Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
200
security advisorydenial of servicebuffer overflowScientific Linux: OpenSSL Moderate Denial of Service CVE-2015-0209 SLSA-2015:0716-1
Moderate: openssl security and bug fix update. Date: Wed, 25 Mar 2015 15:20:14 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Moderate: openssl on SL7.x x86_64 MIME-Version: 1.0 Synopsis: Moderate: openssl security and bug fix update Advisory ID: SLSA-2015:0716-1 Issue Date: 2015-03-24 CVE Numbers: CVE-2015-0209 CVE-2015-0286 CVE-2015-0287 CVE-2015-0289 CVE-2015-0292 CVE-2015-0293 CVE-2015-0288 -- An invalid pointer use flaw was found in OpenSSL's ASN1_TYPE_cmp() function. A remote attacker could crash a TLS/SSL client or server using OpenSSL via a specially crafted X.509 certificate when the attacker- supplied certificate was verified by the application. (CVE-2015-0286) An integer underflow flaw, leading to a buffer overflow, was found in the way OpenSSL decoded malformed Base64-encoded inputs. An attacker able to make an application using OpenSSL decode a specially crafted Base64-encoded input (such as a PEM file) could use this flaw to cause the application to crash. Note: this flaw is not exploitable via the TLS/SSL protocol because the data being transferred is not Base64-encoded. (CVE-2015-0292) A denial of service flaw was found in the way OpenSSL handled SSLv2 handshake messages. A remote attacker could use this flaw to cause a TLS/SSL server using OpenSSL to exit on a failed assertion if it had both the SSLv2 protocol and EXPORT-grade cipher suites enabled. (CVE-2015-0293) A use-after-free flaw was found in the way OpenSSL imported malformed Elliptic Curve private keys. A specially crafted key file could cause an application using OpenSSL to crash when imported. (CVE-2015-0209) An out-of-bounds write flaw was found in the way OpenSSL reused certain ASN.1 structures. A remote attacker could possibly use a specially crafted ASN.1 structure that, when parsed by an application, would cause that application to crash. (CVE-2015-0287) A NULL pointer dereference flaw was found in OpenSSL's X.509certificate handling implementation. A specially crafted X.509 certificate could cause an application using OpenSSL to crash if the application attempted to convert the certificate to a certificate request. (CVE-2015-0288) A NULL pointer dereference was found in the way OpenSSL handled certain PKCS#7 inputs. An attacker able to make an application using OpenSSL verify, decrypt, or parse a specially crafted PKCS#7 input could cause that application to crash. TLS/SSL clients and servers using OpenSSL were not affected by this flaw. (CVE-2015-0289) This update also fixes the following bug: * When a wrapped Advanced Encryption Standard (AES) key did not require any padding, it was incorrectly padded with 8 bytes, which could lead to data corruption and interoperability problems. With this update, the rounding algorithm in the RFC 5649 key wrapping implementation has been fixed. As a result, the wrapped key conforms to the specification, which prevents the described problems. For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. -- SL7 x86_64 openssl-1.0.1e-42.el7_1.4.x86_64.rpm openssl-debuginfo-1.0.1e-42.el7_1.4.i686.rpm openssl-debuginfo-1.0.1e-42.el7_1.4.x86_64.rpm openssl-libs-1.0.1e-42.el7_1.4.i686.rpm openssl-libs-1.0.1e-42.el7_1.4.x86_64.rpm openssl-devel-1.0.1e-42.el7_1.4.i686.rpm openssl-devel-1.0.1e-42.el7_1.4.x86_64.rpm openssl-perl-1.0.1e-42.el7_1.4.x86_64.rpm openssl-static-1.0.1e-42.el7_1.4.i686.rpm openssl-static-1.0.1e-42.el7_1.4.x86_64.rpm - Scientific Linux Development Team . Enhancements in encryption standards for OpenSSL on Scientific Linux implemented to tackle various vulnerabilities and boost the entire robustness and reliability of the platform.. openssl update, scientific linux security, buffer overflow, denial of service, moderate vulnerabilities. . LinuxSecurity.com Team
Mar 25, 2015
Scientific Linux
200
security advisorycritical issuesoftware patchScientific Linux: CVE-2013-0169 Critical Java-1.6.0-Sun Security Update
Critical: java-1.6.0-sun security update. Date: Wed, 27 Feb 2013 12:48:25 -0600 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Organization: Fermilab Subject: Security ERRATA Critical: java-1.6.0-sun on SL 5.0 - 5.8 (i386 x86_64) MIME-Version: 1.0 Synopsis: Critical: java-1.6.0-sun security update Issue Date: 2013-02-20 CVE Numbers: CVE-2013-0169 CVE-2013-1486 CVE-2013-1487 -- This update fixes several vulnerabilities in the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. Further information about these flaws can be found on the Oracle Java SE Critical Patch Update Advisory page. (CVE-2013-0169, CVE-2013-1486, CVE-2013-1487) All running instances of Java must be restarted for the update to take effect. -- - Scientific Linux Development Team . Important security patch released for java-1.6.0-sun in Scientific Linux mitigates several security flaws.. java Update, Critical Patch, Scientific Linux Security, Oracle Java, Security Errata. . Severity: Critical. LinuxSecurity.com Team
Feb 27, 2013
•Critical
Scientific Linux
200
security advisorybug fixlow severityScientific Linux 5.x: Errata for Low OpenAFS Bug Fix Updates Available
Low: openafs Bug Fix. Date: Mon, 11 Jan 2010 11:44:38 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Low: openafs on SL5.x i386/x86_64 Comments: To: "
Jan 11, 2010
•Low
Scientific Linux
200
security advisorylow severitykernel moduleScientific Linux SL5.x Errata 16-00-28 Low Severity: ndiswrapper Issues
Low: ndiswrapper. Date: Thu, 26 Jun 2008 16:00:28 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for ndiswrapper on SL5.x i386/x86_64 Comments: To: "
Jun 26, 2008
•Low
Scientific Linux
200
security advisorybug fixlow severityScientific Linux 5.x: OpenAFS Errata 14-51-23 Low Severity Bug Fix
Low: openafs Bug Fix. Date: Thu, 26 Jun 2008 14:51:23 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for openafs on SL5.x i386/x86_64 Comments: To: "
Jun 26, 2008
•Low
Scientific Linux
200
security advisoryScientific Linuxyum-confScientific Linux: yum-conf Legacy Mode Changes - Security Errata
yum-conf - legacy mode changes. Date: Thu, 13 Dec 2007 14:00:06 -0600 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for yum-conf on SL3,x i386/x86_64 Comments: To: "
Dec 13, 2007
•Important
Scientific Linux
200
security advisorysecurity issuekernel updateScientific Linux 4: Important Kernel CVE-2004-2660 Security Advisory
Updated kernel packages that fix several security issues in . Date: Fri, 25 Aug 2006 14:30:40 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: ERRATA for "kernel" on SL 40,41,42,43 i386,x86_64 now available Comments: To:
Aug 25, 2006
•Important
Scientific Linux
200
security advisorykernel updateCVE issuesScientific Linux 3.0: RHSA-2005:663-01 Critical Kernel Update Issues
Updated kernel packages. Date: Fri, 30 Sep 2005 16:50:15 -0500 Reply-To: Connie Sieh Sender: Security Errata for Scientific Linux From: Connie Sieh Subject: ERRATA for SL 302,303,304,305 i386 now available Comments: To:
Sep 30, 2005
•Critical
Scientific Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!