Language Selection

English French German Italian Portuguese Spanish

LinuxSecurity.com Advisories

Syndicate content LinuxSecurity - Security Advisories
The central voice for Linux and Open Source security news.
Updated: 2 hours 41 min ago

Ubuntu 4216-1: Firefox vulnerabilities>

10 hours 47 min ago
Firefox could be made to crash or run programs as your login if it opened a malicious website.

Debian: DSA-4580-1: firefox-esr security update>

14 hours 39 min ago
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

openSUSE: 2019:2654-1: moderate: calamares>

16 hours 23 min ago
An update that solves one vulnerability and has one errata is now available.

openSUSE: 2019:2655-1: moderate: calamares>

16 hours 28 min ago
An update that solves one vulnerability and has one errata is now available.

RedHat: RHSA-2019-4117:01 Moderate: Open Liberty 19.0.0.12 Runtime security>

19 hours 21 min ago
A security update is now available for Open Liberty 19.0.0.12 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Ubuntu 4215-1: NSS vulnerability>

20 hours 28 min ago
NSS could be made to crash if it received a specially crafted certificate.

RedHat: RHSA-2019-4114:01 Important: nss security update>

21 hours 3 min ago
An update for nss is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

RedHat: RHSA-2019-4115:01 Moderate: java-1.8.0-ibm security update>

21 hours 12 min ago
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 7 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Debian LTS: DLA-2026-1: htmldoc security update>

Monday 9th of December 2019 06:28:44 AM
In HTMLDOC, there was a one-byte underflow in htmldoc/ps-pdf.cxx caused by a floating point math difference between GCC and Clang.

RedHat: RHSA-2019-4113:01 Moderate: java-1.8.0-ibm security update>

Monday 9th of December 2019 03:58:09 AM
An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which

Fedora 30: libidn2 FEDORA-2019-160303ebeb>

Sunday 8th of December 2019 09:28:54 PM
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data tables from Unicode 6.3.0 to Unicode 11.0 * Turn `_idn2_punycode_encode`, `_idn2_punycode_decode` into compat symbols (Fixes #74)

Mageia 2019-0377: thunderbird security update>

Sunday 8th of December 2019 02:13:16 PM
Updated thunderbird packages fix security vulnerabilities: Stack corruption due to incorrect number of arguments in WebRTC code. (CVE-2019-13722)

Mageia 2019-0376: firefox security update>

Sunday 8th of December 2019 02:13:15 PM
Updated firefox packages fix security vulnerabilities: Stack corruption due to incorrect number of arguments in WebRTC code. (CVE-2019-13722)

Mageia 2019-0375: lz4 security update>

Sunday 8th of December 2019 02:13:14 PM
Updated lz4 packages fix security vulnerability: Heap-based buffer overflow in LZ4_write32 (CVE-2019-17543). References:

Mageia 2019-0374: nss security update>

Sunday 8th of December 2019 02:13:13 PM
Updated nss packages fix security vulnerability: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate (CVE-2019-11745).

Mageia 2019-0373: openexr security update>

Sunday 8th of December 2019 02:13:12 PM
The updated packages fix a security vulnerability: Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in

Debian LTS: DLA-2025-1: openslp-dfsg security update>

Sunday 8th of December 2019 07:51:22 AM
The OpenSLP package had two open security issues: CVE-2017-17833

Debian LTS: DLA-2024-1: phpmyadmin security update>

Sunday 8th of December 2019 07:48:44 AM
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/display_git_revision.lib.php and libraries/Footer.class.php.

Fedora 31: proftpd FEDORA-2019-bfacf1e958>

Saturday 7th of December 2019 08:16:57 PM
This update addresses a number of bugs affecting processing of CRLs in mod_tls, including possible null pointer dereferences and missing some checks. Thanks to Lionel Debroux for reporting them.

Fedora 30: proftpd FEDORA-2019-65a983b8b6>

Saturday 7th of December 2019 08:03:48 PM
This update addresses a number of bugs affecting processing of CRLs in mod_tls, including possible null pointer dereferences and missing some checks. Thanks to Lionel Debroux for reporting them.