Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
172

Ubuntu 20.04 LTS USN-5474-2: Varnish Cache Restart Due To Crafted Input

Varnish Cache could be made to restart if it received specially crafted input.. =========================================================================Ubuntu Security Notice USN-5474-2 August 23, 2022 varnish regression ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Varnish Cache could be made to restart if it received specially crafted input. Software Description: - varnish: state of the art, high-performance web accelerator Details: USN-5474-1 fixed vulnerabilities in Varnish Cache. Unfortunately the fix for CVE-2020-11653 was incomplete. This update fixes the problem. Original advisory details: It was discovered that Varnish Cache could have an assertion failure when a TLS termination proxy uses PROXY version 2. A remote attacker could possibly use this issue to restart the daemon and cause a performance loss. (CVE-2020-11653) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: libvarnishapi2 6.2.1-2ubuntu0.2 varnish 6.2.1-2ubuntu0.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5474-1 CVE-2020-11653 Package Information: https://launchpad.net/ubuntu/+source/varnish/6.2.1-2ubuntu0.2 . Ubuntu Security Notice USN-5474-3 addresses a restart problem with Varnish Cache due to manipulated input impacting Ubuntu 22.04 LTS.. Varnish Cache, Ubuntu Update, Software Security Issue, System Performance, Remote Attacks. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 24, 2022 Important Ubuntu
98

Red Hat Enterprise Linux 8 RHSA-2022:0199 Important: libreswan Restart Risk

An update for libreswan is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: libreswan security update Advisory ID: RHSA-2022:0199-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:0199 Issue date: 2022-01-19 CVE Names: CVE-2022-23094 ==================================================================== 1. Summary: An update for libreswan is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network (VPN). Security Fix(es): * libreswan: Malicious IKEv1 packet can cause libreswan to restart (CVE-2022-23094) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5.Bugs fixed (https://bugzilla.redhat.com/): 2036898 - CVE-2022-23094 libreswan: Malicious IKEv1 packet can cause libreswan to restart 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: libreswan-4.4-4.el8_5.src.rpm aarch64: libreswan-4.4-4.el8_5.aarch64.rpm libreswan-debuginfo-4.4-4.el8_5.aarch64.rpm libreswan-debugsource-4.4-4.el8_5.aarch64.rpm ppc64le: libreswan-4.4-4.el8_5.ppc64le.rpm libreswan-debuginfo-4.4-4.el8_5.ppc64le.rpm libreswan-debugsource-4.4-4.el8_5.ppc64le.rpm s390x: libreswan-4.4-4.el8_5.s390x.rpm libreswan-debuginfo-4.4-4.el8_5.s390x.rpm libreswan-debugsource-4.4-4.el8_5.s390x.rpm x86_64: libreswan-4.4-4.el8_5.x86_64.rpm libreswan-debuginfo-4.4-4.el8_5.x86_64.rpm libreswan-debugsource-4.4-4.el8_5.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2022-23094 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYeiqO9zjgjWX9erEAQh2lBAAllAJaL+tKnKJf8JPo32Yt8gPmc6v/2sl S5eGCT71vNeHQyjYa7V5w5/p6IinoPqaP4ENVPq9n/nUCFWyB+r6LP2V4lK3oanb pLGNXE00q0YdHMym6+fG1xldgon8aTlHpHjs5I9qJB0bPQXMCP8aPztNFgp52YpH cNUuJmxO7qvvh1ZrqYhs7MnK4IGPVX5UOBaPwKp/mG+2hLHe3cG4eJiuIOo7tnrC P0KzcwSMIyScXVo0TWWA2FyM3QfZlA+R2JjtV+HU4PalxdRobKvYkdpVUIDTMelb gE+OJAqd+ljXDsqPNajepDqccCQyE2ia8HnQ8qI0YyNwqNwVozNxRxo4v28lUg9t Qlx8fDs6rKNhR+IPmKSovAc4d7V5Z8Lt5XcWXpw9s111AZXCSwy/PBXEm8AlOXRW IncllIDWYnspOqlUgBvD1WN3dDkpQiRLn0MavMIGHxCaHO8maA60qSHtclvXPsD4 qrhq9uaNP7rSzlJSK2XLyQHVBvCSP46HWagBwlUeUNKfu/g/CEDrtYWDet1Rda5C Y5u8Tr2cbD9dfW1i84UqUo7QL7Al44nc0EcSg0TrgAkNcitnUJmUEeK6e+0qRIoF pzhSFrct7RnlBR4RotWhrTbb3+anbzhNvXne2SdSjU3h8W/NIWWW6wOR3BmzBZma L19BNnFA4lc=cxi7 -----END PGP SIGNATURE----- -- RHSA-announcemailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu has launched a critical patch for openssh, mitigating serious vulnerabilities. Ensure your system is secure!. Red Hat Security, Libreswan Update, IPsec Security, Linux Security Fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 19, 2022 Important Red Hat
203

Mageia 7: MGASA-2020-0154 Critical: Varnish Restart Issue

Updated varnish packages fix security vulnerability: An assert can be triggered in Varnish Cache when using Varnish with a TLS termination proxy, and the proxy and Varnish use the PROXY version 2. The assert will cause Varnish to restart, and the cache will be empty after the . MGASA-2020-0154 - Updated varnish packages fix security vulnerability Publication date: 02 Apr 2020 URL: https://advisories.mageia.org/MGASA-2020-0154.html Type: security Affected Mageia releases: 7 Updated varnish packages fix security vulnerability: An assert can be triggered in Varnish Cache when using Varnish with a TLS termination proxy, and the proxy and Varnish use the PROXY version 2. The assert will cause Varnish to restart, and the cache will be empty after the restart (VSV00005). References: - https://bugs.mageia.org/show_bug.cgi?id=26404 - https://vinyl-cache.org/security/VSV00005.html - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/FWJNWSLEZGPJBSBKJBLCPFOAO36PCZ7N/ SRPMS: - 7/core/varnish-6.3.2-1.mga7 . The latest varnish updates mitigate a security vulnerability that results in unexpected restarts and potential cache depletion for TLS proxy configurations.. Varnish Update, Mageia Security, TLS Proxy Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 02, 2020 Critical Mageia
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here