Menu

Category Archives: GNU/Linux

Everything about GNU+Linux security

The 5.18.5 stable kernel update contains mitigation for the processor MMIO stale-data vulnerabilities. These are covered by CVE-2022-21166 CVE-2022-21125 and CVE-2022-21123

Update to 2.36.3: * Support capturing already encoded video streams, which takes advantage of encoding done in hardware by devices which support this feature. * Avoid using experimental GStreamer elements for video demuxing. * Avoid using the legacy GStreamer VA-API decoding plug-ins, which often cause rendering issues and are not much maintained. Their usage can […]

Rebuild for ntfs-3g CVE

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

An update that solves 30 vulnerabilities and has 14 fixes is now available.

Hardening Virtio for emerging security usecases

Red Hat OpenShift Container Platform release 4.6.59 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6.

The container suse/sles12sp5 was updated. The following patches have been included in this update:

Several security issues were fixed in Exempi.

Post-quantum cryptography, an introduction
Complete Guide to Keylogging in Linux: Part 3

An update that fixes one vulnerability is now available.

Several security issues were fixed in the kernel.

Red Hat OpenShift Container Platform release 4.7.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7.

The 5.17.14 stable kernel update contains a number of important fixes across the tree.

golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Update to 1.1.6. Fixes rhbz#2092632. containerd: Update to 1.6.6. Mitigates GHSA-5ffw-gxpp-mxpf / CVE-2022-31030.

Save time and money with Red Hat Insights Compliance reporting
The Three Best Tools You Need to Scan Your Linux System for Malware

An update that fixes 28 vulnerabilities is now available.

An update that fixes 6 vulnerabilities is now available.

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

An update that fixes 6 vulnerabilities is now available.

An update that fixes 6 vulnerabilities is now available.

An update that solves one vulnerability and has one errata is now available.

An update that solves one vulnerability and has one errata is now available.

Open Source Security: Key Benefits & Drawbacks You Should Know
New Ultra-Stealthy Linux Backdoor Isnt Your Everyday Malware Discovery

An update that solves 7 vulnerabilities and has 14 fixes is now available.

An update that fixes one vulnerability is now available.

New Syslogk Linux Rootkit Uses Magic Packets to Trigger Backdoor

security update

security update

security update

A Getting-Started Guide to Improving Security with Open-Source Static & Dynamic Security Scanners

Several security issues were fixed in liblouis.

Firefox could be made to crash or run programs as your login if it opened a malicious website.

An update that fixes two vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes two vulnerabilities is now available.

Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.

Two vulnerabilities were discovered that the containerd container runtime, which could result in denial of service or incomplete restriction of capabilities.

– lockState: do not print `error:` when exit code is unaffected (#2090926) —- – fix potential DoS from unprivileged users via the state file (CVE-2022-1348)

security update

Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege escalation.

Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed media file is opened.

Kubernetes Operators: good security practices

An update that fixes one vulnerability is now available.

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.

The container suse-sles-15-sp3-chost-byos-v20220609-x86_64-gen2 was updated. The following patches have been included in this update:

bump to v1.23.4, security fix for CVE-2022-21698 —- Add missing container networking dependencies (#2081834)

security update

An update that solves 6 vulnerabilities and has three fixes is now available.

An update that solves 6 vulnerabilities and has two fixes is now available.

An update that solves 6 vulnerabilities and has two fixes is now available.

An update that solves 6 vulnerabilities and has two fixes is now available.

An update that solves 7 vulnerabilities and has three fixes is now available.

“Legacy” cryptography in Fedora 36 and Red Hat Enterprise Linux 9

An update that solves 6 vulnerabilities and has three fixes is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes one vulnerability is now available.

Containers vulnerability risk assessment

An update that fixes 6 vulnerabilities is now available.

Several vulnerabilities were discovered in Mailman, a web-based mailing list manager. An attacker could impersonate more privileged accounts through different vectors.

Several security issues were fixed in FFmpeg.

Red Hat Advanced Cluster Management for Kubernetes 2.5.0 is now generally available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

security update

Getting a list of fixes for a Red Hat product between two dates is easy with daysofrisk.pl
Joomla Security in 2022 – Best Practices To Secure Your Website

An update that solves one vulnerability and has four fixes is now available.

python-twisted: possible http request smuggling (CVE-2022-24801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE SL7 x86_64 python-twisted-web-12.1.0-8.el7_9.x86_64.rpm – Scientific Linux Development Team

The container bci/golang was updated. The following patches have been included in this update:

The container bci/golang was updated. The following patches have been included in this update:

Several security issues were fixed in the Linux kernel.

Several security issues were fixed in the Linux kernel.

Complete Guide to Keylogging in Linux: Part 2

An update for rh-postgresql13-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

A patch update (from 7.10.2 to 7.10.2.P1) is now available for Red Hat on OpenShift for EAP, Karaf, and Spring Boot. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact

An update for python-twisted-web is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Several security issues were fixed in ntfs-3g.

Security fixes for CVE-2022-1886, CVE-2022-1942 —- Security fixes for CVE-2022-1851, CVE-2022-1898, CVE-2022-1897, CVE-2022-1927

FreeRDP could allow unintended access to network services.

Several security issues were fixed in Vim.

Several security vulnerabilities were found in glib2.0, a general-purpose utility library for the GNOME environment. CVE-2021-27218

An update for rh-postgresql10-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update for rh-nodejs12-nodejs is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

An update for rh-postgresql12-postgresql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

An update that solves two vulnerabilities and has one errata is now available.

An update that solves two vulnerabilities and has one errata is now available.

Security fixes for CVE-2022-1851, CVE-2022-1898, CVE-2022-1897, CVE-2022-1927

The 5.17.12 stable kernel update contains a number of important fixes across the tree.

The 5.17.12 stable kernel update contains a number of important fixes across the tree.

Upstream release notes: https://github.com/dotnet/core/blob/main/release- notes/3.1/3.1.25/3.1.25.md

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability