Language Selection

English French German Italian Portuguese Spanish

LinuxSecurity.com Advisories

Syndicate content
The central voice for Linux and Open Source security news.
Updated: 11 hours 2 min ago

Red Hat: 2014:1033-01: java-1.6.0-ibm: Critical Advisory

Thursday 7th of August 2014 02:59:00 PM
LinuxSecurity.com: Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security [More...]

Red Hat: 2014:1031-01: 389-ds-base: Important Advisory

Thursday 7th of August 2014 02:59:00 PM
LinuxSecurity.com: Updated 389-ds-base packages that fix one security issue are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security [More...]

Mandriva: 2014:156: ocsinventory

Thursday 7th of August 2014 11:09:00 AM
LinuxSecurity.com: Updated ocsinventory packages fix security vulnerability: Multiple cross-site scripting (XSS) vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors (CVE-2014-4722). [More...]

Mandriva: 2014:155: kernel

Thursday 7th of August 2014 06:18:00 AM
LinuxSecurity.com: Multiple vulnerabilities has been found and corrected in the Linux kernel: Multiple buffer overflows in drivers/staging/wlags49_h2/wl_priv.c in the Linux kernel before 3.12 allow local users to cause a [More...]

Debian: 2998-1: openssl: Summary

Wednesday 6th of August 2014 07:45:00 PM
LinuxSecurity.com: Security Report Summary

Red Hat: 2014:1025-01: kernel: Important Advisory

Wednesday 6th of August 2014 01:41:00 PM
LinuxSecurity.com: Updated kernel packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6.2 Advanced Update Support. The Red Hat Security Response Team has rated this update as having [More...]

Red Hat: 2014:1023-01: kernel: Important Advisory

Wednesday 6th of August 2014 01:40:00 PM
LinuxSecurity.com: Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having [More...]

Mandriva: 2014:153: mediawiki

Wednesday 6th of August 2014 01:39:00 PM
LinuxSecurity.com: Updated mediawiki packages fix security vulnerabilities: MediaWiki before 1.23.2 is vulnerable to JSONP injection in Flash, XSS in mediawiki.page.image.pagination.js, and clickjacking between OutputPage and ParserOutput. [More...]

Mandriva: 2014:154: readline

Wednesday 6th of August 2014 01:39:00 PM
LinuxSecurity.com: Updated readline packages fix security vulnerability: Steve Kemp discovered the _rl_tropen() function in readline insecurely handled a temporary file. This could allow a local attacker to perform symbolic link attacks (CVE-2014-2524). [More...]

Mandriva: 2014:152: glibc

Wednesday 6th of August 2014 01:31:00 PM
LinuxSecurity.com: Updated glibc packages fix security issues: Stephane Chazelas discovered that directory traversal issue in locale handling in glibc. glibc accepts relative paths with .. components in the LC_* and LANG variables. Together with typical OpenSSH [More...]

Mandriva: 2014:151: cups

Wednesday 6th of August 2014 01:24:00 PM
LinuxSecurity.com: Updated cups packages fix security vulnerability: In CUPS before 1.7.4, a local user with privileges of group=lp can write symbolic links in the rss directory and use that to gain '@SYSTEM' group privilege with cupsd (CVE-2014-3537). [More...]

Ubuntu: 2307-1: GPGME vulnerability

Wednesday 6th of August 2014 09:38:00 AM
LinuxSecurity.com: GPGME could be made to crash or run programs as your login if it processeda specially crafted certificate.

Mandriva: 2014:150: tor

Wednesday 6th of August 2014 07:55:00 AM
LinuxSecurity.com: Updated tor package fixes security vulnerability: Tor before 0.2.4.23 maintains a circuit after an inbound RELAY_EARLY cell is received by a client, which makes it easier for remote attackers to conduct traffic-confirmation attacks by using the pattern [More...]

Mandriva: 2014:149: php

Wednesday 6th of August 2014 06:43:00 AM
LinuxSecurity.com: Multiple vulnerabilities has been discovered and corrected in php: Use-after-free vulnerability in ext/spl/spl_array.c in the SPL component in PHP through 5.5.14 allows context-dependent attackers to cause a denial of service or possibly have unspecified other impact via [More...]

Red Hat: 2014:1013-01: php: Moderate Advisory

Wednesday 6th of August 2014 02:32:00 AM
LinuxSecurity.com: Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate [More...]

Red Hat: 2014:1012-01: php53 and php: Moderate Advisory

Wednesday 6th of August 2014 01:47:00 AM
LinuxSecurity.com: Updated php53 and php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having Moderate [More...]

Red Hat: 2014:1011-01: resteasy-base: Moderate Advisory

Tuesday 5th of August 2014 09:30:00 PM
LinuxSecurity.com: Updated resteasy-base packages that fix one security issue are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Moderate [More...]

Red Hat: 2014:1008-01: samba: Important Advisory

Tuesday 5th of August 2014 04:31:00 PM
LinuxSecurity.com: Updated samba packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having [More...]

Red Hat: 2014:1009-01: samba4: Important Advisory

Tuesday 5th of August 2014 04:25:00 PM
LinuxSecurity.com: Updated samba4 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having [More...]

Debian: 2997-1: reportbug: Summary

Tuesday 5th of August 2014 02:09:00 PM
LinuxSecurity.com: Security Report Summary

More in Tux Machines

Black Lab SDK 1.8 released

QT Creator - for QT 5 Gambas 3 - Visual Basic for Linux Ubuntu Quickly - Quick and dirty development tool for python emacs and Xemacs - Advanced Text Editor Anjuta and Glade - C++ RAD development tool for GTK Netbeans - Java development environment GNAT-GPS - IDE for the following programming languages. Ada, C, JavaScript, Pascal and Python Idle - IDE for Python Scite - Text Editor Read more

Did Red Hat’s CTO Walk – Or Was He Pushed?

He went on to say that some within Red Hat speculate that tensions between Stevens and Paul Cormier, Red Hat’s president of products and technologies, might be responsible, although there doesn’t appear to have been any current argument between the two. Cormier will take over Stevens’ duties until a replacement is found. Vaughan-Nichols also said that others at Red Hat had opined that Stevens might’ve left because he’d risen as high as he could within the company and with no new advancement opportunities open to him, he’d decided to move on. If this was the case, why did he leave so abruptly? Stevens had been at Red Hat for nearly ten years. If he was leaving merely because “I’ve done all I can here and it’s time to seek my fortune elsewhere,” we’d expect him to work out some kind of notice and stay on the job long enough for Red Hat to find a suitable replacement. Turning in a resignation that’s effective immediately is not the ideal way to walk out the door for the last time. It smells of burning bridges. Read more

Firefox OS Smartphones Change The Mobile Landscape Across India

The launch of two Firefox OS phones in India in the same week marks an exciting moment in Mozilla’s mission to promote openness and innovation on the Web, and an opportunity to empower millions of Indians wanting to buy their first smartphones. Firefox OS will enable users to obtain lower-cost devices that offer telephony, messaging and camera and rich capabilities like built-in social integration with Facebook and Twitter, the Firefox browser, FM radio and popular apps. Read more

Mozilla Marches Ahead with Ads for Firefox

This November, Mozilla is up for renegotiation with Google for placement of Google search as the default search in Firefox and for the related subsidies that Google pays Mozilla, which reached almost $300 million last year. That comprised the majority of Mozilla's income. With Chrome establishing itself as a leader in the browser wars, its unclear what relationship Google will continue to pursue with Mozilla. Read more