Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisorydenial of serviceupdateFedora 38 RUSTSEC-2023-0053 Moderate: Rust-Rustls-Webpki Denial Of Service
Update to version 0.100.2. This includes a fix for RUSTSEC-2023-0053 (denial- of-service via crafted certificate chains).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-7cb316a73b 2023-09-01 01:28:16.436431 -------------------------------------------------------------------------------- Name : rust-rustls-webpki Product : Fedora 38 Version : 0.100.2 Release : 1.fc38 URL : Summary : Web PKI X.509 Certificate Verification Description : Web PKI X.509 Certificate Verification. -------------------------------------------------------------------------------- Update Information: Update to version 0.100.2. This includes a fix for RUSTSEC-2023-0053 (denial- of-service via crafted certificate chains). -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 23 2023 Fabio Valentini - 0.100.2-1 - Update to version 0.100.2 * Fri Jul 21 2023 Fedora Release Engineering - 0.100.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-7cb316a73b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 01, 2023
•Important
Fedora
172
security advisorycode executionubuntuUbuntu: USN-5340-1 Critical: CKEditor Code Execution Risks
Several security issues were fixed in CKEditor.. =========================================================================Ubuntu Security Notice USN-5340-1 March 22, 2022 ckeditor vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 21.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in CKEditor. Software Description: - ckeditor: text editor which can be embedded into web pages Details: Kyaw Min Thein discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affects Ubuntu 18.04 LTS. (CVE-2018-9861) Micha Bentkowski discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affects Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-9281) Anton Subbotin discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affects Ubuntu 21.10. (CVE-2021-32808) Anton Subbotin discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary code. (CVE-2021-32809) Or Sahar discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affects Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-33829) Mika Kulmala discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-37695) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 21.10: ckeditor 4.16.0+dfsg-2ubuntu0.1 Ubuntu 20.04 LTS: ckeditor 4.12.1+dfsg-1ubuntu0.1 Ubuntu 18.04 LTS: ckeditor4.5.7+dfsg-2ubuntu0.18.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5340-1 CVE-2018-9861, CVE-2020-9281, CVE-2021-32808, CVE-2021-32809, CVE-2021-33829, CVE-2021-37695 Package Information: https://launchpad.net/ubuntu/+source/ckeditor/4.16.0+dfsg-2ubuntu0.1 https://launchpad.net/ubuntu/+source/ckeditor/4.12.1+dfsg-1ubuntu0.1 https://launchpad.net/ubuntu/+source/ckeditor/4.5.7+dfsg-2ubuntu0.18.04.1 . Several vulnerabilities in CKEditor addressed in various Ubuntu releases, including risks of possible remote code execution.. CKEditor Exploit, Ubuntu Security Update, Code Injection Fixes. . Severity: Critical. LinuxSecurity.com Team
Mar 22, 2022
•Critical
Ubuntu
98
security advisoryDoSimportantRed Hat OpenStack Platform 16.2 RHSA-2021-3488-01 Important: DoS Risk Fix
An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat OpenStack Platform 16.2 (openstack-neutron) security update Advisory ID: RHSA-2021:3488-01 Product: Red Hat OpenStack Platform Advisory URL: https://access.redhat.com/errata/RHSA-2021:3488 Issue date: 2021-09-15 CVE Names: CVE-2021-40085 ==================================================================== 1. Summary: An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.2 (Train). Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat OpenStack Platform 16.2 - noarch 3. Description: Neutron is a virtual network service for OpenStack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services (e.g., virtual NICs from Nova VMs). The Neutron API supports extensions to provide advanced network capabilities (e.g., QoS, ACLs, network, monitoring, etc.). Security Fix(es): * arbitrary dnsmasq reconfiguration via extra_dhcp_opts (CVE-2021-40085) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. 4. Solution: For details on how to apply thisupdate, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1916701 - Neutron API workers are not named correctly in PS output 1929829 - [OSP16.2]Ha router configuration as master error due to qg-xx interface down 1938966 - Quota API returns invalid JSON when 'reserved' > 0 1970051 - [SRIOV] min BW placement enforcement fails when NIC does not support dataplane enforcement 1979572 - Fail to deploy vm with SRIOV ports, fix need to be backported to 16.2 d/s 1998052 - CVE-2021-40085 openstack-neutron: arbitrary dnsmasq reconfiguration via extra_dhcp_opts 6. Package List: Red Hat OpenStack Platform 16.2: Source: openstack-neutron-15.3.5-2.20210608154813.el8ost.3.src.rpm noarch: openstack-neutron-15.3.5-2.20210608154813.el8ost.3.noarch.rpm openstack-neutron-common-15.3.5-2.20210608154813.el8ost.3.noarch.rpm openstack-neutron-linuxbridge-15.3.5-2.20210608154813.el8ost.3.noarch.rpm openstack-neutron-macvtap-agent-15.3.5-2.20210608154813.el8ost.3.noarch.rpm openstack-neutron-metering-agent-15.3.5-2.20210608154813.el8ost.3.noarch.rpm openstack-neutron-ml2-15.3.5-2.20210608154813.el8ost.3.noarch.rpm openstack-neutron-openvswitch-15.3.5-2.20210608154813.el8ost.3.noarch.rpm openstack-neutron-rpc-server-15.3.5-2.20210608154813.el8ost.3.noarch.rpm openstack-neutron-sriov-nic-agent-15.3.5-2.20210608154813.el8ost.3.noarch.rpm python3-neutron-15.3.5-2.20210608154813.el8ost.3.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2021-40085 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYUGVTNzjgjWX9erEAQgJcg//TfBcX8Dl8fP8YgYI7W6p/65wOS6hyKMX Qx4vJamlV8+qzb11bjwm1PJR49eSzfprE6QuGYnntoiwqw6foM5MdWfPNAYj3meq 2HA487SAAp7AA+s8J9vmM8BWgDSnTM7zTCH7qI8fko+3osfOcLdnljOE0PlAdDt7 SXgRxQH/g1l8G9IB9fHdL3x1L+NbsjG+gdlXdrkVqhNRR5CV1uGx4y0z3CIULBL0 ApVcwUZ1GNW3MwmFlYB5TCzZ9mYVY1LEqSMHzf59RH2pFgnmlZAWf3dmKAKBaGpq CPPwA+QNBS0klnyP3fZLOgsBwQG5KFFvMDi57KaG4HFedPrTI3ZM1uYxXUrEskvE HhOVQ4Jn9rIGs4f0Ssc7txUB5V4MOKt9/8dNWr03J/kyGushOWO8zZpnH8hNvsnV s2sFAAuFVx3FfKmyTuvc2Jvb9rihFuV4V9QcAEtgoZpqzk+f+fn2M9KHnYgWUIKQ OsldtXt52k1Xrm5RUh0VJ26xbfCmwoUqMQ/BvE5V6Avz/gIpgHl/Og5bxMCe/cb1 7tx/G+0qrwZz4eGcPWqaO8Eb2QiODn4D9nTK+sxEUgnizKTaB6w1b/pp+lC7qzAq /1KQHuOSECzwMv2AoleIDo5LHwh8kmgeFf3q4h7KSg0t2FKg4VOCQCTeMEqr6Mvv NEgrzrU9zsA=Xvwn -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Sep 15, 2021
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!