Alerts This Week
Warning Icon 1 562
Alerts This Week
Warning Icon 1 562

Stay Secure with the Latest Linux Advisories

Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 LTS python-pip Moderate DoS Regression Fix USN-8344-3

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS GStreamer Base Significant DoS Attack Vulnerability Alert

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS MySQL Important Security Issues USN-8363-2

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 LTS nginx Security Advisory for Critical DoS Vulnerabilities

Calendar White Jun 03, 2026
Critical
Oracle Large Esm H900
Oracle

Oracle Linux 8 gnutls Important Buffer Overflow Auth Bypass ELSA-2026-20611

Calendar White Jun 03, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 ELSA-2026-22315 compat-openssl10 Moderate DoS Fix

Calendar White Jun 02, 2026
moderate
Oracle Large Esm H800
Oracle

Oracle Linux 8 httpd Important Denial of Service Vuln ELSA-2026-22140

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 Important Kernel Security Advisory ELSA-2026-21706

Calendar White Jun 02, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

Calendar White Jun 02, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorymoderateFedora

Fedora 22: FEDORA-2016-52b294538d Moderate: python-pymongo DoS

Security fix for CVE-2013-2099, CVE-2013-7440. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-52b294538d 2016-02-12 07:46:41.764379 -------------------------------------------------------------------------------- Name : python-pymongo Product : Fedora 22 Version : 2.5.2 Release : 8.fc22 URL : https://www.mongodb.com/docs/languages/python/ Summary : Python driver for MongoDB Description : The Python driver for MongoDB. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2013-2099, CVE-2013-7440 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1224999 - CVE-2013-7440 python: wildcard matching rules do not follow RFC 6125 https://bugzilla.redhat.com/show_bug.cgi?id=1224999 [ 2 ] Bug #963260 - CVE-2013-2099 python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns https://bugzilla.redhat.com/show_bug.cgi?id=963260 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update python-pymongo' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . An update for Fedora 22 addresses vulnerabilities in python-pymongo that relate to denial-of-service (DoS) attacks and incorrect hostname verification protocols.. Fedora Security Update, PythonDriver Security, MongoDB Issues. . LinuxSecurity.com Team

Calendar 2 Feb 12, 2016 Fedora
87
Ls Advisories Debian Esm H240
Price Tag 1security advisorycriticaldebian

Debian: DSA-3246-1 Critical: Ruby OpenSSL Hostname Match Flaw

It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a man-in-the-middle attack via crafted SSL certificates. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3246-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Alessandro Ghedini May 02, 2015 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : ruby1.9.1 CVE ID : CVE-2015-1855 It was discovered that the Ruby OpenSSL extension, part of the interpreter for the Ruby language, did not properly implement hostname matching, in violation of RFC 6125. This could allow remote attackers to perform a man-in-the-middle attack via crafted SSL certificates. For the oldstable distribution (wheezy), this problem has been fixed in version 1.9.3.194-8.1+deb7u5. We recommend that you upgrade your ruby1.9.1 packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Cyber criminals could take advantage of the Ruby OpenSSL vulnerability to carry out man-in-the-middle strategies employing SSL certificates. . Ruby Security Update, Debian Advisory, OpenSSL Hostname Matching. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 02, 2015 •Critical Debian
Banner 3 1028x280 1708121785 1771599793
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisorysecurity fixlow severity

Red Hat Enterprise Linux 7: RHSA-2014:1073-01 Low Severity NSS Update

Updated nss, nss-util, and nss-softokn packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Low: nss, nss-util, nss-softokn security, bug fix, and enhancement update Advisory ID: RHSA-2014:1073-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2014:1073.html Issue date: 2014-08-18 CVE Names: CVE-2014-1492 ==================================================================== 1. Summary: Updated nss, nss-util, and nss-softokn packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: Network Security Services (NSS) is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSLv3, TLS, and other security standards. It was found that the implementation of Internationalizing Domain Namesin Applications (IDNA) hostname matching in NSS did not follow the RFC 6125 recommendations. This could lead to certain invalid certificates with international characters to be accepted as valid. (CVE-2014-1492) In addition, the nss, nss-util, and nss-softokn packages have been upgraded to upstream version 3.16.2, which provides a number of bug fixes and enhancements over the previous versions. (BZ#1124659) Users of NSS are advised to upgrade to these updated packages, which correct these issues and add these enhancements. After installing this update, applications using NSS must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1079851 - CVE-2014-1492 nss: IDNA hostname matching code does not follow RFC 6125 recommendation (MFSA 2014-45) 1124659 - Rebase RHEL 7.0.Z to at least NSS 3.16.1 (FF 31) 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: nss-3.16.2-2.el7_0.src.rpm nss-softokn-3.16.2-1.el7_0.src.rpm nss-util-3.16.2-1.el7_0.src.rpm x86_64: nss-3.16.2-2.el7_0.i686.rpm nss-3.16.2-2.el7_0.x86_64.rpm nss-debuginfo-3.16.2-2.el7_0.i686.rpm nss-debuginfo-3.16.2-2.el7_0.x86_64.rpm nss-softokn-3.16.2-1.el7_0.i686.rpm nss-softokn-3.16.2-1.el7_0.x86_64.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.i686.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-softokn-freebl-3.16.2-1.el7_0.i686.rpm nss-softokn-freebl-3.16.2-1.el7_0.x86_64.rpm nss-sysinit-3.16.2-2.el7_0.x86_64.rpm nss-tools-3.16.2-2.el7_0.x86_64.rpm nss-util-3.16.2-1.el7_0.i686.rpm nss-util-3.16.2-1.el7_0.x86_64.rpm nss-util-debuginfo-3.16.2-1.el7_0.i686.rpm nss-util-debuginfo-3.16.2-1.el7_0.x86_64.rpm Red Hat Enterprise Linux Client Optional (v.7): x86_64: nss-debuginfo-3.16.2-2.el7_0.i686.rpm nss-debuginfo-3.16.2-2.el7_0.x86_64.rpm nss-devel-3.16.2-2.el7_0.i686.rpm nss-devel-3.16.2-2.el7_0.x86_64.rpm nss-pkcs11-devel-3.16.2-2.el7_0.i686.rpm nss-pkcs11-devel-3.16.2-2.el7_0.x86_64.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.i686.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-softokn-devel-3.16.2-1.el7_0.i686.rpm nss-softokn-devel-3.16.2-1.el7_0.x86_64.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.i686.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.x86_64.rpm nss-util-debuginfo-3.16.2-1.el7_0.i686.rpm nss-util-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-util-devel-3.16.2-1.el7_0.i686.rpm nss-util-devel-3.16.2-1.el7_0.x86_64.rpm Red Hat Enterprise Linux ComputeNode (v. 7): Source: nss-3.16.2-2.el7_0.src.rpm nss-softokn-3.16.2-1.el7_0.src.rpm nss-util-3.16.2-1.el7_0.src.rpm x86_64: nss-3.16.2-2.el7_0.i686.rpm nss-3.16.2-2.el7_0.x86_64.rpm nss-debuginfo-3.16.2-2.el7_0.i686.rpm nss-debuginfo-3.16.2-2.el7_0.x86_64.rpm nss-softokn-3.16.2-1.el7_0.i686.rpm nss-softokn-3.16.2-1.el7_0.x86_64.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.i686.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-softokn-freebl-3.16.2-1.el7_0.i686.rpm nss-softokn-freebl-3.16.2-1.el7_0.x86_64.rpm nss-sysinit-3.16.2-2.el7_0.x86_64.rpm nss-tools-3.16.2-2.el7_0.x86_64.rpm nss-util-3.16.2-1.el7_0.i686.rpm nss-util-3.16.2-1.el7_0.x86_64.rpm nss-util-debuginfo-3.16.2-1.el7_0.i686.rpm nss-util-debuginfo-3.16.2-1.el7_0.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v.7): x86_64: nss-debuginfo-3.16.2-2.el7_0.i686.rpm nss-debuginfo-3.16.2-2.el7_0.x86_64.rpm nss-devel-3.16.2-2.el7_0.i686.rpm nss-devel-3.16.2-2.el7_0.x86_64.rpm nss-pkcs11-devel-3.16.2-2.el7_0.i686.rpm nss-pkcs11-devel-3.16.2-2.el7_0.x86_64.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.i686.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-softokn-devel-3.16.2-1.el7_0.i686.rpm nss-softokn-devel-3.16.2-1.el7_0.x86_64.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.i686.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.x86_64.rpm nss-util-debuginfo-3.16.2-1.el7_0.i686.rpm nss-util-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-util-devel-3.16.2-1.el7_0.i686.rpm nss-util-devel-3.16.2-1.el7_0.x86_64.rpm Red Hat Enterprise Linux Server (v.7): Source: nss-3.16.2-2.el7_0.src.rpm nss-softokn-3.16.2-1.el7_0.src.rpm nss-util-3.16.2-1.el7_0.src.rpm ppc64: nss-3.16.2-2.el7_0.ppc.rpm nss-3.16.2-2.el7_0.ppc64.rpm nss-debuginfo-3.16.2-2.el7_0.ppc.rpm nss-debuginfo-3.16.2-2.el7_0.ppc64.rpm nss-devel-3.16.2-2.el7_0.ppc.rpm nss-devel-3.16.2-2.el7_0.ppc64.rpm nss-softokn-3.16.2-1.el7_0.ppc.rpm nss-softokn-3.16.2-1.el7_0.ppc64.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.ppc.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.ppc64.rpm nss-softokn-devel-3.16.2-1.el7_0.ppc.rpm nss-softokn-devel-3.16.2-1.el7_0.ppc64.rpm nss-softokn-freebl-3.16.2-1.el7_0.ppc.rpm nss-softokn-freebl-3.16.2-1.el7_0.ppc64.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.ppc.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.ppc64.rpm nss-sysinit-3.16.2-2.el7_0.ppc64.rpm nss-tools-3.16.2-2.el7_0.ppc64.rpm nss-util-3.16.2-1.el7_0.ppc.rpm nss-util-3.16.2-1.el7_0.ppc64.rpm nss-util-debuginfo-3.16.2-1.el7_0.ppc.rpm nss-util-debuginfo-3.16.2-1.el7_0.ppc64.rpm nss-util-devel-3.16.2-1.el7_0.ppc.rpm nss-util-devel-3.16.2-1.el7_0.ppc64.rpm s390x: nss-3.16.2-2.el7_0.s390.rpm nss-3.16.2-2.el7_0.s390x.rpm nss-debuginfo-3.16.2-2.el7_0.s390.rpm nss-debuginfo-3.16.2-2.el7_0.s390x.rpm nss-devel-3.16.2-2.el7_0.s390.rpm nss-devel-3.16.2-2.el7_0.s390x.rpm nss-softokn-3.16.2-1.el7_0.s390.rpm nss-softokn-3.16.2-1.el7_0.s390x.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.s390.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.s390x.rpm nss-softokn-devel-3.16.2-1.el7_0.s390.rpm nss-softokn-devel-3.16.2-1.el7_0.s390x.rpm nss-softokn-freebl-3.16.2-1.el7_0.s390.rpm nss-softokn-freebl-3.16.2-1.el7_0.s390x.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.s390.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.s390x.rpm nss-sysinit-3.16.2-2.el7_0.s390x.rpm nss-tools-3.16.2-2.el7_0.s390x.rpm nss-util-3.16.2-1.el7_0.s390.rpm nss-util-3.16.2-1.el7_0.s390x.rpm nss-util-debuginfo-3.16.2-1.el7_0.s390.rpm nss-util-debuginfo-3.16.2-1.el7_0.s390x.rpm nss-util-devel-3.16.2-1.el7_0.s390.rpm nss-util-devel-3.16.2-1.el7_0.s390x.rpm x86_64: nss-3.16.2-2.el7_0.i686.rpm nss-3.16.2-2.el7_0.x86_64.rpm nss-debuginfo-3.16.2-2.el7_0.i686.rpm nss-debuginfo-3.16.2-2.el7_0.x86_64.rpm nss-devel-3.16.2-2.el7_0.i686.rpm nss-devel-3.16.2-2.el7_0.x86_64.rpm nss-softokn-3.16.2-1.el7_0.i686.rpm nss-softokn-3.16.2-1.el7_0.x86_64.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.i686.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-softokn-devel-3.16.2-1.el7_0.i686.rpm nss-softokn-devel-3.16.2-1.el7_0.x86_64.rpm nss-softokn-freebl-3.16.2-1.el7_0.i686.rpm nss-softokn-freebl-3.16.2-1.el7_0.x86_64.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.i686.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.x86_64.rpm nss-sysinit-3.16.2-2.el7_0.x86_64.rpm nss-tools-3.16.2-2.el7_0.x86_64.rpm nss-util-3.16.2-1.el7_0.i686.rpm nss-util-3.16.2-1.el7_0.x86_64.rpm nss-util-debuginfo-3.16.2-1.el7_0.i686.rpm nss-util-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-util-devel-3.16.2-1.el7_0.i686.rpm nss-util-devel-3.16.2-1.el7_0.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): ppc64: nss-debuginfo-3.16.2-2.el7_0.ppc.rpm nss-debuginfo-3.16.2-2.el7_0.ppc64.rpm nss-pkcs11-devel-3.16.2-2.el7_0.ppc.rpm nss-pkcs11-devel-3.16.2-2.el7_0.ppc64.rpm s390x: nss-debuginfo-3.16.2-2.el7_0.s390.rpm nss-debuginfo-3.16.2-2.el7_0.s390x.rpm nss-pkcs11-devel-3.16.2-2.el7_0.s390.rpm nss-pkcs11-devel-3.16.2-2.el7_0.s390x.rpm x86_64: nss-debuginfo-3.16.2-2.el7_0.i686.rpm nss-debuginfo-3.16.2-2.el7_0.x86_64.rpm nss-pkcs11-devel-3.16.2-2.el7_0.i686.rpm nss-pkcs11-devel-3.16.2-2.el7_0.x86_64.rpm Red Hat Enterprise Linux Workstation (v.7): Source: nss-3.16.2-2.el7_0.src.rpm nss-softokn-3.16.2-1.el7_0.src.rpm nss-util-3.16.2-1.el7_0.src.rpm x86_64: nss-3.16.2-2.el7_0.i686.rpm nss-3.16.2-2.el7_0.x86_64.rpm nss-debuginfo-3.16.2-2.el7_0.i686.rpm nss-debuginfo-3.16.2-2.el7_0.x86_64.rpm nss-devel-3.16.2-2.el7_0.i686.rpm nss-devel-3.16.2-2.el7_0.x86_64.rpm nss-softokn-3.16.2-1.el7_0.i686.rpm nss-softokn-3.16.2-1.el7_0.x86_64.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.i686.rpm nss-softokn-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-softokn-devel-3.16.2-1.el7_0.i686.rpm nss-softokn-devel-3.16.2-1.el7_0.x86_64.rpm nss-softokn-freebl-3.16.2-1.el7_0.i686.rpm nss-softokn-freebl-3.16.2-1.el7_0.x86_64.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.i686.rpm nss-softokn-freebl-devel-3.16.2-1.el7_0.x86_64.rpm nss-sysinit-3.16.2-2.el7_0.x86_64.rpm nss-tools-3.16.2-2.el7_0.x86_64.rpm nss-util-3.16.2-1.el7_0.i686.rpm nss-util-3.16.2-1.el7_0.x86_64.rpm nss-util-debuginfo-3.16.2-1.el7_0.i686.rpm nss-util-debuginfo-3.16.2-1.el7_0.x86_64.rpm nss-util-devel-3.16.2-1.el7_0.i686.rpm nss-util-devel-3.16.2-1.el7_0.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): x86_64: nss-debuginfo-3.16.2-2.el7_0.i686.rpm nss-debuginfo-3.16.2-2.el7_0.x86_64.rpm nss-pkcs11-devel-3.16.2-2.el7_0.i686.rpm nss-pkcs11-devel-3.16.2-2.el7_0.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2014-1492 https://access.redhat.com/security/updates/classification/#low 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2014 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFT8gSmXlSAg2UNWIIRAjyHAKCteaMEgwe2oxwff2F7Z5sco7r/0ACgkT4V ZTAaYXaeMVYgbvwYwAFL1a0=B/Ml -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest nss and relatedsoftware have been released for Red Hat Enterprise Linux 7, resolving a security vulnerability along with various other bugs.. NSS Update, Red Hat Security, Security Fix, Low Severity Update, Software Enhancement. . Severity: Low. LinuxSecurity.com Team

Calendar 2 Aug 18, 2014 •Low Red Hat
91
Ls Advisories Gentoo Esm H240
Price Tag 1security advisoryGentooman-in-the-middle

Gentoo: 201206-34 Normal: Msmtp Null Spoofing Vulnerability Report

An error in the hostname matching in msmtp might enable remote attackers to conduct man-in-the-middle attacks.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201206-34 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: msmtp: X.509 NULL spoofing vulnerability Date: June 25, 2012 Bugs: #293647 ID: 201206-34 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= An error in the hostname matching in msmtp might enable remote attackers to conduct man-in-the-middle attacks. Background ========= msmtp is an SMTP client and SMTP plugin for mail user agents such as Mutt. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 mail-mta/msmtp < 1.4.19 > = 1.4.19 Description ========== A vulnerability have been discovered in msmtp. Please review the CVE identifier referenced below for details. Impact ===== A remote attacker might employ a specially crafted certificate to conduct man-in-the-middle attacks on SSL connections made using msmtp. Workaround ========= There is no known workaround at this time. Resolution ========= All msmtp users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =mail-mta/msmtp-1.4.19" References ========= [ 1 ] CVE-2009-3942 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-3942 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201206-34 Concerns? ======== Security is a primary focusof Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2012 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . Critical X.509 NULL impersonation flaw found in msmtp exposes Gentoo Linux systems to potential man-in-the-middle risks. Update immediately!. msmtp security,Gentoo advisory,NULL spoofing,man-in-the-middle,hostname matching. . LinuxSecurity.com Team

Calendar 2 Jun 25, 2012 Gentoo
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here