Several security issues were fixed in follow-redirects.. ========================================================================== Ubuntu Security Notice USN-8217-1 April 28, 2026 node-follow-redirects vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in follow-redirects. Software Description: - node-follow-redirects: Node.js module that automatically follows HTTP(S) redirects Details: It was discovered that follow-redirects did not properly protect sensitive user information during redirects. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0155) It was discovered that follow-redirects did not properly remove sensitive information before storage or transfer. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-0536) It was discovered that follow-redirects did not properly validate URLs when handling certain inputs. An attacker could possibly use this issue to redirect users to a malicious site, resulting in information disclosure or phishing attacks. (CVE-2023-26159) It was discovered that follow-redirects did not properly clear proxy authentication headers during cross-domain redirects. An attacker could possibly use this issue to cause exposure of sensitive credentials. (CVE-2024-28849) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS node-follow-redirects 1.14.9+~1.14.1-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS node-follow-redirects 1.2.4-1ubuntu0.20.04.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS node-follow-redirects 1.2.4-1ubuntu0.18.04.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8217-1 CVE-2022-0155, CVE-2022-0536, CVE-2023-26159, CVE-2024-28849 . Security issues in node-follow-redirects fixed for Ubuntu LTS releases due to potential data exposure risks.. follow-redirects security, Ubuntu updates, node.js vulnerabilities. . Severity: Medium. LinuxSecurity.com Team
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for yast2-rmt ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:4209-1 Rating: important References: #1117602 Cross-References: CVE-2018-17957 Affected Products: SUSE Linux Enterprise Module for Server Applications 15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for yast2-rmt to version 1.1.12 fixes the following issues: Security issue fixed: - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line (bsc#1117602) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Server Applications 15: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-2018-3012=1 Package List: - SUSE Linux Enterprise Module for Server Applications 15 (noarch): yast2-rmt-1.1.2-3.11.1 References: https://www.suse.com/security/cve/CVE-2018-17957.html https://bugzilla.suse.com/1117602 _______________________________________________ sle-security-updates mailing list
Get the latest Linux and open source security news straight to your inbox.