Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
203

Mageia 9: MGASA-2024-0385 critical: krb5 forgery attack

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. (CVE-2024-3596) . MGASA-2024-0385 - Updated krb5 packages fix security vulnerability Publication date: 02 Dec 2024 URL: https://advisories.mageia.org/MGASA-2024-0385.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-3596 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. (CVE-2024-3596) References: - https://bugs.mageia.org/show_bug.cgi?id=33769 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/REJM7FX5TXBAJNRQ7XSMGPQSLMSSGMA3/ - https://www.cve.org/CVERecord?id=CVE-2024-3596 SRPMS: - 9/core/krb5-1.20.1-1.3.mga9 . Krb5 software revisions address spoofing attack flaw in Mageia. Crucial for users to apply updates without delay.. RADIUS Protocol,Mageia Security,krb5 Updates,forgery protection. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 02, 2024 Critical Mageia
219

Rocky Linux 9 RLSA-2024:4935 Important Freeradius Forgery Attack

Important: freeradius security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:4935", "synopsis": "Important: freeradius security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for freeradius.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.\n\nSecurity Fix(es):\n\n* freeradius: forgery attack (CVE-2024-3596)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2263240", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2263240", "description": ""}], "cves": [{"name": "CVE-2024-3596", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-3596", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-08-01T01:29:16.922240Z", "rpms": {"Rocky Linux 9": {"nvras": ["freeradius-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-0:3.0.21-40.el9_4.src.rpm", "freeradius-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-debugsource-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-debugsource-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-debugsource-0:3.0.21-40.el9_4.s390x.rpm","freeradius-debugsource-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-devel-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-devel-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-devel-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-devel-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-doc-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-doc-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-doc-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-doc-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-krb5-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-krb5-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-krb5-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-krb5-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-krb5-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-krb5-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-krb5-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-krb5-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-ldap-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-ldap-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-ldap-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-ldap-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-ldap-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-ldap-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-ldap-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-ldap-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-mysql-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-mysql-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-mysql-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-mysql-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-mysql-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-mysql-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-mysql-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-mysql-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-perl-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-perl-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-perl-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-perl-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-perl-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-perl-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm","freeradius-perl-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-perl-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-postgresql-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-postgresql-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-postgresql-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-postgresql-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-postgresql-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-postgresql-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-postgresql-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-postgresql-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-rest-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-rest-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-rest-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-rest-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-rest-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-rest-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-rest-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-rest-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-sqlite-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-sqlite-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-sqlite-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-sqlite-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-sqlite-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-sqlite-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-sqlite-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-sqlite-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-unixODBC-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-unixODBC-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-unixODBC-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-unixODBC-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-unixODBC-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-unixODBC-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-unixODBC-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-unixODBC-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-utils-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-utils-0:3.0.21-40.el9_4.ppc64le.rpm","freeradius-utils-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-utils-0:3.0.21-40.el9_4.x86_64.rpm", "freeradius-utils-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "freeradius-utils-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "freeradius-utils-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "freeradius-utils-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm", "python3-freeradius-0:3.0.21-40.el9_4.aarch64.rpm", "python3-freeradius-0:3.0.21-40.el9_4.ppc64le.rpm", "python3-freeradius-0:3.0.21-40.el9_4.s390x.rpm", "python3-freeradius-0:3.0.21-40.el9_4.x86_64.rpm", "python3-freeradius-debuginfo-0:3.0.21-40.el9_4.aarch64.rpm", "python3-freeradius-debuginfo-0:3.0.21-40.el9_4.ppc64le.rpm", "python3-freeradius-debuginfo-0:3.0.21-40.el9_4.s390x.rpm", "python3-freeradius-debuginfo-0:3.0.21-40.el9_4.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Urgent update released for FreeRADIUS on Rocky Linux 9, fixing a vulnerability linked to a forgery exploit identified as CVE-2024-3596.. freeradius security, rocky linux update, authentication service, network security. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 01, 2024 Important Rocky Linux
219

Rocky Linux 8 RLSA-2024:4936 Important: Freeradius Forgery Attack

Important: freeradius:3.0 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:4936", "synopsis": "Important: freeradius:3.0 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for freeradius, module.freeradius.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.\n\nSecurity Fix(es):\n\n* freeradius: forgery attack (CVE-2024-3596)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2263240", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2263240", "description": ""}], "cves": [{"name": "CVE-2024-3596", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-3596", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-08-01T01:28:22.605677Z", "rpms": {"Rocky Linux 8": {"nvras": ["freeradius-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-0:3.0.20-15.module+el8.10.0+1841+f214069a.src.rpm", "freeradius-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-debugsource-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-debugsource-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-devel-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm","freeradius-devel-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-doc-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-doc-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-krb5-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-krb5-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-krb5-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-krb5-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-ldap-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-ldap-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-ldap-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-ldap-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-mysql-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-mysql-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-mysql-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-mysql-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-perl-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-perl-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-perl-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-perl-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-postgresql-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-postgresql-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-postgresql-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-postgresql-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-rest-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-rest-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-rest-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm","freeradius-rest-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-sqlite-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-sqlite-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-sqlite-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-sqlite-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-unixODBC-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-unixODBC-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-unixODBC-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-unixODBC-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-utils-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-utils-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "freeradius-utils-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "freeradius-utils-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "python3-freeradius-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "python3-freeradius-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm", "python3-freeradius-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.aarch64.rpm", "python3-freeradius-debuginfo-0:3.0.20-15.module+el8.10.0+1841+f214069a.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. An update for FreeRADIUS on Rocky Linux 8 has been released to patch vulnerabilities related to forgery attacks, enhancing system security and integrity. freeradius update, important security fix, Rocky Linux advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 01, 2024 Important Rocky Linux
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here