Language Selection

English French German Italian Portuguese Spanish

LinuxSecurity.com Advisories

Syndicate content
The central voice for Linux and Open Source security news.
Updated: 59 min 37 sec ago

Gentoo: 201612-19 Mercurial: Multiple vulnerabilities

Wednesday 7th of December 2016 05:54:00 AM
LinuxSecurity.com: Multiple vulnerabilities have been found in Mercurial, the worst of which could lead to the remote execution of arbitrary code.

Gentoo: 201612-18 OpenSSH: Multiple vulnerabilities

Wednesday 7th of December 2016 05:49:00 AM
LinuxSecurity.com: Multiple vulnerabilities have been found in OpenSSH, the worst of which allows remote attackers to cause Denial of Service.

Gentoo: 201612-17 PECL HTTP: Remote execution of arbitrary code

Wednesday 7th of December 2016 05:44:00 AM
LinuxSecurity.com: A buffer overflow in PECL HTTP might allow remote attackers to execute arbitrary code.

Gentoo: 201612-16 OpenSSL: Multiple vulnerabilities

Wednesday 7th of December 2016 05:38:00 AM
LinuxSecurity.com: Multiple vulnerabilities have been found in OpenSSL, the worst of which allows attackers to conduct a time based side-channel attack.

Fedora 23 mingw-nsis-2.50-1.fc23

Tuesday 6th of December 2016 08:24:00 PM
LinuxSecurity.com: New upstream version 2.50. - Fixes serious DLL hijacking attack:https://sourceforge.net/p/nsis/bugs/1125/

Red Hat: 2016:2872-01: sudo: Moderate Advisory

Tuesday 6th of December 2016 07:13:00 AM
LinuxSecurity.com: An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More...]

Fedora 24 kernel-4.8.11-200.fc24

Tuesday 6th of December 2016 05:40:00 AM
LinuxSecurity.com: The 4.8.11 stable kernel update contains a number of important fixes across thetree.

Fedora 24 gstreamer1-plugins-good-1.8.3-2.fc24

Tuesday 6th of December 2016 05:39:00 AM
LinuxSecurity.com: Add fix for gstreamer FLIC decoder vulnerability

Fedora 24 gstreamer1-plugins-bad-free-1.8.3-2.fc24

Tuesday 6th of December 2016 05:39:00 AM
LinuxSecurity.com: Fix Integer overflow when allocating render buffer in vmnc decoder

Fedora 24 dpkg-1.17.27-1.fc24

Tuesday 6th of December 2016 05:38:00 AM
LinuxSecurity.com: New upstream vesion, 1.17.27 . Security fix for CVE-2015-0860

Red Hat: 2016:2871-01: bind: Important Advisory

Tuesday 6th of December 2016 02:28:00 AM
LinuxSecurity.com: An update for bind is now available for Red Hat Enterprise Linux 6.2 Advanced Update Support, Red Hat Enterprise Linux 6.4 Advanced Update Support, Red Hat Enterprise Linux 6.5 Advanced Update Support, Red Hat Enterprise Linux 6.5 Telco Extended Update Support, Red Hat Enterprise [More...]

Gentoo: 201612-15 ARJ: Multiple vulnerabilities

Monday 5th of December 2016 10:52:00 PM
LinuxSecurity.com: Multiple vulnerabilities have been found in ARJ, the worst of which may allow attackers to execute arbitrary code.

Red Hat: 2016:2850-01: thunderbird: Important Advisory

Monday 5th of December 2016 03:16:00 AM
LinuxSecurity.com: An update for thunderbird is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact [More...]

Gentoo: 201612-13 nghttp2: Denial of Service

Sunday 4th of December 2016 08:29:00 PM
LinuxSecurity.com: Nghttp2 is vulnerable to a Denial of Service attack.

Gentoo: 201612-12 Patch: Denial of Service

Sunday 4th of December 2016 08:25:00 PM
LinuxSecurity.com: Patch is vulnerable to a locally generated Denial of Service condition.

Gentoo: 201612-11 Chromium: Multiple vulnerabilities

Sunday 4th of December 2016 07:49:00 PM
LinuxSecurity.com: Multiple vulnerabilities have been found in the Chromium web browser, the worst of which allows remote attackers to execute arbitrary code.

Fedora 23 p7zip-16.02-2.fc23

Sunday 4th of December 2016 06:22:00 PM
LinuxSecurity.com: Security fix for CVE-2016-9296

Fedora 25 phpMyAdmin-4.6.5.1-2.fc25

Sunday 4th of December 2016 11:58:00 AM
LinuxSecurity.com: phpMyAdmin 4.6.5.1 (2016-11-26) =============================== A patch-levelrelease fixing two small issues: * an issue affecting a small number of usersusing $cfg['Servers'][$i]['hide_db'] or $cfg['Servers'][$i]['only_db']. * anissue affecting the create table dialog where the partition selection tool wasoverzealous and made it difficult to create a new table. There are also minorimprovements to the Czech language file. phpMyAdmin 4.6.5 (2016-11-25)============================= A release containing security fixes and bugfixes. Aside from the security improvements, many bugs have been fixedincluding: * Fix for expanding in navigation pane * Reintroduced asimplified version of PmaAbsoluteUri directive (needed with reverse proxies) *Fix editing of ENUM/SET/DECIMAL field structures * Improvements to the parserAnd many, many more. Please see the ChangeLog for full details of bugs fixes.

Fedora 25 gstreamer1-plugins-bad-free-1.10.1-1.fc25

Sunday 4th of December 2016 11:58:00 AM
LinuxSecurity.com: Update to 1.10.1

Fedora 25 gstreamer1-plugins-good-1.10.1-2.fc25

Sunday 4th of December 2016 11:58:00 AM
LinuxSecurity.com: Add fix for gstreamer FLIC decoder vulnerability

More in Tux Machines

Ubuntu Touch OTA-14 Officially Released with Revamped Unity 8 Interface, Fixes

A few moments ago, we've been informed by Canonical's Lukasz Zemczak about the general availability of the long-anticipated Ubuntu Touch OTA-14 software update for Ubuntu Phone and Ubuntu Tablet devices. Read more Also: Ubuntu OTA-14 Released, Fixes A Number Of Bugs

Cloud convenience is killing the open source database

Open source has never been more important or, ironically, irrelevant. As developers increasingly embrace the cloud to shorten time to market, they're speeding past open source, making it even harder to build an open source business. After all, if open source were largely a way for developers to skirt legal and purchasing departments to get the software they needed when they needed it, the cloud ups that convenience to the nth degree. In Accel's annual business review, the vaunted venture capital firm writes: "'Product' is no longer just the bits of software, it's also how the software is sold, supported, and made successful." The cloud is changing the way all software is consumed, including open source. Read more

Why the operating system matters even more in 2017

Operating systems don't quite date back to the beginning of computing, but they go back far enough. Mainframe customers wrote the first ones in the late 1950s, with operating systems that we'd more clearly recognize as such today—including OS/360 from IBM and Unix from Bell Labs—following over the next couple of decades. Read more

OpenGov Partnership members mull open source policy

The Open Government Partnership (OGP) will suggest to its member governments to create a policy on open source. This week, a draft proposal is to be finalised at the OGP Global Summit in Paris. Read more