Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
89
security advisorysecurity issueFedoraFedora 11: FEDORA-2009-7435 Moderate: perl-IO-Socket-SSL Hostname Fix
This update to version 1.26 fixes an issue where only the prefix of the hostname was checked if there was no wildcard present, so for example www.example.org would match a certificate starting with www.example.org . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-7435 2009-07-11 02:40:16 -------------------------------------------------------------------------------- Name : perl-IO-Socket-SSL Product : Fedora 11 Version : 1.26 Release : 1.fc11 URL : https://metacpan.org/dist/IO-Socket-SSL Summary : Perl library for transparent SSL Description : This module is a true drop-in replacement for IO::Socket::INET that uses SSL to encrypt data before it is transferred to a remote server or client. IO::Socket::SSL supports all the extra features that one needs to write a full-featured SSL client or server application: multiple SSL contexts, cipher selection, certificate verification, and SSL version selection. As an extra bonus, it works perfectly with mod_perl. -------------------------------------------------------------------------------- Update Information: This update to version 1.26 fixes an issue where only the prefix of the hostname was checked if there was no wildcard present, so for example ple.org would match a certificate starting with ple.org -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 4 2009 Paul Howarth - 1.26-1 - Update to 1.26 (verify_hostname_of_cert matched only the prefix for the hostname when no wildcard was given, e.g. ple.org matched against a certificate with name ple.com in it) * Fri Jul 3 2009 Paul Howarth - 1.25-1 - Update to 1.25 (fix t/nonblock.t for OS X 10.5 - CPAN RT#47240) -------------------------------------------------------------------------------- References: [ 1 ] Bug #509819 - perl-IO-Socket-SSL: incorrect checking of certificate hostnames https://bugzilla.redhat.com/show_bug.cgi?id=509819 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update perl-IO-Socket-SSL' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Oct 16, 2023
Fedora
197
security advisorydebianX.509Debian LTS: DLA-3284-1 Moderate: libapache-session-ldap Cert. Enforcement
In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3284-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Guilhem Moulin January 28, 2023 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : libapache-session-ldap-perl Version : 0.4-1+deb10u1 CVE ID : CVE-2020-36658 In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used. This update changes the default behavior to require X.509 validation against the distribution bundle /etc/ssl/certs/ca-certificates.crt. Previous behavior can reverted by setting `ldapVerify => "none"` when initializing the Apache::Session::LDAP object. NOTE: this update is a prerequisite for LemonLDAP::NG's CVE-2020-16093 fix when its session backend is set to Apache::Session::LDAP. For Debian 10 buster, this problem has been fixed in version 0.4-1+deb10u1. We recommend that you upgrade your libapache-session-ldap-perl packages. For the detailed security status of libapache-session-ldap-perl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libapache-session-ldap-perl Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS upgrades libapache-session-ldap-perl to implement stringent X.509 certificate checks for improved security.. Debian LTS, libapache-session-ldap, LDAP Security, X.509 Validation, Perl Update. .LinuxSecurity.com Team
Jan 28, 2023
Debian LTS
89
security advisorysecurity updatefedoraFedora 20: libinfinity Security Update Critical Certificate Check Issues
Security update to make libinfinity properly check certificates: https://github.com/gobby/gobby/issues/61. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-8345 2015-05-17 02:52:31 -------------------------------------------------------------------------------- Name : libinfinity Product : Fedora 20 Version : 0.6.6 Release : 1.fc20 URL : https://gobby.github.io Summary : Library implementing the infinote protocol Description : libinfinity is an implementation of the Infinote protocol written in GObject-based C. -------------------------------------------------------------------------------- Update Information: Security update to make libinfinity properly check certificates: https://github.com/gobby/gobby/issues/61 -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2015 Till Maas - 0.6.6-1 - Update to new release, fixes security issue: https://github.com/gobby/gobby/issues/61, #1221266 * Sun Nov 9 2014 Till Maas - 0.6.4-1 - Update to new release * Tue Oct 21 2014 Till Maas - 0.6.3-1 - Update to new release * Sat Sep 20 2014 Till Maas - 0.6.2-1 - Update to new release * Fri Aug 29 2014 Till Maas - 0.6.1-1 - Update to new release * Sun Aug 17 2014 Fedora Release Engineering - 0.5.5-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Sat Jun 7 2014 Fedora Release Engineering - 0.5.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Mon Jan 13 2014 Till Maas - 0.5.5-1 - Update to new release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1221266 - libinfinity: incorrect validation of certificates https://bugzilla.redhat.com/show_bug.cgi?id=1221266 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libinfinity' atthe command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Jun 01, 2015
•Critical
Fedora
89
security advisoryupdatecriticalFedora 23: FEDORA-2015-8317 Essential: libinfinity Security Audit
Security update to make libinfinity properly check certificates: https://github.com/gobby/gobby/issues/61. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-8316 2015-05-16 08:33:23 -------------------------------------------------------------------------------- Name : libinfinity Product : Fedora 22 Version : 0.6.6 Release : 1.fc22 URL : https://gobby.github.io Summary : Library implementing the infinote protocol Description : libinfinity is an implementation of the Infinote protocol written in GObject-based C. -------------------------------------------------------------------------------- Update Information: Security update to make libinfinity properly check certificates: https://github.com/gobby/gobby/issues/61 -------------------------------------------------------------------------------- ChangeLog: * Fri May 15 2015 Till Maas - 0.6.6-1 - Update to new release, fixes security issue: https://github.com/gobby/gobby/issues/61, #1221266 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1221266 - libinfinity: incorrect validation of certificates https://bugzilla.redhat.com/show_bug.cgi?id=1221266 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libinfinity' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Jun 01, 2015
•Important
Fedora
87
security advisoryDebiandigital signatureDebian: DSA-2824-1 Moderate: Curl Digital Signature Verification Flaw
Marc Deslauriers discovered that curl, a file retrieval tool, would mistakenly skip verifying the CN and SAN name fields when digital signature verification was disabled in the libcurl GnuTLS backend. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2824-1
Dec 19, 2013
Debian
202
security advisoryhigh severitysecurity patchopenSUSE 12.2 & 12.1: 2012:1481-1 Important: Opera Security Issues
An update that contains security fixes can now be installed. An update that contains security fixes can now be installed. An update that contains security fixes can now be installed.. openSUSE Security Update: opera to 12.10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:1481-1 Rating: important References: #788321 Affected Products: openSUSE 12.2 openSUSE 12.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This Opera 12.10 security update fixes following security issues: -an issue that could cause Opera not to correctly check for certificate revocation; -an issue where CORS requests could incorrectly retrieve contents of cross origin pages; -an issue where data URIs could be used to facilitate Cross-Site Scripting; -a high severity issue, as reported by Gareth Heyes; details will be disclosed at a later date -an issue where specially crafted SVG images could allow execution of arbitrary code; -a moderate severity issue, as reported by the Google Security Group; details will be disclosed at a later date Full changelog available at: https://help.opera.com/en/latest/ Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.2: zypper in -t patch openSUSE-2012-777 - openSUSE 12.1: zypper in -t patch openSUSE-2012-777 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.2 (i586 x86_64): opera-12.10-6.1 opera-gtk-12.10-6.1 opera-kde4-12.10-6.1 - openSUSE 12.1 (i586 x86_64): opera-12.10-26.1 opera-gtk-12.10-26.1 opera-kde4-12.10-26.1 References: . Apply essential security patches for Opera through openSUSEupdates. Tackle significant vulnerabilities and ensure robust security.. openSUSE Update, opera Security Fix, server protection, CORS issue, certificate revocation. . Severity: Important. LinuxSecurity.com Team
Nov 14, 2012
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!