Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
203

Mageia 9 MGASA-2023-0313 Critical: OpenSSL Cipher Key Processing Issue

The updated packages fix a security vulnerability: Incorrect cipher key & IV length processing. (CVE-2023-5363) References: . MGASA-2023-0313 - Updated openssl packages fix a security vulnerability Publication date: 09 Nov 2023 URL: https://advisories.mageia.org/MGASA-2023-0313.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-5363 The updated packages fix a security vulnerability: Incorrect cipher key & IV length processing. (CVE-2023-5363) References: - https://bugs.mageia.org/show_bug.cgi?id=32452 - https://www.cve.org/CVERecord?id=CVE-2023-5363 SRPMS: - 9/core/openssl-3.0.12-1.mga9 . Refreshed Mageia updates address openssl vulnerabilities linked to improper handling of cipher key and IV length.. Mageia OpenSSL Update, Security Fix Mageia, OpenSSL Vulnerability Advisory, Cipher Key Length Issue. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Nov 09, 2023 Critical Mageia
202

openSUSE Leap 15.5 Security Advisory: 2023:4190-1 Important OpenSSL-3 Issue

This update for openssl-3 fixes the following issues: CVE-2023-5363: Incorrect cipher key and IV length processing. (bsc#1216163) CVE-2023-3817: Add test of DH_check() with q = p + 1. (bsc#1213853). # Security update for openssl-3 Announcement ID: SUSE-SU-2023:4190-1 Rating: important References: * bsc#1213853 * bsc#1216163 Cross-References: * CVE-2023-3817 * CVE-2023-5363 CVSS scores: * CVE-2023-3817 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-3817 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-5363 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2023-5363: Incorrect cipher key and IV length processing. (bsc#1216163) * CVE-2023-3817: Add test of DH_check() with q = p + 1. (bsc#1213853) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-4190=1 openSUSE-SLE-15.5-2023-4190=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4190=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * libopenssl3-3.0.8-150500.5.14.1 * openssl-3-debugsource-3.0.8-150500.5.14.1 * openssl-3-debuginfo-3.0.8-150500.5.14.1 * openssl-3-3.0.8-150500.5.14.1 * libopenssl-3-devel-3.0.8-150500.5.14.1 * libopenssl3-debuginfo-3.0.8-150500.5.14.1 * openSUSE Leap 15.5 (x86_64) *libopenssl3-32bit-3.0.8-150500.5.14.1 * libopenssl-3-devel-32bit-3.0.8-150500.5.14.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.14.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.14.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl3-64bit-debuginfo-3.0.8-150500.5.14.1 * libopenssl-3-devel-64bit-3.0.8-150500.5.14.1 * libopenssl3-64bit-3.0.8-150500.5.14.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * libopenssl3-3.0.8-150500.5.14.1 * openssl-3-debugsource-3.0.8-150500.5.14.1 * openssl-3-debuginfo-3.0.8-150500.5.14.1 * openssl-3-3.0.8-150500.5.14.1 * libopenssl-3-devel-3.0.8-150500.5.14.1 * libopenssl3-debuginfo-3.0.8-150500.5.14.1 ## References: * https://www.suse.com/security/cve/CVE-2023-3817.html * https://www.suse.com/security/cve/CVE-2023-5363.html * https://bugzilla.suse.com/show_bug.cgi?id=1213853 * https://bugzilla.suse.com/show_bug.cgi?id=1216163 . Measures to address OpenSSL-3 security flaws in openSUSE, safeguarding system stability and protecting against severe risks.. OpenSUSE, OpenSSL Patch, Threat Management, Security Fix, Critical Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 25, 2023 Important OpenSUSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here