Stay Secure with the Latest Linux Advisories

security advisorycriticalMageia

Mageia 8 MGASA-2023-0230 Critical: Maven Non-SSL Reference Advisory

No longer use http (non-SSL) repository references by default. References: - https://bugs.mageia.org/show_bug.cgi?id=28924 - https://www.openwall.com/lists/oss-security/2021/04/23/5 . MGASA-2023-0230 - Updated maven packages fix security vulnerability Publication date: 19 Jul 2023 URL: https://advisories.mageia.org/MGASA-2023-0230.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-26291 No longer use http (non-SSL) repository references by default. References: - https://bugs.mageia.org/show_bug.cgi?id=28924 - https://www.openwall.com/lists/oss-security/2021/04/23/5 - https://ubuntu.com/security/notices/USN-5805-1 - https://lists.suse.com/pipermail/sle-security-updates/2023-May/014769.html - https://www.cve.org/CVERecord?id=CVE-2021-26291 SRPMS: - 8/core/maven-3.6.3-8.1.mga8 . Mageia 2023-0231 tackles security vulnerabilities in the maven packages by refreshing repository links to improve compliance with safety protocols.. Mageia Security, Maven Update, Repository Management, Non-SSL Configuration. . Severity: Critical. LinuxSecurity.com Team

Jul 19, 2023 •Critical Mageia