution.

security update

How to integrate Red Hat Advanced Cluster Security for Kubernetes with ServiceNow

An update that fixes two vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

Update to bugfix/security release 2022-07-29a. Includes security fix for CVE-2022-3123.

Update to bugfix/security release 2022-07-29a. Includes security fix for CVE-2022-3123.

security update

security update

security update

security update

Several security issues were fixed in the Linux kernel.

An update that fixes two vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

Connecting to the RHEL web console, part 1: SSH access methods
Role-based access control for Red Hat Hybrid Cloud Console
Business VPNs: Now More Important Than Ever

An update that fixes two vulnerabilities is now available.

The container suse/sles/15.4/virt-operator was updated. The following patches have been included in this update:

security update

Several security issues were fixed in etcd.

Several security issues were fixed in the Linux kernel.

Several security vulnerabilities were discovered in mediawiki, a website engine for collaborative work. Insufficiently escaped input text may allow a malicious user to perform cross-site-scripting (XSS) attacks.

An update that fixes three vulnerabilities is now available.

Linux Log Analysis

PCRE could be made to expose sensitive information.

Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2022-2795

Several security issues were fixed in Bind.

It was discovered that the wordexp() function of tinygltf, a library to load/save glTF (GL Transmission Format) files was susceptible to command execution when processing untrusted files.

Mako could be made to denial of service if it received a specially crafted regular expression.

Several security issues were fixed in Bind.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in LibTIFF.

Red Hat OpenShift Container Platform release 4.11.5 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11.

The container bci/python was updated. The following patches have been included in this update:

The container suse/pcp was updated. The following patches have been included in this update:

The container bci/dotnet-aspnet was updated. The following patches have been included in this update:

An update that fixes one vulnerability is now available.

security update

Does Linux Need a Firewall & How To Configure the Linux Firewall with firewall-cmd

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update for redhat-release-virtualization-host, redhat-virtualization-host, and redhat-virtualization-host-productimg is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact

Maher Azzouzi found a local root escalation vulnerability in Enlightenment, an X11 window manager. For Debian 10 buster, this problem has been fixed in version

– control code in cookie denial of service (CVE-2022-35252)

6.0.8, fixes CVE-2022-40626

An update that fixes one vulnerability is now available.

Security fix for CVE-2022-2309

Update to latest upstream release

An update that fixes two vulnerabilities is now available.

Several vulnerabilities were discovered in ConnMan, a network manager for embedded devices, which could result in denial of service or the execution of arbitrary code.

Enhancing application container security and compliance with Podman

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/rust was updated. The following patches have been included in this update:

The container bci/bci-minimal was updated. The following patches have been included in this update:

The container bci/bci-init was updated. The following patches have been included in this update:

security update

An update that solves 25 vulnerabilities, contains four features and has 91 fixes is now available.

An update that fixes one vulnerability is now available.

An update that fixes two vulnerabilities is now available.

The art and science of secure open source software development

Several security issues were fixed in the Linux kernel.

Multiple file parsing vulnerabilities have been fixed in libraw. They are concerned with the dng and x3f formats. CVE-2020-35530

An update that solves one vulnerability and has one errata is now available.

What You Need to Know when Considering a VPN on Linux
What Are Checksums & Why Should You Be Using Them?
Debian GNU/Linux 11.5 Bullseye Released with 53 Security Updates and 58 Bug Fixes
Coding Vulnerabilities, Linux Growth, FOSS Friction Cap Summer Highlights

It was found that GLib, a general-purpose portable utility library, could be used to print partial contents from arbitrary files. This could be exploited from setuid binaries linking to GLib for information disclosure of files with a specific format.

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

security update

An update that solves 15 vulnerabilities and has 11 fixes is now available.

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Several security issues were fixed in WebKitGTK.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

Shadow IT and shadow IoT

security update

Red Hat extends Common Vulnerabilities and Exposure Program expertise as newly-minted Root organization
Essential Guide to Securing Node.JS Applications

security update

security update