Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag 1security advisorydenial of serviceupdate

SUSE: 2005:070 Moderate: Openswan And Freeswan Denial Of Service Risk

Openswan, Freeswan and raccoon (ipsec-tools) have been updated to fix Openswan, Freeswan and raccoon (ipsec-tools) have been updated to fix crashes in aggressive mode. An attacker might send specially crafted crashes in aggressive mode. An attacker might send specially crafted packets that can crash racoon or Pluto. The ipsec-tools / racoon crashes are tracked by the Mitre CVE ID CVE-2005-3732.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Announcement Package: ipsec-tools,freeswan,openswan Announcement ID: SUSE-SA:2005:070 Date: Tue, 20 Dec 2005 11:00:00 +0000 Affected Products: SUSE LINUX 10.0 SUSE LINUX 9.3 SUSE LINUX 9.2 SUSE LINUX 9.1 SUSE Linux Enterprise Server 9 Vulnerability Type: remote denial of service Severity (1-10): 5 SUSE Default Package: no Cross-References: CVE-2005-3671, CVE-2005-3732 Content of This Advisory: 1) Security Vulnerability Resolved: Internet Key Exchange v1 problems in various IPsec implementations Problem Description 2) Solution or Work-Around 3) Special Instructions and Notes 4) Package Location and Checksums 5) Pending Vulnerabilities, Solutions, and Work-Arounds: See SUSE Security Summary Report. 6) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Problem Description and Brief Discussion Openswan, Freeswan and raccoon (ipsec-tools) have been updated to fix crashes in aggressive mode. An attacker might send specially crafted packets that can crash racoon or Pluto. The ipsec-tools / racoon crashes are tracked by theMitre CVE ID CVE-2005-3732. The openswan / freeswan crashes are tracked by the Mitre CVE ID CVE-2005-3671. SUSE Linux Enterprise Server 8 and SUSE Linux 9.0 contain freeswan 1.x and seem no to be affected by this problem. 2) Solution or Work-Around There is no known workaround, please install the update packages. 3) Special Instructions and Notes Please close and restart all running instances of openswan, freeswan or racoon after the update. 4) Package Location and Checksums The preferred method for installing security updates is to use the YaST Online Update (YOU) tool. YOU detects which updates are required and automatically performs the necessary steps to verify and install them. Alternatively, download the update packages for your distribution manually and verify their integrity by the methods listed in Section 6 of this announcement. Then install the packages using the command rpm -Fhv to apply the update, replacing with the filename of the downloaded RPM package. x86 Platform: SUSE LINUX 10.0: f82b5941ca8143a7f81315f2309c28e9 9d2318b4da837ae3175547ba261235c5 SUSE LINUX 9.3: 57b586b7aaa612c6250a8b037afe9335 6c152ba37641677fc4c59c44199a9225 SUSE LINUX 9.2: ca1ffa39b311744976bc9754f003c71f 88dedfd8ad12456158b0f60d0a4714f4 SUSE LINUX 9.1: 64b2fc324586f4af0060b8dd0c6597eb c523ed28073d5d76a1468763cc3820ea Power PC Platform: SUSE LINUX 10.0: fc12c770db47d6a51b7cfc7e92b0f003 6a0c80ce5f3a489221e605ea7ee724d5 x86-64 Platform: SUSE LINUX 10.0: 7550e022c5557841a06c6334d1a2632c b25da775ec60a014febb111179a42e91 SUSE LINUX 9.3: 8ee673f4f3386e6e0a5ea123cad19064 b65ee8de2eae744f40b7d33ae912995c SUSE LINUX 9.2: 8e4f8794e3f8322b4b5c301d964cfabd 30af3b8e87fe2018ae2b4a1a884887e2 SUSE LINUX 9.1: dbdf3e6c1d45a0e42f0facfd78edc29c bcf17a5cd915276de386e8181c87ec99 Sources: SUSE LINUX 10.0: 6ecfb0963c478d0962fad9146110466c e8f841c893e062f2e378eb269ba7d128 SUSE LINUX 9.3: 0944add00587f50f20c5f7a38fac5b4f 5d89968ca8f4b1718f0018c8c466ddf9 SUSE LINUX 9.2: 26d12b6a99b2723272a74f402ba4ff58 f097a1113a838a007c586c72bb7e43a2 SUSE LINUX 9.1: 362067f9c39a902c433af5f998b4eecf b7443b44f2ee6cab65f214e6e983f113 95d18a7cf39acaabb747edfc7b5411cd 517f4afbe1f3d1b3ad554582d4463bb2 Our maintenance customers are notified individually. The packages are offered for installation from the maintenance web: https://www.suse.com:443/ https://www.suse.com:443/ ______________________________________________________________________________ 5) Pending Vulnerabilities, Solutions, and Work-Arounds: none ______________________________________________________________________________ 6) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify replacing with the name of the file where you saved the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. Toimport the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and the integrity of a package needs to be verified to ensure that it has not been tampered with. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or RPM package: 1) Using the internal gpg signatures of the rpm package 2) MD5 checksums as provided in this announcement 1) The internal rpm package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from This email address is being protected from spambots. You need JavaScript enabled to view it. with the key ID 9C800ACA. This key is automatically imported into the RPM database (on RPMv4-based distributions) and the gpg key ring of 'root' during installation. You can also find it on the first installation CD and at the end of this announcement. 2) If you need an alternative means of verification, use the md5sum command to verify the authenticity of the packages. Execute the command md5sum after you downloaded the file from a SUSE FTP server or its mirrors. Then compare the resulting md5sum with the one that is listed in the SUSE security announcement. Because the announcement containing the checksums is cryptographically signed (by This email address is being protected from spambots. You need JavaScript enabled to view it.), the checksums show proof of the authenticity of the package if the signature of the announcement is valid. Note that the md5 sums published in the SUSE Security Announcements are valid for the respective packages only. Newer versions of these packages cannot be verified. - SUSE runs two security mailing lists to which any interested party may subscribe: This email address is being protected from spambots. You need JavaScript enabled to view it. - General Linux and SUSE security discussion. All SUSE security announcements are sent to this list. To subscribe, send an e-mail to . This email address is being protected from spambots. You need JavaScript enabled to view it. - SUSE's announce-only mailing list. Only SUSE's security announcements are sent to this list. To subscribe, send an e-mail to . For general information or the frequently asked questions (FAQ), send mail to or . ==================================================================== SUSE's security contact is or . The public key is listed below. ==================================================================== . Important announcement regarding Openswan and Freeswan patches that mitigate potential denial of service vulnerabilities present in SUSE platforms. Immediate action advised!. Openswan Update,Freeswan Security,IPsec-Tools Fix,SUSE Advisory,Denial Of Service Resolution. . LinuxSecurity.com Team

Calendar 2 Dec 20, 2005 SuSE
87
Ls Advisories Debian Esm H240
Price Tag 1security advisorydenial of servicedebian

Debian 3.0 DSA 201-1 Critical: FreeSWAN DoS Kernel Panic Advisory

Free/SWan in Debain does not properly handle certain very short packets and is said to cause a kernel panic.. -------------------------------------------------------------------------- Debian Security Advisory DSA 201-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze December 2nd, 2002 Debian -- Debian security FAQ -------------------------------------------------------------------------- Package : freeswan Vulnerability : denial of service Problem-type : remore Debian-specific: no CERT advisory : VU#459371 Bindview discovered a problem in several IPSEC implementations that do not properly handle certain very short packets. IPSEC is a set of security extensions to IP which provide authentication and encryption. Free/SWan in Debain is affected by this and is said to cause a kernel panic. This problem has been fixed in version 1.96-1.4 for the current stable distribution (woody) and in version 1.99-1 for the unstable distribution (sid). The old stable distribution (potato) does not contain Free/SWan packages. We recommend that you upgrade your freeswan package. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 637 1917ba063e4058123034247ddb105bfa Size/MD5 checksum: 322480 ad70a2ecd67bbc1ae7b6eb6fcdb84da8 Size/MD5 checksum: 2251757 9ea1a778713e48d39f3c77de5f54752b Architecture independent components: Size/MD5 checksum: 889918 30c73e274e84b62125136ec96160d23a Alphaarchitecture: Size/MD5 checksum: 1761260 2463d0474314aa775126544baea6ec95 ARM architecture: Size/MD5 checksum: 1700504 f15929f25fb8bb953748edbe188511ba Intel IA-32 architecture: Size/MD5 checksum: 1678486 878523a3a03254bfa1e6a39052b50e1b Intel IA-64 architecture: Size/MD5 checksum: 1861640 8a1a611c76cd023311bae7126dfa5b8a HP Precision architecture: Size/MD5 checksum: 1723252 22df2896c7f4f96a693da436addc6d95 Motorola 680x0 architecture: Size/MD5 checksum: 1660918 a55f47febd01eefd216e0da3b200de76 Big endian MIPS architecture: Size/MD5 checksum: 1718046 e8fc45985fc4c25a2a9b9ab7d6e21e08 Little endian MIPS architecture: Size/MD5 checksum: 1721266 c1bd4591da7f720d3fe7b4e134ac9f22 PowerPC architecture: Size/MD5 checksum: 1688682 0e1b5ce54d414da362c7eeda097acfa9 IBM S/390 architecture: Size/MD5 checksum: 1689648 fa2ac3caafbb37cbcde0138ba9b8f6c6 Sun Sparc architecture: Size/MD5 checksum: 1706714 53ef4472274ffaac7e24455d9ec6c1a1 These files will probably be moved into the stable distribution on its next revision. Survey on the use of Debian GNU/Linux 2.2 alias potato: Survey on the use of Debian 2.2 (potato) --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . A critical alert concerning the DoS weakness in Free/Swan that may cause kernel failures in Debian environments. Promptly upgrading is recommended to strengthen protective protocols.. FreeSWAN DoS Issue, Debian Security Advisory, Kernel Panic Fix, IPSEC Packet Handling. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 02, 2002 •Critical Debian
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here