Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
100
security advisorymoderateSUSESUSE: 2021:3352-1 Moderate: apache2-mod_auth_openidc Open Redirects
An update that fixes 5 vulnerabilities is now available. . SUSE Security Update: Security update for apache2-mod_auth_openidc ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:3352-1 Rating: moderate References: #1188638 #1188639 #1188848 #1188849 #1190223 Cross-References: CVE-2021-32785 CVE-2021-32786 CVE-2021-32791 CVE-2021-32792 CVE-2021-39191 CVSS scores: CVE-2021-32785 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-32786 (SUSE): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CVE-2021-32791 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-32792 (SUSE): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2021-39191 (NVD) : 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N CVE-2021-39191 (SUSE): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Affected Products: SUSE Linux Enterprise Server 12-SP5 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2021-32785: format string bug via hiredis (bsc#1188638) - CVE-2021-32786: open redirect in logout functionality (bsc#1188639) - CVE-2021-32791: Hardcoded static IV and AAD with a reused key in AES GCM encryption (bsc#1188849) - CVE-2021-32792: XSS when using OIDCPreservePost On (bsc#1188848) - CVE-2021-39191: open redirect issue in target_link_uri parameter (bsc#1190223) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP5: zypper in -t patchSUSE-SLE-SERVER-12-SP5-2021-3352=1 Package List: - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): apache2-mod_auth_openidc-2.4.0-3.23.1 apache2-mod_auth_openidc-debuginfo-2.4.0-3.23.1 apache2-mod_auth_openidc-debugsource-2.4.0-3.23.1 References: https://www.suse.com/security/cve/CVE-2021-32785.html https://www.suse.com/security/cve/CVE-2021-32786.html https://www.suse.com/security/cve/CVE-2021-32791.html https://www.suse.com/security/cve/CVE-2021-32792.html https://www.suse.com/security/cve/CVE-2021-39191.html https://bugzilla.suse.com/1188638 https://bugzilla.suse.com/1188639 https://bugzilla.suse.com/1188848 https://bugzilla.suse.com/1188849 https://bugzilla.suse.com/1190223 . SUSE Security Patch for apache2-mod_auth_openidc addresses several vulnerabilities, such as open redirect flaws and operational issues.. SUSE Linux, apache2, security update, authentication, openidc. . LinuxSecurity.com Team
Oct 12, 2021
SuSE
100
security advisoryremote code executionSUSESUSE: 2007-013 Moderate: Remote Code Execution in Xine Package
This update fixes several format string bugs that can be exploited remotely This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. with user-assistance to execute arbitrary code. Since SUSE Linux version 10.1 format string bugs are not exploitable anymore. (CVE-2007-0017)2) Solution or Work-Around. -----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SUSE Security Announcement Package: xine-ui,xine-lib,xine-extra,xine-devel Announcement ID: SUSE-SA:2007:013 Date: Tue, 23 Jan 2007 08:00:00 +0000 Affected Products: SUSE LINUX 9.3 SUSE LINUX 10.0 SUSE LINUX 10.1 openSUSE 10.2 SUSE SLED 10 SLE SDK 10 Vulnerability Type: remote code execution Severity (1-10): 4 SUSE Default Package: no Cross-References: CVE-2007-0017 Content of This Advisory: 1) Security Vulnerability Resolved: format string bug Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. Since SUSE Linux version 10.1 format string bugs are not exploitable anymore. (CVE-2007-0017) 2) Solution or Work-Around No temporary work-around known. 3) Special Instructions and Notes none 4)Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv to apply the update, replacing with the filename of the downloaded RPM package. x86 Platform: openSUSE 10.2: 2cacbb4f4e177362149518481480165a 73cbdd8d443596547875804bd8e2ca8f 2114f7c6a4c8351adab588c173419778 5d4dd945a812ba0b17619c267ec8f2b5 SUSE LINUX 10.1: 3eb1465401e5e1c6f36d8e2d7ca3e114 e2fbf53b629e835dbc2558e87fabf926 d710db4b4d20f7ea4485d16845cb4be2 SUSE LINUX 10.0: 06753ebd3608223077c95c01f8bc3122 60ab4fd7c193d687d9484e5691aa3f01 4bc3f28d7e600fbb78c65f6b0dcfc436 SUSE LINUX 9.3: c944ed72f913771f0c2300883573e111 cee2a8a9669b429dde4e465e83aae70f Power PC Platform: openSUSE 10.2: a1fcfa82deed685446a213439639a579 bc2dcf2266dbb56b1a0291209aad2dd7 SUSE LINUX 10.1: c337440571123263478dd2a64059a4e8 3cf476901522d7b5abd5bf3cb18484a9 a9e762bad246963a7564c1f36a5f0392 SUSE LINUX 10.0: 930dc314de3ab49a8655e6cdb89ff50d ddd255708abfb433a3497d790491be55 827125d558472b685f0f1843d0eb3850 x86-64 Platform: openSUSE 10.2: 1dac6b23d257670ca7182f018c12a69b 11dae8e2ecb5a78eb6b1cd39713f6322 519480f44a28d4e3cab37aceca7e7c13 3b5db06dab41a4ff2a53d22b3f6f6238 b1a06bf5fd93c905bf5008859c88690d aa85b56d559aca4960693bad80a451bd SUSE LINUX10.1: 72f6cfc29f428a5d7dc40fbcb285cfe6 34382ef5b0ec94524678bdf842a21ecb 316fd37892ef25073cf9d6ae11fb510b ee0a3ce52f3bf431ced82dbd0148890c SUSE LINUX 10.0: 83094481db18fb55447a19b86db281ff 0e1b36454127be6815d1f52325ee1a70 45829c44efd83afaefe570d81f8a7568 bfe5d54a07d28cb9fef528c0257d4db7 SUSE LINUX 9.3: e829f9cbd5e02a0498f03a2180b57963 064665c8b3ac38f71634734c101f1602 8e7011003db37a1799bbd531ae957a28 Sources: openSUSE 10.2: f92b96c21a6e45ede2faa81c9efade83 ed0382a57f117bcf04236ca660092afe SUSE LINUX 10.1: 1d347a598b2e8dfc5eaa4f7b9c951242 SUSE LINUX 10.0: d1d2036b46056a00b3c5a0cee5371ad8 SUSE LINUX 9.3: 02ae3f6c9a88ec0aabcce701bba20542 Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: SLE SDK 10 http://support.novell.com/techcenter/psdb/3850f4cb30959892275d84ebf0b1dfc6.html SUSE SLED 10 http://support.novell.com/techcenter/psdb/3850f4cb30959892275d84ebf0b1dfc6.html ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify replacing with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from
Jan 23, 2007
SuSE
100
security advisorybuffer overflowlocal privilege escalationSuSE: SA:2004:045 Critical: Apache Security Flaws and Memory Leak Problem
Ethereal is vulnerable to a format string bug in it's SOCKS code and to a heap buffer overflow in it's NTLMSSP code.. ______________________________________________________________________________ SuSE Security Announcement Package: ethereal Announcement-ID: SuSE-SA:2003:019 Date: Friday, Mar 21th 2003 10:12 MET Affected products: 7.1, 7.2, 7.3, 8.0, 8.1 SuSE Linux Database Server, SuSE eMail Server III, 3.1 SuSE Linux Enterprise Server 7, SuSE Linux Firewall on CD/Admin host SuSE Linux Connectivity Server SuSE Linux Office Server Vulnerability Type: local privilege escalation Severity (1-10): 3 SuSE default package: yes Cross References: CAN-2003-0081 Content of this advisory: 1) security vulnerability resolved: - buffer overlfow - format string bug problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds: - mutt - kernel - apcupsd - vnc - openssl - mod_php4 - pgp4pine - nethack - netpbm - man 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information Ethereal is a GUI for analyzing and displaying network traffic. Ethereal is vulnerable to a format string bug in it's SOCKS code and to a heap buffer overflow in it's NTLMSSP code. These bugs can be abused to crash ethereal or maybe to execute arbitrary code on the machine running ethereal. There is no temporaryworkaround known. Please download the update package for your distribution and verify its integrity by the methods listed in section 3) of this announcement. Then, install the package using the command "rpm -Fhv file.rpm" to apply the update. Our maintenance customers are being notified individually. The packages are being offered to install from the maintenance web. Please note, missing packages will be published as soon as possible. Intel i386 Platform: SuSE-8.1: 1ea03e4f888f30bc37669ea4dd0cfe30 patch rpm(s): 317046452887bdb6d9bc3882909540f1 source rpm(s): 831fd8c3f888a7bf832422aa58a5ea35 SuSE-8.0: 3e4762aa5dabfce6dc8bce77ff623d7f patch rpm(s): 9404cb917fb1ab56a59746d1c12a9c81 source rpm(s): 1846c9dfe0ba59e99966a63d3ba0e645 SuSE-7.3: e9f55cdf8d89f0dee322f5829908d3d9 source rpm(s): 57f1589a18d614afa17a0f779625adff SuSE-7.2: c7362031d0082b097d50bed249e170bf source rpm(s): 39b2f8a42575f42c9f68d7d8b8b41cd7 SuSE-7.1: b6a7c65cc20e0bb901bf1599ff107e6a source rpm(s): b650101ce46e7f8050c674cfb275cfe6 Sparc Platform: SuSE-7.3: e979f24ce5292a2a698f752d67bfa916 source rpm(s): 32504bc48c8e6771ff6285c59668d282 AXP Alpha Platform: SuSE-7.1: 111e039aafef5669863b6d502392d115 source rpm(s): 2373bb476bb8bea7667e9621411fbc0f PPC Power PC Platform: SuSE-7.3: ab58afaae72d603941de12ad97baba39 source rpm(s): ba0fbd761194112f0a09c8422f54a25b SuSE-7.1: dbad6f03abc69882ce47a78360cde7fa source rpm(s): 05517631f384f6244d26a5dc3bb4a3c7 ______________________________________________________________________________ 2) Pending vulnerabilities in SuSE Distributions and Workarounds: - mutt A buffer overflow in mutt's IMAP code mayresult in remote system compromise. New packages are currently being build and will be available soon. - kernel A bug in the Linux kernel was found that allows local users to become root. The bug can just be exploited if ptrace(2) is allowed, LKM and kmod support is enabled. We already build new kernels and are currently testing them. As a workaround kernel module loading can be disabled after every boot by executing the following action as root: # echo /just/a/temporary/workaround > /proc/sys/kernel/modprobe Please note, that this will disable some services. - apcupsd The control and management daemon for APC UPS systems is vulnerable to remote code execution due to buffer overflow and format string bugs. A dedicated advisory for this issue will be released as soon as all packages are being build. - vnc VNC (Virtual Network Computing) uses a weak cookie generation process which can be exploited by an attacker to bypass authentication. New packages are currently being tested and will be available on our FTP servers soon. - openssl A paper regarding remote timing attacks against OpenSSL has been published by researchers of the Stanford University. It is possible to extract the private RSA key used by services using OpenSSL by observing their timing behavior. Additionally czech researchers found another bug in OpenSSL which is an extension of the "Bleichenbacher Attack". Fixed packages will be available on our FTP servers soon. - mod_php4 4.3.0 A serious security vulnerability was found in mod_php 4.3.0 which allows a remote attacker to read files or even execute PHP-code. This was possible due to direct access to the CGI module. SuSE does not ship this vulnerable version. - pgp4pine A buffer overflow in pine's filter add-on pgp4pine can be abused to execute arbitrary commands remotely. The pgp4pineversion SuSE ships is not vulnerable to this bug. - nethack A buffer overflow in nethack can be exploited local users to gain higher privileges if the nethack binary is installed setuid/setgid. This bug is fixed for upcoming SuSE Linux versions. As a temporary workaround you should disable all s-bits on the nethack binary (/etc/permissions.local). - netpbm The netpbm package contains various integer overflows which can lead to arbitrary code execution. New packages are published on our FTP servers. - man A vulnerability in man was published that allows local privilege escalation. SuSE Linux does not ship this vulnerable version of man. ______________________________________________________________________________ 3) standard appendix: authenticity verification, additional information - Package authenticity verification: SuSE update packages are available on many mirror ftp servers all over the world. While this service is being considered valuable and important to the free and open source software community, many users wish to be sure about the origin of the package and its content before installing the package. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or rpm package: 1) md5sums as provided in the (cryptographically signed) announcement. 2) using the internal gpg signatures of the rpm package. 1) execute the command md5sum after you downloaded the file from a SuSE ftp server or its mirrors. Then, compare the resulting md5sum with the one that is listed in the announcement. Since the announcement containing the checksums is cryptographically signed (usually using the key
Mar 21, 2003
•Critical
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!