Language Selection

English French German Italian Portuguese Spanish

LinuxSecurity.com Advisories

Syndicate content
The central voice for Linux and Open Source security news.
Updated: 6 weeks 5 days ago

Gentoo: GLSA-201803-08: Adobe Flash Player: Multiple vulnerabilities

Monday 19th of March 2018 01:10:00 AM
LinuxSecurity.com: Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which allows remote attackers to execute arbitrary code.

Gentoo: GLSA-201803-07: JabberD 2.x: Multiple vulnerabilities

Monday 19th of March 2018 01:05:00 AM
LinuxSecurity.com: Multiple vulnerabilities have been found in Gentoo's JabberD 2.x ebuild, the worst of which allows local attackers to escalate privileges. [More...]

Gentoo: GLSA-201803-06: Oracle JDK/JRE: Multiple vulnerabilities

Monday 19th of March 2018 12:55:00 AM
LinuxSecurity.com: Multiple vulnerabilities have been found in Oracle's JDK and JRE software suites, the worst of which may allow execution of arbitrary code. [More...]

Debian LTS: DLA-1309-1: curl security update

Sunday 18th of March 2018 10:22:00 PM
LinuxSecurity.com: Multiple vulnerabilities were found in cURL, an URL transfer library: CVE-2018-1000120

ArchLinux: 201803-11: ntp: multiple issues

Sunday 18th of March 2018 10:10:00 PM
LinuxSecurity.com: The package ntp before version 4.2.8.p11-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing and denial of service.

openSUSE: 2018:0737-1: important: MozillaFirefox

Sunday 18th of March 2018 03:11:00 PM
LinuxSecurity.com: An update that fixes one vulnerability is now available.

openSUSE: 2018:0734-1: important: SDL2, SDL2_image

Sunday 18th of March 2018 03:09:00 PM
LinuxSecurity.com: An update that solves 7 vulnerabilities and has one errata is now available.

Debian: DSA-4143-1: firefox-esr security update

Saturday 17th of March 2018 07:22:00 PM
LinuxSecurity.com: Richard Zhu and Huzaifa Sidhpurwala discovered that an out-of-bounds memory write when playing Vorbis media files could result in the execution of arbitrary code.

openSUSE: 2018:0730-1: important: mariadb

Saturday 17th of March 2018 06:08:00 PM
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.

Debian: DSA-4141-1: libvorbisidec security update

Friday 16th of March 2018 09:17:00 PM
LinuxSecurity.com: Huzaifa Sidhpurwala discovered that an out-of-bounds memory write in the codebook parsing code of the Libtremor multimedia library could result in the execution of arbitrary code if a malformed Vorbis file is opened.

Debian: DSA-4140-1: libvorbis security update

Friday 16th of March 2018 07:50:00 PM
LinuxSecurity.com: Richard Zhu discovered that an out-of-bounds memory write in the codeboook parsing code of the Libvorbis multimedia library could result in the execution of arbitrary code.

openSUSE: 2018:0710-1: important: ucode-intel

Friday 16th of March 2018 06:09:00 PM
LinuxSecurity.com: An update that fixes one vulnerability is now available.

SUSE: 2018:0708-1: important: ucode-intel

Friday 16th of March 2018 06:09:00 PM
LinuxSecurity.com: An update that fixes one vulnerability is now available.

SUSE: 2018:0705-1: important: microcode_ctl

Friday 16th of March 2018 06:07:00 PM
LinuxSecurity.com: An update that fixes one vulnerability is now available.

Debian LTS: DLA-1307-1: clamav security update

Friday 16th of March 2018 01:52:00 PM
LinuxSecurity.com: Some vulnerabilities have been found in ClamAV, an open source antivirus engine:

openSUSE: 2018:0704-1: important: Chromium

Friday 16th of March 2018 12:07:00 PM
LinuxSecurity.com: An update that fixes 27 vulnerabilities is now available.

Debian: DSA-4139-1: firefox-esr security update

Thursday 15th of March 2018 10:38:00 PM
LinuxSecurity.com: Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code, denial of service or information disclosure.

SUSE: 2018:0698-1: important: mariadb

Thursday 15th of March 2018 09:07:00 PM
LinuxSecurity.com: An update that fixes 8 vulnerabilities is now available.

SUSE: 2018:0697-1: important: mariadb

Thursday 15th of March 2018 09:07:00 PM
LinuxSecurity.com: An update that fixes 6 vulnerabilities is now available.

SciLinux: Critical: firefox on SL6.x i386/x86_64

Thursday 15th of March 2018 08:38:00 PM
LinuxSecurity.com: This update upgrades Firefox to version 52.7.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memo [More...]

More in Tux Machines

Today in Techrights

today's leftovers

  • Debian XU4 images updated
    I've updated my Debian images for the ODROID XU4; the newest build was done before stretch release, and a lot of minor adjustments have happened since then.
  • Parrot 4.0 Ethical Hacking Linux Distro Released
  • FBI says Russians hacked [sic] hundreds of thousands of home and office routers

    The warning followed a court order Wednesday that allowed the FBI to seize a website that the hackers [sic] planned to use to give instructions to the routers. Though that cut off malicious communications, it still left the routers infected, and Friday’s warning was aimed at cleaning up those machines.

  • FBI tells router users to reboot now to kill malware infecting 500k devices

    Researchers from Cisco’s Talos security team first disclosed the existence of the malware on Wednesday. The detailed report said the malware infected more than 500,000 devices made by Linksys, Mikrotik, Netgear, QNAP, and TP-Link. Known as VPNFilter, the malware allowed attackers to collect communications, launch attacks on others, and permanently destroy the devices with a single command. The report said the malware was developed by hackers [sic] working for an advanced nation, possibly Russia, and advised users of affected router models to perform a factory reset, or at a minimum to reboot.

Software and Games: KStars, Opera, OpenStack, MariaDB and More

  • KStars 2.9.6 is Released!
    I'm glad to announce the release of KStars 2.9.6 for Windows, MacOS, and Linux. This is a minor bugfix release.
  • Opera 54 Browser Enters Beta with News on the Speed Dial, Update & Recovery Menu
    Opera has promoted its upcoming Opera 54 web browser to the beta channel, giving us a glimpse of what to expect from the final version, due for release sometime next month. Based on the open-source Chromium 67.0.3396.18 web browser, Opera 54 recently entered beta stages of development with a plethora of new features and improvements, among which we can mention a new Update & Recovery Opera menu page that makes it easier for users to update the web browser and reset it to its default state, including the ability to clear temporary data, such as cookies.
  • OpenStack at a Crossroads
    The OpenStack of a few years ago is dead, however. What has emerged from the hype cycle is a materially different foundation, mission and software stack, with a great deal of change still ahead of it.
  • The OpenStack Foundation grows beyond OpenStack
    The OpenStack Foundation has made a considerable change to its development process and governance structure by introducing two open source projects that are not part of the OpenStack cloud platform. This week, the organization launched version 1.0 of Kata Containers - a runtime system with an emphasis on speed and security, enabling users to boot a VM in as little as five seconds - and introduced a brand new project called Zuul, spinning out the software development and integration platform that has been used by the OpenStack community internally since 2012.
  • Oracle nemesis MariaDB tries to lure enterprise folk with TX 3.0
    Open-source database biz MariaDB has upped the ante in its war against Oracle, promising enterprise customers better compatibility with – and easier migration from – Big Red. The Finnish firm's latest offering, MariaDB TX 3.0, released for GA today, extends the number of use cases to include temporal processing and advanced data protection for sensitive and personally identifiable information, as well as Oracle compatibility. The broad aim is to tap into customers' grumbles over legacy vendor lock-in, while convincing the bigger customers that they can move to an open-source database without compromising performance.
  • The Humble Monthly Bundle just added two great Linux games
    For those that are interested, you can secure a copy of two great Linux games in the current Humble Monthly Bundle. Just added today are: Get Cook, Serve, Delicious! 2!! Ken Follett's The Pillars of the Earth
  • SC-Controller 0.4.3 Released, Support Steam Controller & Sony DS4 Over Bluetooth
    For those looking to manage your Steam Controller and other supported Linux gaming peripheral input devices outside of Steam, there is a new release of the independently-developed SC-Controller Linux user-space software. While Linux 4.18 is bringing the Steam Controller kernel driver, for those looking for a Steam Controller solution right now to enjoy this excellent gaming controller for now outside of Steam, SC-Controller fills that void.

Huawei, Fuchsia and More

  • Huawei will no longer allow bootloader unlocking (Update: Explanation from Huawei)

    "In order to deliver the best user experience and prevent users from experiencing possible issues that could arise from ROM flashing, including system failure, stuttering, worsened battery performance, and risk of data being compromised, Huawei will cease providing bootloader unlock codes for devices launched after May 25, 2018. [...]"

  • Fuchsia Friday: How ad targeting might be a hidden cost of Fuchsia’s structure
     

    Fuchsia, by its nature, comes with the potential for a handful of new opportunities for ad targeting. Let’s peer into the dark side of Fuchsia’s innovative features.

  • iPhone Quarter, ZTE Troubles, Facebook Troubles, Nokia Come-back
     

    So the past month or two? The Quarterly results cycle came in. The item often of great interest is the Apple iPhone performance. 52.2 million iPhones shipped and that gives roughly a flat market share compared to the year before, so about 14%-15%. I'll come and do the full math later of the quarterly data. That race is no longer in any way interesting.

    But two Top 10 smartphone brands ARE in the news. One who is facing imminent death and the other who is making a miraculous return-from-dead. So imminent death and current Top 10 brand first. ZTE. The Trump administration has put a massive squeeze on ZTE and the company is in serious trouble of imminent collapse. Then bizarrely, Trump reversed course and felt he needed to protect CHINESE employment (???) and after yet another typical Trump-mess, we now are at a Never-Neverland where Trump's own party Republicans are revolting against their President and well, ZTE may end up a casualty of this mess. We'll keep an eye on it.

  •