Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
219
security advisorylocal escalationimportant fixRocky Linux 9 RLSA-2023:1067 Important: Pesign Local Escalation
Important: pesign security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2023:1067", "synopsis": "Important: pesign security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for pesign.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.\n\nSecurity Fix(es):\n\n* pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2135420", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2135420", "description": ""}], "cves": [{"name": "CVE-2022-3560", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2022-3560", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2023-03-08T16:38:25.971989Z", "rpms": {"Rocky Linux 9": {"nvras": ["pesign-0:115-6.el9_1.rocky.2.aarch64.rpm", "pesign-0:115-6.el9_1.rocky.2.src.rpm", "pesign-0:115-6.el9_1.rocky.2.x86_64.rpm", "pesign-debuginfo-0:115-6.el9_1.rocky.2.aarch64.rpm", "pesign-debuginfo-0:115-6.el9_1.rocky.2.x86_64.rpm", "pesign-debugsource-0:115-6.el9_1.rocky.2.aarch64.rpm", "pesign-debugsource-0:115-6.el9_1.rocky.2.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security patch released for Rocky Linux, targeting local privilege escalation vulnerability in the systemd component.. pesign security, Rocky Linux update, local privilege escalation, UEFI signing. . Severity: Important. LinuxSecurity.com Team
Mar 08, 2023
•Important
Rocky Linux
217
security advisorysecurity patchimportant updateOracle Linux 7 ELSA-2023-1093 Critical: pesign Important Security Patch
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-1093 https://linux.oracle.com/errata/ELSA-2023-1093.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: aarch64: pesign-0.109-11.el7_9.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates//pesign-0.109-11.el7_9.src.rpm Related CVEs: CVE-2022-3560 Description of changes: [0.109-11.0.1] - RPM macro fix (Petr Benes) - updates for Oracle Linux test certificate (Alexey Petrenko) - update Oracle Linux certificates (Alexey Petrenko) [0.109-11] - Backport newer, deprecated pesign-authorize - Resolves: CVE-2022-3560 _______________________________________________ El-errata mailing list
Mar 08, 2023
•Critical
Oracle
98
security advisoryprivilege escalationimportantRed Hat Enterprise Linux 7 RHSA-2023-1093-01 Important Local Escalation Fix
An update for pesign is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: pesign security update Advisory ID: RHSA-2023:1093-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:1093 Issue date: 2023-03-07 CVE Names: CVE-2022-3560 ==================================================================== 1. Summary: An update for pesign is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64 3. Description: The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fix(es): * pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2135420 - CVE-2022-3560 pesign: Local privilege escalation on pesign systemd service 6. Package List: Red Hat Enterprise Linux Client Optional (v. 7): Source: pesign-0.109-11.el7_9.src.rpm x86_64: pesign-0.109-11.el7_9.x86_64.rpm pesign-debuginfo-0.109-11.el7_9.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional (v. 7): Source: pesign-0.109-11.el7_9.src.rpm x86_64: pesign-0.109-11.el7_9.x86_64.rpm pesign-debuginfo-0.109-11.el7_9.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 7): Source: pesign-0.109-11.el7_9.src.rpm x86_64: pesign-0.109-11.el7_9.x86_64.rpm pesign-debuginfo-0.109-11.el7_9.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v. 7): Source: pesign-0.109-11.el7_9.src.rpm x86_64: pesign-0.109-11.el7_9.x86_64.rpm pesign-debuginfo-0.109-11.el7_9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2022-3560 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBZAcuBdzjgjWX9erEAQgOHA/7BEHsUb4+utg+YL/EZfFuUqhkHpV3Xk6z i14QR6Hy5kepLhwvGvv37A0U5o8x4rfPYQI+w8vzxliWPY/JXQlawK+qVNcia+xb 1esZBTq7Pn3yfGxbbdA/nW0V0iFdeG/OnTvuyIWZXVe5RpdxMm6y3AB99xY9WM7Z l8QyDNfDQeNRQiZbMupF5Ie8vhnwFEmdNE1rbcBxPInqQ9KJqJNBRqPs/y5fiY9J IDuV/zHFGLAru9zfo0j1YxOV+vKa9FgUkgQwcqT3m39/L1qCY1j2aE0W8C9PFLcN nWu0qO3AChD2qMqTRxUwlag6OU8m99yXeXJD69udM91KBiAT5NwxPFZTwmodNX8p A9VLOuK30khSAjZKaL3jKH9V48WAEXWoIY2ncfFPovw7v7Zyv6bPq2nEIjghvlEf 9ymb60lfH/5wm29OLbmyOGc9eO0FK1qIcarjkI8Tb+PGsLDkocN+vDy7sbr48AlR ZGqLy7awTvdL1G9mFR1S9WMD62jSoHP/wKBwdCHb4cxOXkGjUBMrAnbOXkWU+vkf Q3Pc1a6PFkzgH+TjVNYXy6aOyeHZJxCEj/FDXHo/+QauTxx/xUmryxREFjzand7Z 8TYxpRm78DHmBPmctht+ivZ6thfrcLqtq4xMkCQEUL4PI2pWuL94GiRI3l6e/Iil r77PJEmt1v4=fimS -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Mar 07, 2023
•Important
Red Hat
98
security advisoryRed Hat Enterprise Linuxlocal escalationRed Hat Enterprise Linux 9 - RHSA-2023:1067-01 Important Local Escalation
An update for pesign is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: pesign security update Advisory ID: RHSA-2023:1067-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:1067 Issue date: 2023-03-06 CVE Names: CVE-2022-3560 ==================================================================== 1. Summary: An update for pesign is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - aarch64, x86_64 3. Description: The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fix(es): * pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 2135420 - CVE-2022-3560 pesign: Local privilege escalation on pesign systemd service 6. Package List: Red Hat Enterprise Linux AppStream (v.9): Source: pesign-115-6.el9_1.src.rpm aarch64: pesign-115-6.el9_1.aarch64.rpm pesign-debuginfo-115-6.el9_1.aarch64.rpm pesign-debugsource-115-6.el9_1.aarch64.rpm x86_64: pesign-115-6.el9_1.x86_64.rpm pesign-debuginfo-115-6.el9_1.x86_64.rpm pesign-debugsource-115-6.el9_1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2022-3560 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBZAXchNzjgjWX9erEAQjveQ//URJ2mVEcGDevTWUkluitSIEOLfu7RheU 0I2BRFgcbnTQEt/BsdDnhZw31HXyqYhDIMgq12Vg70gTSB3mksfY5X5DSrp4NRVE nhNN76qx1egnZqRMC/yJ7tEZY08IO/AN12maZv4spx/B+TsCanw2mymxEYs8Q/Cz zpjN9lJCv/pxLzesQ0hNVFK6pcRbc+sH4xwJ358ZwBRShJYUzTIvxy9/S7t4Y4tD HJRu5UApSMW3wISBvs1gTpBXZ9AhzluwOKtPEas+w4w1cb8fxK32hqBGwaF+BLIW 02Gkl/WZZXTpGL+6cniUviQHf39f5D+XA08OK2SMz2ymwKNM70tWzh7wyfMrCyic EDmLf6Apf8tWzSsDy1UQ2Ley22qWimB+kkS67zwxUKsWOVHantHTOFW4jj+AvQvH Xhxo4A/TYVFVzXrjI/TzDvbSzJDKqgVvMkclyCaUzOP4VrJ51pbqMevX/UPX6LI6 B0TdCI5eHxllAFPmi+6/MHRWo2ZqHBn6p6z/otADg1e9sIA7ZiBCWW2XcDkQCfxD u5sIhGKOgVLsEl1iaoTFp9oYqUsr/sAdssJ1ufrpmxEn2Ck3y75KXisAApOa2xKX mKsYkjKczo1JbRtAi/iSxetplIC92Jr04tGIPpRT0xoFZBwEauSc0BIRmaWTsFBw yvDz0vt28bQ=SvqR -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Mar 06, 2023
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!