Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
89
security advisoryintrusion detectionFedoraFedora: 2024:4aef1d6ece Critical and Moderate: Suricata Security Fixes
These are bug fix and security releases including MODERATE, HIGH, and CRITICAL issues.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-4aef1d6ece 2024-03-31 00:17:00.326893 -------------------------------------------------------------------------------- Name : suricata Product : Fedora 40 Version : 7.0.4 Release : 1.fc40 URL : Summary : Intrusion Detection System Description : The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic Protocol Detection (IP, TCP, UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP Matching, and GeoIP identification. -------------------------------------------------------------------------------- Update Information: These are bug fix and security releases including MODERATE, HIGH, and CRITICAL issues. -------------------------------------------------------------------------------- ChangeLog: * Wed Mar 20 2024 Steve Grubb 7.0.4-1 - New security and bugfix release -------------------------------------------------------------------------------- References: [ 1 ] Bug #2128376 - Please port your pcre dependency to pcre2. Pcre has been deprecated https://bugzilla.redhat.com/show_bug.cgi?id=2128376 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4aef1d6ece' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 31, 2024
•Critical
Fedora
100
security advisorydenial of serviceinformation leakSUSE: 2008:023 Moderate: Multiple Package Vulnerabilities Resolved
To avoid flooding mailing lists with SUSE Security Announcements for minor To avoid flooding mailing lists with SUSE Security Announcements for minor issues, SUSE Security releases weekly summary reports for the low profile issues, SUSE Security releases weekly summary reports for the low profile vulnerability fixes. The SUSE Security Summary Reports do not list or download URLs like the SUSE Secu [More...]. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ______________________________________________________________________________ SUSE Security Summary Report Announcement ID: SUSE-SR:2008:023 Date: Fri, 31 Oct 2008 14:00:00 +0000 Cross-References: CVE-2008-2696, CVE-2008-3271 CVE-2008-4555, CVE-2008-4776 Content of this advisory: 1) Solved Security Vulnerabilities: - graphviz - libexiv2, exiv2 - tomcat5, apache-jakarta-tomcat-connectors - libgadu - opera 2) Pending Vulnerabilities, Solutions, and Work-Arounds: none 3) Authenticity Verification and Additional Information ______________________________________________________________________________ 1) Solved Security Vulnerabilities To avoid flooding mailing lists with SUSE Security Announcements for minor issues, SUSE Security releases weekly summary reports for the low profile vulnerability fixes. The SUSE Security Summary Reports do not list or download URLs like the SUSE Security Announcements that are released for more severe vulnerabilities. Fixed packages for the following incidents are already available on our FTP server and via the YaST Online Update. - graphviz An update of graphviz was released to fix a buffer overflow that occurs while parsing a DOT file. (CVE-2008-4555) Affected products: openSUSE 10.2-11.0, SLE SDK 10 SP1, SLE SDK 10 SP2, SLED 10 SP1, SLED 10 SP2 - libexiv2, exiv2 A bug in libexiv2/exiv2 could lead to a crash while parsing metadata. (CVE-2008-2696) Affected products: openSUSE 10.2-11.0 - tomcat5, apache-jakarta-tomcat-connectors This update of tomcat fixes an information leak due to incorrect IP address filtering. (CVE-2008-3271) Affected products: openSUSE 10.2, NLD 9 SDK, Novell Linux POS 9, Open Enterprise Server, SLES 9, SLE SDK 10 SP1, SLE SDK 10 SP2, SLES 10 SP1, SLES 10 SP2 - libgadu The library libgadu was vulnerable to a denial of service bug. (CVE-2008-4776) Affected products: openSUSE 10.3-11.0 - opera Opera was upgraded to version 9.62 fix multiple vulnerabilities For details have a look at: https://help.opera.com/en/latest/ Affected products: 10.2-11.0 ______________________________________________________________________________ 2) Pending Vulnerabilities, Solutions, and Work-Arounds none ______________________________________________________________________________ 3) Authenticity Verification and Additional Information - Announcement authenticity verification: SUSE security announcements are published via mailing lists and on Web sites. The authenticity and integrity of a SUSE security announcement is guaranteed by a cryptographic signature in each announcement. All SUSE security announcements are published with a valid signature. To verify the signature of the announcement, save it as text into a file and run the command gpg --verify replacing with the name of the file containing the announcement. The output for a valid signature looks like: gpg: Signature made using RSA key ID 3D25D3D9 gpg: Good signature from "SuSE Security Team " where is replaced by the date the document was signed. If the security team's key is not contained in your key ring, you can import it from the first installation CD. To import the key, use the command gpg --import gpg-pubkey-3d25d3d9-36e12d04.asc - Package authenticity verification: SUSE update packages are available on many mirror FTP servers all over the world. While this service is considered valuable and important to the free and open source software community, the authenticity and integrity of a package needs to be verified to ensure that it has not been tampered with. The internal RPM package signatures provide an easy way to verify the authenticity of an RPM package. Use the command rpm -v --checksig to verify the signature of the package, replacing with the filename of the RPM package downloaded. The package is unmodified if it contains a valid signature from
Oct 31, 2008
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!