Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
172
security advisoryubuntunetwork threatUbuntu 22.04 LTS USN-6988-2 critical: twisted network access
Twisted could allow unintended access to information over the network.. ========================================================================== Ubuntu Security Notice USN-6988-2 November 26, 2024 twisted vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Twisted could allow unintended access to information over the network. Software Description: - twisted: Event-based framework for internet applications Details: USN-6988-1 fixed CVE-2024-41671 in Twisted. The USN incorrectly stated that previous releases were unaffected. This update provides the equivalent fix for Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Ben Kallus discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker could possibly use this issue to delay and manipulate responses. This issue only affected Ubuntu 24.04 LTS. (CVE-2024-41671) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS python3-twisted 22.1.0-2ubuntu2.6 Ubuntu 20.04 LTS python3-twisted 18.9.0-11ubuntu0.20.04.5 Ubuntu 18.04 LTS python-twisted 17.9.0-2ubuntu0.3+esm2 Available with Ubuntu Pro python3-twisted 17.9.0-2ubuntu0.3+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6988-2 https://ubuntu.com/security/notices/USN-6988-1 CVE-2024-41671 PackageInformation: https://launchpad.net/ubuntu/+source/twisted/22.1.0-2ubuntu2.6 https://launchpad.net/ubuntu/+source/twisted/18.9.0-11ubuntu0.20.04.5 . Utilizing Twisted in Ubuntu carries a potential danger of inadvertent data exposure across the network. Security patching recommended.. twisted, Ubuntu, information access, security advisory. . LinuxSecurity.com Team
Nov 26, 2024
Ubuntu
197
security advisorybuffer overflowcriticalDebian 10: DLA-3655-1 Critical: lwip Buffer Overflow Threat
A buffer overflow vulnerability has been found in lwip, a small independent implementation of the TCP/IPv4/IPv6 protocol suite, which allows an attacker to access information via a crafted ICMPv6 package. This vulnerability has been assigned CVE-2020-22283. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3655-1
Nov 18, 2023
Debian LTS
172
security advisoryeximubuntuUbuntu 20.04 LTS: USN-4366-1 Critical Exim Authentication Bypass
Exim could be made to access sensitive information or bypass authentication if it received a specially crafted input.. =========================================================================Ubuntu Security Notice USN-4366-1 May 19, 2020 exim4 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 19.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 ESM Summary: Exim could be made to access sensitive information or bypass authentication if it received a specially crafted input. Software Description: - exim4: Exim is a mail transport agent Details: It was discovered that Exim incorrectly handled certain inputs. An remote attacker could possibly use this issue to access sensitive information or authentication bypass. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: exim4-base 4.93-13ubuntu1.1 exim4-daemon-heavy 4.93-13ubuntu1.1 exim4-daemon-light 4.93-13ubuntu1.1 Ubuntu 19.10: exim4-base 4.92.1-1ubuntu3.1 exim4-daemon-heavy 4.92.1-1ubuntu3.1 exim4-daemon-light 4.92.1-1ubuntu3.1 Ubuntu 18.04 LTS: exim4-base 4.90.1-1ubuntu1.5 exim4-daemon-heavy 4.90.1-1ubuntu1.5 exim4-daemon-light 4.90.1-1ubuntu1.5 Ubuntu 16.04 LTS: exim4-base 4.86.2-2ubuntu2.6 exim4-daemon-heavy 4.86.2-2ubuntu2.6 exim4-daemon-light 4.86.2-2ubuntu2.6 Ubuntu 14.04 ESM: exim4-base 4.82-3ubuntu2.4+esm2 exim4-daemon-heavy 4.82-3ubuntu2.4+esm2 exim4-daemon-light 4.82-3ubuntu2.4+esm2 In general, a standard system update will make all the necessary changes. References: CVE-2020-12783 Package Information: https://launchpad.net/ubuntu/+source/exim4/4.93-13ubuntu1.1 https://launchpad.net/ubuntu/+source/exim4/4.92.1-1ubuntu3.1 https://launchpad.net/ubuntu/+source/exim4/4.90.1-1ubuntu1.5 https://launchpad.net/ubuntu/+source/exim4/4.86.2-2ubuntu2.6 . Urgent notice regarding exim security flaw in Ubuntu that impacts several versions, allowing possible bypass of authentication measures.. exim security advisory, Ubuntu exim issue, authentication bypass fix, sensitive information access. . LinuxSecurity.com Team
May 19, 2020
Ubuntu
172
security advisorysoftware updateUbuntuUbuntu 19.04: USN-4125-1 Critical: Memcached Exposes Data
Memcached could be made to expose sensitive information if it received a specially crafted UNIX socket.. =========================================================================Ubuntu Security Notice USN-4125-1 September 09, 2019 memcached vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Memcached could be made to expose sensitive information if it received a specially crafted UNIX socket. Software Description: - memcached: high-performance memory object caching system Details: It was discovered that Memcached incorrectly handled certain UNIX sockets. An attacker could possibly use this issue to access sensitive information. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: memcached 1.5.10-0ubuntu1.19.04.2 Ubuntu 18.04 LTS: memcached 1.5.6-0ubuntu1.2 Ubuntu 16.04 LTS: memcached 1.4.25-2ubuntu1.5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4125-1 CVE-2019-15026 Package Information: https://launchpad.net/ubuntu/+source/memcached/1.5.10-0ubuntu1.19.04.2 https://launchpad.net/ubuntu/+source/memcached/1.5.6-0ubuntu1.2 https://launchpad.net/ubuntu/+source/memcached/1.4.25-2ubuntu1.5 . Ubuntu Security Notice USN-4126-1 tackles vulnerabilities in OpenSSH that could lead to unauthorized access.. Memcached Vulnerability, Ubuntu Security Notice, Unix Socket Exploit. . LinuxSecurity.com Team
Sep 09, 2019
Ubuntu
203
security advisoryDenial of Serviceinformation accessMageia 6: MGASA-2019-0240 Critical: sqlite3 Input Issues and DoS
Updated sqlite3 packages fix security vulnerabilities: It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information (CVE-2019-8457). . MGASA-2019-0240 - Updated sqlite3 packages fix security vulnerabilities Publication date: 06 Sep 2019 URL: https://advisories.mageia.org/MGASA-2019-0240.html Type: security Affected Mageia releases: 6 CVE: CVE-2019-8457, CVE-2019-9936, CVE-2019-9937 Updated sqlite3 packages fix security vulnerabilities: It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information (CVE-2019-8457). It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to access sensitive information (CVE-2019-9936). It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code (CVE-2019-9937). References: - https://bugs.mageia.org/show_bug.cgi?id=24750 - https://ubuntu.com/security/notices/USN-4019-1 - https://www.cve.org/CVERecord?id=CVE-2019-8457 - https://www.cve.org/CVERecord?id=CVE-2019-9936 - https://www.cve.org/CVERecord?id=CVE-2019-9937 SRPMS: - 6/core/sqlite3-3.28.0-1.mga6 . New sqlite3 updates released on Sep 06, 2019, target significant security vulnerabilities, resolving various essential weaknesses.. Mageia sqlite3 update, security patch, information access fix, Denial of Service. . LinuxSecurity.com Team
Sep 06, 2019
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is application sandboxing truly safe?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!