Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
89
security advisoryFedoracritical threatFedora 31 Mbedtls Update FEDORA-2020-42564738a1 Critical Info Disclosure
- Update to 2.16.6 Release notes: https://www.trustedfirmware.org/projects/mbed-tls/ Security Advisory: . --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-42564738a1 2020-06-05 02:39:48.632782 --------------------------------------------------------------------------------Name : mbedtls Product : Fedora 31 Version : 2.16.6 Release : 1.fc31 URL : https://www.trustedfirmware.org/projects/mbed-tls/ Summary : Light-weight cryptographic and SSL/TLS library Description : Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their (embedded) applications with as little hassle as possible. FOSS License Exception: https://www.trustedfirmware.org/projects/mbed-tls/ --------------------------------------------------------------------------------Update Information: - Update to 2.16.6 Release notes: https://www.trustedfirmware.org/projects/mbed-tls/ Security Advisory: --------------------------------------------------------------------------------ChangeLog: * Wed May 27 2020 Morten Stevens - 2.16.6-1 - Update to 2.16.6 - Security Advisory 2020-04 (CVE-2020-10932) --------------------------------------------------------------------------------References: [ 1 ] Bug #1838551 - CVE-2020-10932 mbedtls: side channel attack possibly leading to information disclosure [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1838551 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-42564738a1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used bythe Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jun 04, 2020
•Critical
Fedora
198
security advisorycriticalremote code executionArch Linux: ASA-202310-5 Critical: OpenSSL Buffer Overflow Vulnerability
The package mbedtls before version 2.1.2-1 is vulnerable to remote code execution. . Arch Linux Security Advisory ASA-201510-9 ======================================== Severity: Critical Date : 2015-10-15 CVE-ID : CVE-2015-5291 Package : mbedtls Type : arbitrary code execution Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package mbedtls before version 2.1.2-1 is vulnerable to remote code execution. Resolution ========= Upgrade to 2.1.2-1. # pacman -Syu "mbedtls> =2.1.2-1" The problem has been fixed upstream in versions 2.1.2, 1.3.14 and 1.2.17. Workaround ========= To be protected against this vulnerability, you need to apply both of the following work-arounds: - Do not use ticket-based session resumption. This can be achieved in two ways: (1) do not attempt to resume a saved session (do not use mbedtls_get_session() / mbedtls_set_session()), or (2) if you want to resume sessions, make sure you're not using tickets by calling ssl_set_session_tickets( SSL_SESSION_TICKETS_DISABLED ) in 1.3.x or mbedtls_ssl_conf_session_tickets( MBEDTLS_SSL_SESSION_TICKETS_DISABLED ) in 2.x. - If you accept hostnames from untrusted parties, validate that they are at most 255 bytes long (limit defined by RFC 1305) before passing them to ssl_set_hostname(). Description ========== When the client creates its ClientHello message, due to insufficient bounds checking it can overflow the heap-based buffer containing the message while writing some extensions. Two extensions in particular could be used by a remote attacker to trigger the overflow: the session ticket extension and the server name indication (SNI) extension. Starting with PolarSSL 1.3.0 which added support for session tickets, any server the client connects to can send an overlong session ticket which will cause a buffer overflow if and when the client attempts to resume the connection with the server. Clients that disabled session tickets or never attempt to reconnect toa server using a saved session are not vulnerable to this attack vector. Starting with PolarSSL 1.0.0, this overflow could also be triggered by an attacker convincing a client to use an overlong hostname for the SNI extension. The hostname needs to be almost as long at SSL_MAX_CONTENT_LEN, which as 16KB by default, but could be smaller if a custom configuration is used. Clients that do not accept hostnames from untrusted parties are not vulnerable to this attack vector. Impact ===== A malicious server could cause a denial of service or execute arbitrary code on a vulnerable client by sending an overlong session ticket. An attacker could cause a denial of service or execute arbitrary code on a vulnerable client by convincing it to connect to an overlong hostname. References ========= https://access.redhat.com/security/cve/CVE-2015-5291 . The latest Arch Linux advisory ASA-202310-9 highlights a severe vulnerability in mbedtls that could lead to remote code execution. It is highly advisable to perform updates promptly.. mbedtls update, Arch Linux advisory, security flaws. . Severity: Critical. LinuxSecurity.com Team
Oct 15, 2015
•Critical
ArchLinux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!