A certificate about to expire was removed from ca-certificates.. =========================================================================Ubuntu Security Notice USN-5089-2 September 23, 2021 ca-certificates update ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: A certificate about to expire was removed from ca-certificates. Software Description: - ca-certificates: Common CA certificates Details: USN-5089-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: The ca-certificates package contained a CA certificate that will expire on 2021-09-30 and will cause connectivity issues. This update removes the “DST Root CA X3” CA. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: ca-certificates 20210119~16.04.1ubuntu0.1~esm1 Ubuntu 14.04 ESM: ca-certificates 20190110~14.04.1~esm2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5089-2 https://ubuntu.com/security/notices/USN-5089-1 . Resolve connectivity issues linked to an expiring CA certificate in Ubuntu 14.04 and 16.04 ESM by following these essential steps for updates. ca-certificates update, connectivity issue, expiring certificate, Ubuntu security. . Severity: Critical. LinuxSecurity.com Team
An expired certificate was removed from ca-certificates.. =========================================================================Ubuntu Security Notice USN-4377-2 June 01, 2020 ca-certificates update ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 ESM - Ubuntu 12.04 ESM Summary: An expired certificate was removed from ca-certificates. Software Description: - ca-certificates: Common CA certificates Details: USN-4377-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA. In addition, on Ubuntu 12.04 ESM and Ubuntu 14.04 ESM, this update refreshes the included certificates to those contained in the 20190110 package. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM: ca-certificates 20190110~14.04.1~esm1 Ubuntu 12.04 ESM: ca-certificates 20190110~12.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4377-2 https://ubuntu.com/security/notices/USN-4377-1 . An outdated certificate has been deleted from the Ubuntu ca-certificates package, resolving connection problems. Update is available for impacted versions.. Ubuntu Security, ca-certificates, certificate update, expired certificates. . LinuxSecurity.com Team
An expired certificate was removed from ca-certificates.. =========================================================================Ubuntu Security Notice USN-4377-1 June 01, 2020 ca-certificates update ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 19.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: An expired certificate was removed from ca-certificates. Software Description: - ca-certificates: Common CA certificates Details: The ca-certificates package contained an expired CA certificate that caused connectivity issues. This update removes the "AddTrust External Root" CA. In addition, on Ubuntu 16.04 LTS and Ubuntu 18.04 LTS, this update refreshes the included certificates to those contained in the 20190110 package. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: ca-certificates 20190110ubuntu1.1 Ubuntu 19.10: ca-certificates 20190110ubuntu0.19.10.1 Ubuntu 18.04 LTS: ca-certificates 20190110~18.04.1 Ubuntu 16.04 LTS: ca-certificates 20190110~16.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4377-1 https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/1881533 Package Information: https://launchpad.net/ubuntu/+source/ca-certificates/20190110ubuntu1.1 https://launchpad.net/ubuntu/+source/ca-certificates/20190110ubuntu0.19.10.1 https://launchpad.net/ubuntu/+source/ca-certificates/20190110~18.04.1 https://launchpad.net/ubuntu/+source/ca-certificates/20190110~16.04.1 . A deprecated certificate was eliminated from ca-certificates in Ubuntu, impacting several versions. Guidance for updating has been provided.. Expired Certificate, ca-certificates Update, UbuntuSecurity Notice, Certificate Removal. . LinuxSecurity.com Team
An update that solves one vulnerability and has three fixes is now available.. openSUSE Security Update: Security update for dpdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4003-1 Rating: moderate References: #1069601 #1073363 #1089638 #1102310 Cross-References: CVE-2018-1059 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for dpdk to version 16.11.8 provides the following security fix: - CVE-2018-1059: restrict untrusted guest to misuse virtio to corrupt host application (ovs-dpdk) memory which could have lead all VM to lose connectivity (bsc#1089638) and following non-security fixes: - Enable the broadcom chipset family Broadcom NetXtreme II BCM57810 (bsc#1073363) - Fix a latency problem by using cond_resched rather than schedule_timeout_interruptible (bsc#1069601) - Fix a syntax error affecting csh environment configuration (bsc#1102310) - Fixes in net/bnxt: * Fix HW Tx checksum offload check * Fix incorrect IO address handling in Tx * Fix Rx ring count limitation * Check access denied for HWRM commands * Fix RETA size * Fix close operation - Fixes in eal/linux: * Fix an invalid syntax in interrupts * Fix return codes on thread naming failure - Fixes in kni: * Fix crash with null name * Fix build with gcc 8.1 - Fixes in net/thunderx: * Fix build with gcc optimization on * Avoid sq door bell write on zero packet - net/bonding: Fix MAC address reset - vhost: Fix missing increment of log cache count This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommendedinstallation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1484=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dpdk-16.11.8-6.8.1 dpdk-debuginfo-16.11.8-6.8.1 dpdk-debugsource-16.11.8-6.8.1 dpdk-devel-16.11.8-6.8.1 dpdk-devel-debuginfo-16.11.8-6.8.1 dpdk-examples-16.11.8-6.8.1 dpdk-examples-debuginfo-16.11.8-6.8.1 dpdk-tools-16.11.8-6.8.1 - openSUSE Leap 42.3 (x86_64): dpdk-kmp-default-16.11.8_k4.4.162_78-6.8.1 dpdk-kmp-default-debuginfo-16.11.8_k4.4.162_78-6.8.1 - openSUSE Leap 42.3 (noarch): dpdk-doc-16.11.8-6.8.1 References: https://www.suse.com/security/cve/CVE-2018-1059.html https://bugzilla.suse.com/1069601 https://bugzilla.suse.com/1073363 https://bugzilla.suse.com/1089638 https://bugzilla.suse.com/1102310 -- . The latest patch for openSUSE Leap 42.3 resolves a significant vulnerability in dpdk, which was causing connectivity issues for virtual machines.. openSUSE Update, dpdk Security Fix, moderate Threat, Linux Patch, System Security Update. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.