Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100

SUSE: 2023:4190-1 critical: OpenSSL-3 encryption vulnerabilities

* bsc#1213853 * bsc#1216163 Cross-References: * CVE-2023-3817 . # Security update for openssl-3 Announcement ID: SUSE-SU-2023:4190-1 Rating: important References: * bsc#1213853 * bsc#1216163 Cross-References: * CVE-2023-3817 * CVE-2023-5363 CVSS scores: * CVE-2023-3817 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-3817 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5363 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2023-5363: Incorrect cipher key and IV length processing. (bsc#1216163) * CVE-2023-3817: Add test of DH_check() with q = p + 1. (bsc#1213853) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4190=1 openSUSE-SLE-15.5-2023-4190=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4190=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl3-3.0.8-150500.5.14.1 * openssl-3-debugsource-3.0.8-150500.5.14.1 * openssl-3-debuginfo-3.0.8-150500.5.14.1 * openssl-3-3.0.8-150500.5.14.1 * libopenssl-3-devel-3.0.8-150500.5.14.1 * libopenssl3-debuginfo-3.0.8-150500.5.14.1 * openSUSE Leap 15.5 (x86_64) * libopenssl3-32bit-3.0.8-150500.5.14.1 * libopenssl-3-devel-32bit-3.0.8-150500.5.14.1 *libopenssl3-32bit-debuginfo-3.0.8-150500.5.14.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl3-64bit-debuginfo-3.0.8-150500.5.14.1 * libopenssl-3-devel-64bit-3.0.8-150500.5.14.1 * libopenssl3-64bit-3.0.8-150500.5.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl3-3.0.8-150500.5.14.1 * openssl-3-debugsource-3.0.8-150500.5.14.1 * openssl-3-debuginfo-3.0.8-150500.5.14.1 * openssl-3-3.0.8-150500.5.14.1 * libopenssl-3-devel-3.0.8-150500.5.14.1 * libopenssl3-debuginfo-3.0.8-150500.5.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3817.html * https://www.suse.com/security/cve/CVE-2023-5363.html * https://bugzilla.suse.com/show_bug.cgi?id=1213853 * https://bugzilla.suse.com/show_bug.cgi?id=1216163 . A critical security patch for OpenSSL-3 tackles several vulnerabilities. Make sure your systems are current with this update.. OpenSSL update, SUSE security, software patch. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 25, 2023 Important SuSE
172

Ubuntu 23.10 USN-6450-1 Critical: OpenSSL Access Issues

Several security issues were fixed in OpenSSL.. ========================================================================== Ubuntu Security Notice USN-6450-1 October 24, 2023 openssl vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 23.04 - Ubuntu 22.04 LTS Summary: Several security issues were fixed in OpenSSL. Software Description: - openssl: Secure Socket Layer (SSL) cryptographic library and tools Details: Tony Battersby discovered that OpenSSL incorrectly handled key and initialization vector (IV) lengths. This could lead to truncation issues and result in loss of confidentiality for some symmetric cipher modes. (CVE-2023-5363) Juerg Wullschleger discovered that OpenSSL incorrectly handled the AES-SIV cipher. This could lead to empty data entries being ignored, resulting in certain applications being misled. This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.04. (CVE-2023-2975) It was discovered that OpenSSL incorrectly handled checking excessively long DH keys or parameters. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.04. (CVE-2023-3446, CVE-2023-3817) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10: libssl3 3.0.10-1ubuntu2.1 Ubuntu 23.04: libssl3 3.0.8-1ubuntu1.4 Ubuntu 22.04 LTS: libssl3 3.0.2-0ubuntu1.12 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6450-1 CVE-2023-2975, CVE-2023-3446, CVE-2023-3817, CVE-2023-5363 Package Information: https://launchpad.net/ubuntu/+source/openssl/3.0.10-1ubuntu2.1 https://launchpad.net/ubuntu/+source/openssl/3.0.8-1ubuntu1.4 https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.12 . Critical OpenSSL vulnerabilities addressed in Ubuntu versions 23.10, 23.04, and 22.04 LTS. Ensure your systems are updated without delay.. OpenSSL Threats, Ubuntu Security Updates, Crypto Issues. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 24, 2023 Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here