Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
172
security advisoryupdateapacheUbuntu 12.04 ESM: USN-3425-2 Critical: Apache Server Information Exposure
Apache HTTP Server could be made to expose sensitive information over the network.. =========================================================================Ubuntu Security Notice USN-3425-2 October 24, 2017 apache2 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: Apache HTTP Server could be made to expose sensitive information over the network. Software Description: - apache2: Apache HTTP server Details: USN-3425-1 fixed a vulnerability in Apache HTTP Server. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Hanno Böck discovered that the Apache HTTP Server incorrectly handled Limit directives in .htaccess files. In certain configurations, a remote attacker could possibly use this issue to read arbitrary server memory, including sensitive information. This issue is known as Optionsbleed. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: apache2.2-bin 2.2.22-1ubuntu1.14 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3425-2 https://ubuntu.com/security/notices/USN-3425-1 CVE-2017-9798 . Recent Apache HTTP Server updates mitigate risks related to sensitive data exposure in Ubuntu 12.04 ESM. Explore further for comprehensive security insights.. Apache Server Exploit, Ubuntu Security Patch, Information Exposure Risk. . Severity: Critical. LinuxSecurity.com Team
Oct 24, 2017
•Critical
Ubuntu
89
security advisorymoderatefedoraFedora 28: 2018-abs8z56e6z High: Nginx CVE-2018-16843 Patch
This is a release fixing a security fix applied upstream, known as "optionsbleed" in popular parlance. It is relevant for hosted and co-located instances of Fedora (and why wouldn't you?).. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-fdd3a98e8f 2017-09-30 05:57:53.281153 --------------------------------------------------------------------------------Name : httpd Product : Fedora 27 Version : 2.4.27 Release : 8.fc27 URL : https://httpd.apache.org/ Summary : Apache HTTP Server Description : The Apache HTTP Server is a powerful, efficient, and extensible web server. --------------------------------------------------------------------------------Update Information: This is a release fixing a security fix applied upstream, known as "optionsbleed" in popular parlance. It is relevant for hosted and co-located instances of Fedora (and why wouldn't you?). --------------------------------------------------------------------------------References: [ 1 ] Bug #1490344 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed) https://bugzilla.redhat.com/show_bug.cgi?id=1490344 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade httpd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 30, 2017
Fedora
89
security advisoryupdateFedoraFedora: 26 moderate: Security Fix for httpd optionsbleed Issue
This is a release fixing a security fix applied upstream, known as "optionsbleed" in popular parlance. It is relevant for hosted and co-located instances of Fedora (and why wouldn't you?).. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-a52f252521 2017-09-22 15:26:38.066959 --------------------------------------------------------------------------------Name : httpd Product : Fedora 26 Version : 2.4.27 Release : 3.fc26 URL : https://httpd.apache.org/ Summary : Apache HTTP Server Description : The Apache HTTP Server is a powerful, efficient, and extensible web server. --------------------------------------------------------------------------------Update Information: This is a release fixing a security fix applied upstream, known as "optionsbleed" in popular parlance. It is relevant for hosted and co-located instances of Fedora (and why wouldn't you?). --------------------------------------------------------------------------------References: [ 1 ] Bug #1490344 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed) https://bugzilla.redhat.com/show_bug.cgi?id=1490344 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade httpd' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 22, 2017
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!