Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
100
security advisorypatchimportantSUSE: 2022:14888-2 Critical: OpenSSL Heartbeat Vulnerability Patch
An update that fixes four vulnerabilities is now available. . SUSE Security Update: Security update for strongswan ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:14887-1 Rating: important References: #1107874 #1109845 #1194471 Cross-References: CVE-2018-16151 CVE-2018-16152 CVE-2018-17540 CVE-2021-45079 CVSS scores: CVE-2018-16151 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2018-16151 (SUSE): 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2018-16152 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2018-16152 (SUSE): 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2018-17540 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-17540 (SUSE): 7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2021-45079 (NVD) : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2021-45079 (SUSE): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L Affected Products: SUSE Linux Enterprise Debuginfo 11-SP3 SUSE Linux Enterprise Debuginfo 11-SP4 SUSE Linux Enterprise Point of Sale 11-SP3 SUSE Linux Enterprise Server 11-SP4-LTSS ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for strongswan fixes the following issues: - CVE-2018-16151: Fixed flaws in gmp plugin that could lead to authorization bypass. (bsc#1107874) - CVE-2018-16152: Fixed flaws in gmp plugin that could lead to authorization bypass. (bsc#1107874) - CVE-2018-17540: Fixed insufficient input validation in gmp plugin. (bsc#1109845) - CVE-2021-45079: Fixed authentication bypass in EAP authentication. (bsc#1194471) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4-LTSS: zypper in -t patch slessp4-strongswan-14887=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-strongswan-14887=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-strongswan-14887=1 - SUSE Linux Enterprise Debuginfo 11-SP3: zypper in -t patch dbgsp3-strongswan-14887=1 Package List: - SUSE Linux Enterprise Server 11-SP4-LTSS (i586 ppc64 s390x x86_64): strongswan-4.4.0-6.36.12.1 strongswan-doc-4.4.0-6.36.12.1 - SUSE Linux Enterprise Point of Sale 11-SP3 (i586): strongswan-4.4.0-6.36.12.1 strongswan-doc-4.4.0-6.36.12.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ppc64 s390x x86_64): strongswan-debuginfo-4.4.0-6.36.12.1 strongswan-debugsource-4.4.0-6.36.12.1 - SUSE Linux Enterprise Debuginfo 11-SP3 (i586 s390x x86_64): strongswan-debuginfo-4.4.0-6.36.12.1 strongswan-debugsource-4.4.0-6.36.12.1 References: https://www.suse.com/security/cve/CVE-2018-16151.html https://www.suse.com/security/cve/CVE-2018-16152.html https://www.suse.com/security/cve/CVE-2018-17540.html https://www.suse.com/security/cve/CVE-2021-45079.html https://bugzilla.suse.com/1107874 https://bugzilla.suse.com/1109845 https://bugzilla.suse.com/1194471 . An update has resolved four vulnerabilities in strongswan, highlighting an authentication bypass and input validation flaws. Follow the instructions below to apply these patches. strongswan Fix, SUSE Security Patch, Authentication Bypass Fix. . Severity: Important. LinuxSecurity.com Team
Feb 18, 2022
•Important
SuSE
197
security advisorysecurity issueDebianDebian LTS: DLA-1522-1 StrongSwan Security Fix for GMP Plugin Issues
Sze Yiu Chau and his team from Purdue University and The University of Iowa found several security issues in the gmp plugin for strongSwan, an IKE/IPsec suite. . Package : strongswan Version : 5.2.1-6+deb8u7 CVE ID : CVE-2018-16151 CVE-2018-16152 Sze Yiu Chau and his team from Purdue University and The University of Iowa found several security issues in the gmp plugin for strongSwan, an IKE/IPsec suite. CVE-2018-16151 The OID parser in the ASN.1 code in gmp allows any number of random bytes after a valid OID. CVE-2018-16152 The algorithmIdentifier parser in the ASN.1 code in gmp doesn't enforce a NULL value for the optional parameter which is not used with any PKCS#1 algorithm. For Debian 8 "Jessie", these problems have been fixed in version 5.2.1-6+deb8u7. We recommend that you upgrade your strongswan packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu LTS issued a patch for openvpn resolving various tls plugin vulnerabilities, improving safe communication.. Debian StrongSwan Update, IKE/IPsec Security Fix, GMP Plugin Issues. . Severity: Critical. LinuxSecurity.com Team
Sep 26, 2018
•Critical
Debian LTS
87
security advisorydenial of servicedebianDebian: DSA-3962-1 Critical: strongSwan DoS Due To GMP Plugin Issue
A denial of service vulnerability was identified in strongSwan, an IKE/IPsec suite, using Google's OSS-Fuzz fuzzing project. The gmp plugin in strongSwan had insufficient input validation when verifying . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3962-1
Sep 03, 2017
•Critical
Debian
202
security advisorysecurity issueimportantopenSUSE 12.1: Important Security Update for Strongswan CVE-2012-2388
An update that fixes one vulnerability is now available.. openSUSE Security Update: update for strongswan ______________________________________________________________________________ Announcement ID: openSUSE-SU-2012:0691-1 Rating: important References: #761325 Cross-References: CVE-2012-2388 Affected Products: openSUSE 12.1 openSUSE 11.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Strongswan's gmp plugin could treat empty RSA signature as valid ones Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 12.1: zypper in -t patch openSUSE-2012-309 - openSUSE 11.4: zypper in -t patch openSUSE-2012-309 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 12.1 (i586 x86_64): strongswan-4.5.3-5.4.1 strongswan-debugsource-4.5.3-5.4.1 strongswan-doc-4.5.3-5.4.1 strongswan-ikev1-4.5.3-5.4.1 strongswan-ikev1-debuginfo-4.5.3-5.4.1 strongswan-ikev2-4.5.3-5.4.1 strongswan-ikev2-debuginfo-4.5.3-5.4.1 strongswan-ipsec-4.5.3-5.4.1 strongswan-ipsec-debuginfo-4.5.3-5.4.1 strongswan-libs0-4.5.3-5.4.1 strongswan-libs0-debuginfo-4.5.3-5.4.1 strongswan-mysql-4.5.3-5.4.1 strongswan-mysql-debuginfo-4.5.3-5.4.1 strongswan-nm-4.5.3-5.4.1 strongswan-nm-debuginfo-4.5.3-5.4.1 strongswan-sqlite-4.5.3-5.4.1 strongswan-sqlite-debuginfo-4.5.3-5.4.1 - openSUSE 11.4 (i586 x86_64): strongswan-4.5.0-6.45.1 strongswan-debugsource-4.5.0-6.45.1 strongswan-doc-4.5.0-6.45.1 strongswan-ikev1-4.5.0-6.45.1 strongswan-ikev1-debuginfo-4.5.0-6.45.1 strongswan-ikev2-4.5.0-6.45.1 strongswan-ikev2-debuginfo-4.5.0-6.45.1 strongswan-ipsec-4.5.0-6.45.1 strongswan-ipsec-debuginfo-4.5.0-6.45.1 strongswan-libs0-4.5.0-6.45.1 strongswan-libs0-debuginfo-4.5.0-6.45.1 strongswan-mysql-4.5.0-6.45.1 strongswan-mysql-debuginfo-4.5.0-6.45.1 strongswan-nm-4.5.0-6.45.1 strongswan-nm-debuginfo-4.5.0-6.45.1 strongswan-sqlite-4.5.0-6.45.1 strongswan-sqlite-debuginfo-4.5.0-6.45.1 References: https://www.suse.com/security/cve/CVE-2012-2388.html -- . This critical patch for strongswan mitigates a vulnerability labeled CVE-2012-2388, reinforcing system security.. openSUSE Update,strongswan Security,Linux Patch,Open Source Update,System Integrity. . Severity: Important. LinuxSecurity.com Team
Jun 04, 2012
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!