Language Selection

English French German Italian Portuguese Spanish

LinuxSecurity.com Advisories

Syndicate content
The central voice for Linux and Open Source security news.
Updated: 12 hours 54 min ago

Ubuntu: 2392-1: systemd-shim vulnerability

Thursday 30th of October 2014 09:40:00 AM
LinuxSecurity.com: A denial of service issue was fixed in systemd-shim.

Red Hat: 2014:1744-01: v8314-v8: Moderate Advisory

Thursday 30th of October 2014 09:08:00 AM
LinuxSecurity.com: Updated v8314-v8 packages that fix multiple security issues are now available for Red Hat Software Collections 1. Red Hat Product Security has rated this update as having Moderate security [More...]

Ubuntu: 2391-1: php5 vulnerabilities

Thursday 30th of October 2014 08:50:00 AM
LinuxSecurity.com: Several security issues were fixed in PHP.

Slackware: 2014-302-01: wget: Security Update

Wednesday 29th of October 2014 04:42:00 PM
LinuxSecurity.com: New wget packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. [More Info...]

Debian: 3059-1: dokuwiki: Summary

Wednesday 29th of October 2014 02:26:00 PM
LinuxSecurity.com: Security Report Summary

Mandriva: 2014:212: wget

Wednesday 29th of October 2014 04:12:00 AM
LinuxSecurity.com: Updated wget package fixes security vulnerability: Wget was susceptible to a symlink attack which could create arbitrary files, directories or symbolic links and set their permissions when retrieving a directory recursively through FTP (CVE-2014-4877). [More...]

Mandriva: 2014:211: wpa_supplicant

Wednesday 29th of October 2014 03:57:00 AM
LinuxSecurity.com: Updated wpa_supplicant packages fix security vulnerability: A vulnerability was found in the mechanism wpa_cli and hostapd_cli use for executing action scripts. An unsanitized string received from a remote device can be passed to a system() call resulting in arbitrary [More...]

Red Hat: 2014:1724-01: kernel: Important Advisory

Tuesday 28th of October 2014 06:28:00 PM
LinuxSecurity.com: Updated kernel packages that fix several security issues and bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security [More...]

Debian: 3050-2: iceweasel: Summary

Tuesday 28th of October 2014 01:28:00 PM
LinuxSecurity.com: Security Report Summary

Ubuntu: 2390-1: Pidgin vulnerabilities

Tuesday 28th of October 2014 10:12:00 AM
LinuxSecurity.com: Several security issues were fixed in Pidgin.

Mandriva: 2014:210: mariadb

Tuesday 28th of October 2014 04:24:00 AM
LinuxSecurity.com: Multiple vulnerabilities has been discovered and corrected in mariadb: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS [More...]

Debian: 3058-1: torque: Summary

Monday 27th of October 2014 11:36:00 AM
LinuxSecurity.com: Security Report Summary

Ubuntu: 2389-1: libxml2 vulnerability

Monday 27th of October 2014 09:36:00 AM
LinuxSecurity.com: libxml2 could be made to consume resources if it processed a speciallycrafted file.

Debian: 3057-1: libxml2: Summary

Sunday 26th of October 2014 05:19:00 PM
LinuxSecurity.com: Security Report Summary

Debian: 3056-1: libtasn1-3: Summary

Sunday 26th of October 2014 08:45:00 AM
LinuxSecurity.com: Security Report Summary

Mandriva: 2014:209: java-1.7.0-openjdk

Friday 24th of October 2014 09:30:00 AM
LinuxSecurity.com: Multiple vulnerabilities has been discovered and corrected in java-1.7.0-openjdk: Multiple flaws were discovered in the Libraries, 2D, and Hotspot components in OpenJDK. An untrusted Java application or applet [More...]

Mandriva: 2014:206: ctags

Friday 24th of October 2014 09:22:00 AM
LinuxSecurity.com: Updated ctags package fixes security vulnerability: A denial of service issue was discovered in ctags 5.8. A remote attacker could cause excessive CPU usage and disk space consumption via a crafted JavaScript file by triggering an infinite loop [More...]

Mandriva: 2014:208: phpmyadmin

Friday 24th of October 2014 09:21:00 AM
LinuxSecurity.com: Updated phpmyadmin package fixes security vulnerability: In phpMyAdmin before 4.2.10.1, with a crafted database or table name it is possible to trigger an XSS in SQL debug output when enabled and in server monitor page when viewing and analysing executed queries [More...]

Mandriva: 2014:207: ejabberd

Friday 24th of October 2014 09:21:00 AM
LinuxSecurity.com: Updated ejabberd packages fix security vulnerability: A flaw was discovered in ejabberd that allows clients to connect with an unencrypted connection even if starttls_required is set (CVE-2014-8760). [More...]

Mandriva: 2014:205: lua

Friday 24th of October 2014 09:15:00 AM
LinuxSecurity.com: Updated lua and lua5.1 packages fix security vulnerability: A heap-based overflow vulnerability was found in the way Lua handles varargs functions with many fixed parameters called with few arguments, leading to application crashes or, potentially, arbitrary code [More...]

More in Tux Machines

Xine Media Player Review – Powerful but Outdated

Xine is both an open source multimedia playback engine and a video playback application that's been around for a very long time. The number of people using this application has diminished, and there are few maintained third-party apps that are based on this engine. We'll take a closer look at the application to see why this is happening. Read more

Wine Announcement

The Wine development release 1.7.30 is now available. What's new in this release (see below for details): - More support for fonts in DirectWrite. - Improved ATL thunk support. - A few more C runtime functions. - Regedit import/export fixes. - Various bug fixes. Read more

CoreOS offers private Docker container registries for world+dog

Container-loving Linux vendor CoreOS has made its on-premises Docker container registry software available as a standalone product. Previously, CoreOS Enterprise Registry was only available as part of the company's Premium Managed Linux offering, which it describes as "OS as a service." As of Thursday, it is now available for use with any Docker-enabled OS – and these days, what Linux distro hasn't gone gaga for Docker? Even Microsoft is getting into the act. Read more

Manjaro Works To Make Calamares A Distribution-Independent Installer

The Arch-based Manjaro crew has been developing Calamares, an open-source installation framework they hope will basically lead to being a universal Linux distribution installer. The Manjaro camp has been developing Calamares as a distribution installer framework they'll be using for Manjaro 0.9+ and they also hope other Linux distributions will adopt it so it can become somewhat of a universal Linux installer so each distribution camp no longer keeps needing to write their own installer. Read more