Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisorymoderateFedoraFedora 39: FEDORA-2023-467632ecbe Moderate: Borgbackup Data Loss Fix
fix for CVE-2023-36811: spoofed archive leads to data loss Please note that starting with borgbackup 1.2.5 all borg repos must use TAM authentication: https://github.com/borgbackup/borg/blob/1.2.6/docs/changes.rst#pre-125-archives- spoofing-vulnerability-cve-2023-36811. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-467632ecbe 2023-09-15 18:36:13.241465 -------------------------------------------------------------------------------- Name : borgbackup Product : Fedora 39 Version : 1.2.6 Release : 1.fc39 URL : https://borgbackup.readthedocs.io/en/stable/ Summary : A deduplicating backup program with compression and authenticated encryption Description : BorgBackup (short: Borg) is a deduplicating backup program. Optionally, it supports compression and authenticated encryption. -------------------------------------------------------------------------------- Update Information: fix for CVE-2023-36811: spoofed archive leads to data loss Please note that starting with borgbackup 1.2.5 all borg repos must use TAM authentication: https://github.com/borgbackup/borg/blob/1.2.6/docs/changes.rst#pre-125-archives- spoofing-vulnerability-cve-2023-36811 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 5 2023 Felix Schwarz - 1.2.6-1 - update to 1.2.6 to fix CVE-2023-36811 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2236305 - CVE-2023-36811 borgbackup: spoofed archive leads to data loss [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2236305 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-467632ecbe' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 15, 2023
Fedora
89
security advisoryupdatecriticalFedora 37: FEDORA-2023-34411d8f77 Critical BorgBackup Spoofing Issue
fix for CVE-2023-36811: spoofed archive leads to data loss Please note that starting with borgbackup 1.2.5 all borg repos must use TAM authentication: https://github.com/borgbackup/borg/blob/1.2.6/docs/changes.rst#pre-125-archives- spoofing-vulnerability-cve-2023-36811. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-34411d8f77 2023-09-15 01:34:53.819945 -------------------------------------------------------------------------------- Name : borgbackup Product : Fedora 37 Version : 1.2.6 Release : 1.fc37 URL : https://borgbackup.readthedocs.io/en/stable/ Summary : A deduplicating backup program with compression and authenticated encryption Description : BorgBackup (short: Borg) is a deduplicating backup program. Optionally, it supports compression and authenticated encryption. -------------------------------------------------------------------------------- Update Information: fix for CVE-2023-36811: spoofed archive leads to data loss Please note that starting with borgbackup 1.2.5 all borg repos must use TAM authentication: https://github.com/borgbackup/borg/blob/1.2.6/docs/changes.rst#pre-125-archives- spoofing-vulnerability-cve-2023-36811 -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 5 2023 Felix Schwarz - 1.2.6-1 - update to 1.2.6 to fix CVE-2023-36811 - rely on auto-generated version requirement for msgpack -------------------------------------------------------------------------------- References: [ 1 ] Bug #2236305 - CVE-2023-36811 borgbackup: spoofed archive leads to data loss [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2236305 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-34411d8f77' at the command line. For more information, refer to thednf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 15, 2023
•Critical
Fedora
89
security advisorysecurity updateFedoraFedora 26 borgbackup Security Update FEDORA-2017-7b0a42338c Moderate
upstream version 1.1.3. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-7b0a42338c 2017-12-10 19:21:01.985527 --------------------------------------------------------------------------------Name : borgbackup Product : Fedora 26 Version : 1.1.3 Release : 1.fc26 URL : https://borgbackup.readthedocs.io/en/stable/ Summary : A deduplicating backup program with compression and authenticated encryption Description : BorgBackup (short: Borg) is a deduplicating backup program. Optionally, it supports compression and authenticated encryption. --------------------------------------------------------------------------------Update Information: upstream version 1.1.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #1517664 - borgbackup 1.1.3 is available (CVE-2017-15914) https://bugzilla.redhat.com/show_bug.cgi?id=1517664 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade borgbackup' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Dec 10, 2017
Fedora
89
security advisoryfedoracriticalFedora 24: FEDORA-2016-3b51e954fd Critical: BorgBackup Security Fix
upstream version 1.0.9 (BZ#1406277). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-3b51e954fd 2017-01-03 16:38:52.539083 -------------------------------------------------------------------------------- Name : borgbackup Product : Fedora 24 Version : 1.0.9 Release : 1.fc24 URL : https://borgbackup.readthedocs.io/en/stable/ Summary : A deduplicating backup program with compression and authenticated encryption Description : BorgBackup (short: Borg) is a deduplicating backup program. Optionally, it supports compression and authenticated encryption. -------------------------------------------------------------------------------- Update Information: upstream version 1.0.9 (BZ#1406277) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1406277 - borgbackup 1.0.9 is available (includes security fixes) https://bugzilla.redhat.com/show_bug.cgi?id=1406277 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade borgbackup' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jan 03, 2017
•Critical
Fedora
89
security advisorysecurity updateFedoraFedora 25 BorgBackup Security Update - BZ#1406277 Critical Fixes
upstream version 1.0.9 (BZ#1406277). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-6e66f01186 2017-01-03 16:39:10.474753 -------------------------------------------------------------------------------- Name : borgbackup Product : Fedora 25 Version : 1.0.9 Release : 1.fc25 URL : https://borgbackup.readthedocs.io/en/stable/ Summary : A deduplicating backup program with compression and authenticated encryption Description : BorgBackup (short: Borg) is a deduplicating backup program. Optionally, it supports compression and authenticated encryption. -------------------------------------------------------------------------------- Update Information: upstream version 1.0.9 (BZ#1406277) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1406277 - borgbackup 1.0.9 is available (includes security fixes) https://bugzilla.redhat.com/show_bug.cgi?id=1406277 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade borgbackup' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jan 03, 2017
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!