Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98

Red Hat Advisory: RHSA-2023-5195-01 Major BGP Parsing Update Released

An update for frr is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: frr security and bug fix update Advisory ID: RHSA-2023:5195-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5195 Issue date: 2023-09-18 CVE Names: CVE-2023-38802 ===================================================================== 1. Summary: An update for frr is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v.8.6) - aarch64, ppc64le, s390x, x86_64 3. Description: FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): * frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router (CVE-2023-38802) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * BFD crash in FRR running in MetalLB (BZ#2231830) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2230983 -CVE-2023-38802 frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router 2231830 - BFD crash in FRR running in MetalLB [rhel-8.6.0.z] 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.8.6): Source: frr-7.5-11.el8_6.2.src.rpm aarch64: frr-7.5-11.el8_6.2.aarch64.rpm frr-debuginfo-7.5-11.el8_6.2.aarch64.rpm frr-debugsource-7.5-11.el8_6.2.aarch64.rpm ppc64le: frr-7.5-11.el8_6.2.ppc64le.rpm frr-debuginfo-7.5-11.el8_6.2.ppc64le.rpm frr-debugsource-7.5-11.el8_6.2.ppc64le.rpm s390x: frr-7.5-11.el8_6.2.s390x.rpm frr-debuginfo-7.5-11.el8_6.2.s390x.rpm frr-debugsource-7.5-11.el8_6.2.s390x.rpm x86_64: frr-7.5-11.el8_6.2.x86_64.rpm frr-debuginfo-7.5-11.el8_6.2.x86_64.rpm frr-debugsource-7.5-11.el8_6.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-38802 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJlCGxtAAoJENzjgjWX9erEl0IP/0g1tlLB+JRPsBSFWImcfE3K 1bhWpV0MDTjIBCUg0cSEBU3FU/WWOxsffGGX6V36+bu4sK1pJcONEgHYhTopuWj5 5NHFTeYsJFRkNxr6/dwXhhdXcbyhPYbs6IIDkkH3nSlhS/dhbbcnFs5pdYOPR+0c audY2QVvzH+/3wAcufQJ4V/paQbKy7p7y6J+nJn9adTWBXgbtr1Wv1PobGmQwbqT h3vEXqZc0EOE2Ouuj6U81VZiKYFdQdngrAzd09tKrO0M1aPaEwA0g2+Q43nwav1n g++3hhYJYMcdg9zfy5Ap2qhq19OB6mKLnzvpqnsYgEtf+akf75icFgYLMaf6Bzmk mBZS9/fuOCwtIZsw9lRxiS4zyLxG1sr2ySjQg3Dy0+M47BXCxD9puViN5bL+d9z9 GoiVurqmHiMQP/XxIshFU3w3C3V+q9dl7h91/bwswusSlBKlhq5tiW4EvSFtSRWA FXFmx8d5SkKVV1XlugIMlZ+ZBjnLMxs6k9pklGtIzC4Uslf1DYlvrG7o0vcZV6NI JlaNHLrEHfsvmO71YnBtaZpRFMLRVNph1iFYmjn/jBo+U+sPsjK3s/0sZoKvTRLS Gxfn/+AK0nJ97sLAUmVKQ9c6yALyCDXn4ZeR6lrL0eudG1mnsZbbsFfUKyvlh6Ck LiovqFGH+XxLrVdCchNz =NZki -----END PGPSIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Red Hat has announced a significant patch for frr that tackles a severe BGP parsing vulnerability, affecting routing functionalities.. frr security update, Red Hat Enterprise Linux, Important Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Sep 18, 2023 Important Red Hat
100

SUSE: 2022:3246-1 Important: frr Information Disclosure And DoS

An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for frr ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:3246-1 Rating: important References: #1202022 #1202023 Cross-References: CVE-2019-25074 CVE-2022-37032 CVSS scores: CVE-2019-25074 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-37032 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for frr fixes the following issues: - CVE-2022-37032: Fixed out-of-bounds read in the BGP daemon that may lead to information disclosure or denial of service (bsc#1202023). - CVE-2019-25074: Fixed a memory leak in the IS-IS daemon that may lead to server memory exhaustion(bsc#1202022). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-3246=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-3246=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-3246=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-3246=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.7.1 frr-debuginfo-7.4-150300.4.7.1 frr-debugsource-7.4-150300.4.7.1 frr-devel-7.4-150300.4.7.1 libfrr0-7.4-150300.4.7.1 libfrr0-debuginfo-7.4-150300.4.7.1 libfrr_pb0-7.4-150300.4.7.1 libfrr_pb0-debuginfo-7.4-150300.4.7.1 libfrrcares0-7.4-150300.4.7.1 libfrrcares0-debuginfo-7.4-150300.4.7.1 libfrrfpm_pb0-7.4-150300.4.7.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.7.1 libfrrgrpc_pb0-7.4-150300.4.7.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.7.1 libfrrospfapiclient0-7.4-150300.4.7.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.7.1 libfrrsnmp0-7.4-150300.4.7.1 libfrrsnmp0-debuginfo-7.4-150300.4.7.1 libfrrzmq0-7.4-150300.4.7.1 libfrrzmq0-debuginfo-7.4-150300.4.7.1 libmlag_pb0-7.4-150300.4.7.1 libmlag_pb0-debuginfo-7.4-150300.4.7.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.7.1 frr-debuginfo-7.4-150300.4.7.1 frr-debugsource-7.4-150300.4.7.1 frr-devel-7.4-150300.4.7.1 libfrr0-7.4-150300.4.7.1 libfrr0-debuginfo-7.4-150300.4.7.1 libfrr_pb0-7.4-150300.4.7.1 libfrr_pb0-debuginfo-7.4-150300.4.7.1 libfrrcares0-7.4-150300.4.7.1 libfrrcares0-debuginfo-7.4-150300.4.7.1 libfrrfpm_pb0-7.4-150300.4.7.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.7.1 libfrrgrpc_pb0-7.4-150300.4.7.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.7.1 libfrrospfapiclient0-7.4-150300.4.7.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.7.1 libfrrsnmp0-7.4-150300.4.7.1 libfrrsnmp0-debuginfo-7.4-150300.4.7.1 libfrrzmq0-7.4-150300.4.7.1 libfrrzmq0-debuginfo-7.4-150300.4.7.1 libmlag_pb0-7.4-150300.4.7.1 libmlag_pb0-debuginfo-7.4-150300.4.7.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.7.1 frr-debuginfo-7.4-150300.4.7.1 frr-debugsource-7.4-150300.4.7.1 frr-devel-7.4-150300.4.7.1 libfrr0-7.4-150300.4.7.1 libfrr0-debuginfo-7.4-150300.4.7.1 libfrr_pb0-7.4-150300.4.7.1 libfrr_pb0-debuginfo-7.4-150300.4.7.1 libfrrcares0-7.4-150300.4.7.1 libfrrcares0-debuginfo-7.4-150300.4.7.1 libfrrfpm_pb0-7.4-150300.4.7.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.7.1 libfrrgrpc_pb0-7.4-150300.4.7.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.7.1 libfrrospfapiclient0-7.4-150300.4.7.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.7.1 libfrrsnmp0-7.4-150300.4.7.1 libfrrsnmp0-debuginfo-7.4-150300.4.7.1 libfrrzmq0-7.4-150300.4.7.1 libfrrzmq0-debuginfo-7.4-150300.4.7.1 libmlag_pb0-7.4-150300.4.7.1 libmlag_pb0-debuginfo-7.4-150300.4.7.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): frr-7.4-150300.4.7.1 frr-debuginfo-7.4-150300.4.7.1 frr-debugsource-7.4-150300.4.7.1 frr-devel-7.4-150300.4.7.1 libfrr0-7.4-150300.4.7.1 libfrr0-debuginfo-7.4-150300.4.7.1 libfrr_pb0-7.4-150300.4.7.1 libfrr_pb0-debuginfo-7.4-150300.4.7.1 libfrrcares0-7.4-150300.4.7.1 libfrrcares0-debuginfo-7.4-150300.4.7.1 libfrrfpm_pb0-7.4-150300.4.7.1 libfrrfpm_pb0-debuginfo-7.4-150300.4.7.1 libfrrgrpc_pb0-7.4-150300.4.7.1 libfrrgrpc_pb0-debuginfo-7.4-150300.4.7.1 libfrrospfapiclient0-7.4-150300.4.7.1 libfrrospfapiclient0-debuginfo-7.4-150300.4.7.1 libfrrsnmp0-7.4-150300.4.7.1 libfrrsnmp0-debuginfo-7.4-150300.4.7.1 libfrrzmq0-7.4-150300.4.7.1 libfrrzmq0-debuginfo-7.4-150300.4.7.1 libmlag_pb0-7.4-150300.4.7.1 libmlag_pb0-debuginfo-7.4-150300.4.7.1 References: https://www.suse.com/security/cve/CVE-2019-25074.html https://www.suse.com/security/cve/CVE-2022-37032.html https://bugzilla.suse.com/1202022 https://bugzilla.suse.com/1202023 . The latest update resolves two major vulnerabilities in frr for SUSE Linux, addressing potential data exposure and risks of excessive memory consumption.. SUSE Security Update,frr risk management,critical data protection,SUSE patch process. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Sep 12, 2022 Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here