Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
89
security advisoryFedorabluezFedora 42: libell 2025-35347bf9f0 Security Advisory Updates
bluez 5.80: Fix issue with handling address type for all types of keys. Fix issue with handling maximum number of GATT channels. Fix issue with handling MTU auto-tuning feature. Fix issue with handling AVRCP volume in reconfigured transports.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-35347bf9f0 2025-03-20 00:15:21.054436+00:00 -------------------------------------------------------------------------------- Name : libell Product : Fedora 42 Version : 0.74 Release : 1.fc42 URL : https://01.org/ell Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: bluez 5.80: Fix issue with handling address type for all types of keys. Fix issue with handling maximum number of GATT channels. Fix issue with handling MTU auto-tuning feature. Fix issue with handling AVRCP volume in reconfigured transports. Fix issue with handling VCP volume setting requests. Fix issue with handling VCP connection management. Fix issue with handling MAP qualification. Fix issue with handling PBAP qualification. Fix issue with handling BNEP qualification. Add support for PreferredBearer device property. Add support for SupportedTypes Message Access property. Add support for HFP, A2DP, AVRCP, AVCTP and MAP latest versions. iwd 3.4: Add support for the Test Anything Protocol. libell 0.74: Add support for NIST P-192 curve usage with ECDH. Add support for SHA-224 based checksums and HMACs. libell 0.73: Fix issue with parsing hwdb.bin child structures. libell 0.72: Add support for the Test Anything Protocol. -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 17 2025 Peter Robinson - 0.74-1 - Update to 0.74 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2278949 - CVE-2023-51596 bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278949 [ 2 ] Bug #2278957 - CVE-2023-51594 bluez: OBEX library out-of-bounds read information disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278957 [ 3 ] Bug #2278963 - CVE-2023-51592 bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278963 [ 4 ] Bug #2278966 - CVE-2023-51589 bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278966 [ 5 ] Bug #2278968 - CVE-2023-51580 bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278968 [ 6 ] Bug #2278970 - CVE-2023-44431 bluez: AVRCP stack-based buffer overflow remote code execution vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2278970 [ 7 ] Bug #2344813 - iwd-3.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=2344813 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-35347bf9f0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the FedoraProject GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 20, 2025
•Critical
Fedora
89
security advisoryFedoraauthentication issueFedora 40: FEDORA-2024-0fa283c43a moderate: libell updates and fixes
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-0fa283c43a 2025-01-03 01:36:32.215887+00:00 -------------------------------------------------------------------------------- Name : libell Product : Fedora 40 Version : 0.71 Release : 1.fc40 URL : https://01.org/ell Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available. Add support for HighUtilization/StationCount thresholds. Add support for disabling Multicast RX option. ell 0.71: Fix issue with GCC 15 and -std=c23 build errors. ell 0.70: Add support for helper function for safe memcpy. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 25 2024 Peter Robinson - 0.71-1 - Update to 0.71 * Sun Nov 10 2024 Peter Robinson - 0.70-1 - Update to 0.70 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2294016 - CVE-2023-52424 iwd: 802.11: SSID Confusion attack [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2294016 [ 2 ] Bug #2328735 - libell-0.71 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328735 [ 3 ]Bug #2328777 - iwd-3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328777 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-0fa283c43a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jan 03, 2025
Fedora
89
security advisoryupdateFedoraFedora 41: FEDORA-2024-256818da09 moderate: libell update for iwd
iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-256818da09 2024-12-30 02:11:12.209673+00:00 -------------------------------------------------------------------------------- Name : libell Product : Fedora 41 Version : 0.71 Release : 1.fc41 URL : https://01.org/ell Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix issue with GCC 15 and -std=c23 build errors. Add support for using PMKSA over SAE if available. Add support for HighUtilization/StationCount thresholds. Add support for disabling Multicast RX option. ell 0.71: Fix issue with GCC 15 and -std=c23 build errors. ell 0.70: Add support for helper function for safe memcpy. -------------------------------------------------------------------------------- ChangeLog: * Mon Nov 25 2024 Peter Robinson - 0.71-1 - Update to 0.71 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2294016 - CVE-2023-52424 iwd: 802.11: SSID Confusion attack [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2294016 [ 2 ] Bug #2328735 - libell-0.71 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328735 [ 3 ] Bug #2328777 - iwd-3.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2328777 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-256818da09' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 30, 2024
Fedora
89
security advisoryFedorasystem updateFedora 41: 2024-acb9425c93 moderate: libell and iwd network fixes
libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with pending scan requests after regdom update.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-acb9425c93 2024-09-20 00:15:03.879182 -------------------------------------------------------------------------------- Name : libell Product : Fedora 41 Version : 0.69 Release : 1.fc41 URL : https://01.org/ell Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with pending scan requests after regdom update. Fix issue with handling the rearming of the roaming timeout. Fix issue with survey request and externally triggered scans. Fix issue with RSSI fallback when setting CQM threshold fails. Fix issue with FT-over-Air without offchannel support. Add support for per station Affinities property. bluez 5.78: Fix issue with handling notification of scanned BISes to BASS Fix issue with handling checking BIS caps against peer caps. Fix issue with handling MGMT Set Device Flags overwrites. Fix issue with handling ASE notification order. Fix issue with handling BIG Info report events. Fix issue with handling PACS Server role. Fix issue with registering UHID_START multiple times. Fix issue with pairing method not settingauto-connect. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 9 2024 Peter Robinson - 0.69-1 - Update to 0.69 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2294016 - CVE-2023-52424 iwd: 802.11: SSID Confusion attack [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2294016 [ 2 ] Bug #2307290 - libell-0.68 is available https://bugzilla.redhat.com/show_bug.cgi?id=2307290 [ 3 ] Bug #2310802 - libell-0.69 is available https://bugzilla.redhat.com/show_bug.cgi?id=2310802 [ 4 ] Bug #2310805 - iwd-2.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=2310805 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-acb9425c93' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 20, 2024
•Important
Fedora
89
security advisorycriticalFedoraFedora 40 FEDORA-2024-223428e702 Critical: libell Network Issues
libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with pending scan requests after regdom update.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-223428e702 2024-09-11 01:24:10.952377 -------------------------------------------------------------------------------- Name : libell Product : Fedora 40 Version : 0.69 Release : 1.fc40 URL : https://01.org/ell Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: libell 0.69: Add support for getting remaining microseconds left on a timer. Add support for setting link MTU on a network interface. iwd 2.21: Fix issue with pending scan requests after regdom update. Fix issue with handling the rearming of the roaming timeout. Fix issue with survey request and externally triggered scans. Fix issue with RSSI fallback when setting CQM threshold fails. Fix issue with FT-over-Air without offchannel support. Add support for per station Affinities property. bluez 5.78: Fix issue with handling notification of scanned BISes to BASS Fix issue with handling checking BIS caps against peer caps. Fix issue with handling MGMT Set Device Flags overwrites. Fix issue with handling ASE notification order. Fix issue with handling BIG Info report events. Fix issue with handling PACS Server role. Fix issue with registering UHID_START multiple times. Fix issue with pairing method not settingauto-connect. -------------------------------------------------------------------------------- ChangeLog: * Mon Sep 9 2024 Peter Robinson - 0.69-1 - Update to 0.69 * Thu Aug 29 2024 Peter Robinson - 0.68-1 - Update to 0.68 * Thu Jul 18 2024 Fedora Release Engineering - 0.67-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2294016 - CVE-2023-52424 iwd: 802.11: SSID Confusion attack [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2294016 [ 2 ] Bug #2307290 - libell-0.68 is available https://bugzilla.redhat.com/show_bug.cgi?id=2307290 [ 3 ] Bug #2310802 - libell-0.69 is available https://bugzilla.redhat.com/show_bug.cgi?id=2310802 [ 4 ] Bug #2310805 - iwd-2.21 is available https://bugzilla.redhat.com/show_bug.cgi?id=2310805 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-223428e702' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 11, 2024
•Critical
Fedora
89
security advisoryFedoraauthorization bypassUbuntu 24.04: 2024-a1b2c3d4e5 Moderate: openvpn Security Flaw
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63:. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-58c59bfa4c 2024-03-23 00:20:56.396900 -------------------------------------------------------------------------------- Name : libell Product : Fedora 40 Version : 0.63 Release : 1.fc40 URL : Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63: Fix issue with handling ending boundary of the PEM. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 28 2024 Peter Robinson - 0.63-1 - Update to 0.63 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2263042 - libell-0.63 is available https://bugzilla.redhat.com/show_bug.cgi?id=2263042 [ 2 ] Bug #2263573 - iwd-2.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=2263573 [ 3 ] Bug #2264597 - TRIAGE CVE-2023-52161 iwd: potential authorization bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2264597 -------------------------------------------------------------------------------- This update can be installed with the "dnf"update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-58c59bfa4c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 23, 2024
Fedora
89
security advisorymoderateFedoraFedora 40: FEDORA-2024-58c59bfa4c Moderate: iwd 2.15 Connection Issues
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63:. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-58c59bfa4c 2024-03-23 00:20:56.396900 -------------------------------------------------------------------------------- Name : iwd Product : Fedora 40 Version : 2.15 Release : 1.fc40 URL : https://archive.kernel.org/oldwiki/iwd.wiki.kernel.org/ Summary : Wireless daemon for Linux Description : The daemon and utilities for controlling and configuring the Wi-Fi network hardware. -------------------------------------------------------------------------------- Update Information: iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63: Fix issue with handling ending boundary of the PEM. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 28 2024 Peter Robinson - 2.15-1 - Update to 2.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2263042 - libell-0.63 is available https://bugzilla.redhat.com/show_bug.cgi?id=2263042 [ 2 ] Bug #2263573 - iwd-2.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=2263573 [ 3 ] Bug #2264597 - TRIAGE CVE-2023-52161 iwd: potential authorization bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2264597 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-58c59bfa4c' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 23, 2024
Fedora
89
security advisorycriticalFedoraFedora 38: FEDORA-2024-38faa9a2a8 Critical: libell Auth Bypass
iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63:. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-38faa9a2a8 2024-03-08 01:53:53.708420 -------------------------------------------------------------------------------- Name : libell Product : Fedora 38 Version : 0.63 Release : 1.fc38 URL : Summary : Embedded Linux library Description : The Embedded Linux* Library (ELL) provides core, low-level functionality for system daemons. It typically has no dependencies other than the Linux kernel, C standard library, and libdl (for dynamic linking). While ELL is designed to be efficient and compact enough for use on embedded Linux platforms, it is not limited to resource-constrained systems. -------------------------------------------------------------------------------- Update Information: iwd 2.15: Fix issue with notice events for connection timeouts. Fix issue with reason code and deauthenticate event. Fix issue with handling basename() functionality. libell 0.63: Fix issue with handling ending boundary of the PEM. -------------------------------------------------------------------------------- ChangeLog: * Wed Feb 28 2024 Peter Robinson - 0.63-1 - Update to 0.63 * Sat Feb 10 2024 Peter Robinson - 0.62-1 - Update to 0.62 * Thu Jan 25 2024 Fedora Release Engineering - 0.61-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 0.61-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 8 2024 Davide Caratti - 0.61-2 - Change specfile to use SPDX identifier -------------------------------------------------------------------------------- References: [ 1 ] Bug #2264597 - TRIAGE CVE-2023-52161 iwd: potential authorization bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2264597 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-38faa9a2a8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 08, 2024
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!