Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
172
security advisorymoderateremote accessUbuntu 23.04 USN-6530-1 moderate: HAProxy sensitive info attack
HAProxy could be made to expose sensitive information.. ========================================================================== Ubuntu Security Notice USN-6530-1 December 05, 2023 haproxy vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: HAProxy could be made to expose sensitive information. Software Description: - haproxy: fast and reliable load balancing reverse proxy Details: It was discovered that HAProxy incorrectly handled URI components containing the hash character (#). A remote attacker could possibly use this issue to obtain sensitive information, or to bypass certain path_end rules. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: haproxy 2.6.9-1ubuntu1.2 Ubuntu 22.04 LTS: haproxy 2.4.22-0ubuntu0.22.04.3 Ubuntu 20.04 LTS: haproxy 2.0.31-0ubuntu0.3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6530-1 CVE-2023-45539 Package Information: https://launchpad.net/ubuntu/+source/haproxy/2.6.9-1ubuntu1.2 https://launchpad.net/ubuntu/+source/haproxy/2.4.22-0ubuntu0.22.04.3 https://launchpad.net/ubuntu/+source/haproxy/2.0.31-0ubuntu0.3 . HAProxy vulnerability in Ubuntu exposes sensitive info; update available for affected versions as per USN-6530-1.. Haproxy Vulnerability, Ubuntu Security Notice, Remote Attack Risk. . LinuxSecurity.com Team
Dec 05, 2023
Ubuntu
172
security advisoryphphighUbuntu 23.04: USN-6200-1 Critical: Python Remote Code Execution
PHP could be made to expose sensitive information.. =========================================================================Ubuntu Security Notice USN-6199-1 July 03, 2023 php7.4, php8.1 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: PHP could be made to expose sensitive information. Software Description: - php8.1: HTML-embedded scripting language interpreter - php7.4: HTML-embedded scripting language interpreter Details: It was discovered that PHP incorrectly handled certain Digest authentication for SOAP. An attacker could possibly use this issue to expose sensitive information. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: libapache2-mod-php7.4 8.1.12-1ubuntu4.2 libapache2-mod-php8.0 8.1.12-1ubuntu4.2 libapache2-mod-php8.1 8.1.12-1ubuntu4.2 php8.1 8.1.12-1ubuntu4.2 php8.1-cgi 8.1.12-1ubuntu4.2 php8.1-cli 8.1.12-1ubuntu4.2 php8.1-soap 8.1.12-1ubuntu4.2 Ubuntu 22.10: libapache2-mod-php7.4 8.1.7-1ubuntu3.5 libapache2-mod-php8.0 8.1.7-1ubuntu3.5 libapache2-mod-php8.1 8.1.7-1ubuntu3.5 php8.1 8.1.7-1ubuntu3.5 php8.1-cgi 8.1.7-1ubuntu3.5 php8.1-cli 8.1.7-1ubuntu3.5 php8.1-soap 8.1.7-1ubuntu3.5 Ubuntu 22.04 LTS: libapache2-mod-php7.4 8.1.2-1ubuntu2.13 libapache2-mod-php8.0 8.1.2-1ubuntu2.13 libapache2-mod-php8.1 8.1.2-1ubuntu2.13 php8.1 8.1.2-1ubuntu2.13 php8.1-cgi 8.1.2-1ubuntu2.13 php8.1-cli 8.1.2-1ubuntu2.13 php8.1-soap 8.1.2-1ubuntu2.13 php8.1-sqlite3 8.1.2-1ubuntu2.13 Ubuntu 20.04 LTS: libapache2-mod-php7.4 7.4.3-4ubuntu2.19 php7.4 7.4.3-4ubuntu2.19 php7.4-cgi 7.4.3-4ubuntu2.19 php7.4-cli 7.4.3-4ubuntu2.19 php7.4-soap 7.4.3-4ubuntu2.19 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6199-1 CVE-2023-3247 Package Information: https://launchpad.net/ubuntu/+source/php8.1/8.1.12-1ubuntu4.2 https://launchpad.net/ubuntu/+source/php8.1/8.1.7-1ubuntu3.5 https://launchpad.net/ubuntu/+source/php8.1/8.1.2-1ubuntu2.13 https://launchpad.net/ubuntu/+source/php7.4/7.4.3-4ubuntu2.19 . Keep updated on the essential security alert regarding PHP vulnerabilities in Ubuntu versions 7.4 and 8.1, which may reveal confidential information.. PHP Exposure, Ubuntu Security Notice, Authentication Issue, Update PHP Packages, Sensitive Info Leak. . Severity: Critical. LinuxSecurity.com Team
Jul 03, 2023
•Critical
Ubuntu
89
security advisoryupdateFedoraFedora 22 Rolekit Permissions Update: Security Advisory
rolekit-0.3.2-2.fc22 - Fix permissions on role JSON settings files to avoid leaking sensitive info. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-15001 2015-09-27 02:42:34.329478 -------------------------------------------------------------------------------- Name : rolekit Product : Fedora 22 Version : 0.3.2 Release : 2.fc22 URL : https://fedoraproject.org/wiki/Infrastructure/Fedorahosted-retirement Summary : A server daemon with D-Bus interface providing a server roles Description : rolekit is a server daemon that provides a D-Bus interface and server roles. -------------------------------------------------------------------------------- Update Information: rolekit-0.3.2-2.fc22 - Fix permissions on role JSON settings files to avoid leaking sensitive info -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update rolekit' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Sep 27, 2015
•Important
Fedora
172
security advisorycriticalubuntuUbuntu 15.04: USN-2648-1 Critical: Aptdaemon Sensitive Info Exposure
Aptdaemon could be made to expose sensitive information, or allow file access as the administrator.. =========================================================================Ubuntu Security Notice USN-2648-1 June 16, 2015 aptdaemon vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.04 - Ubuntu 14.10 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: Aptdaemon could be made to expose sensitive information, or allow file access as the administrator. Software Description: - aptdaemon: transaction based package management service Details: Tavis Ormandy discovered that Aptdeamon incorrectly handled the simulate dbus method. A local attacker could use this issue to possibly expose sensitive information, or perform other file access as the root user. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.04: aptdaemon 1.1.1+bzr982-0ubuntu3.1 Ubuntu 14.10: aptdaemon 1.1.1+bzr980-0ubuntu1.1 Ubuntu 14.04 LTS: aptdaemon 1.1.1-1ubuntu5.2 Ubuntu 12.04 LTS: aptdaemon 0.43+bzr805-0ubuntu10 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2648-1 CVE-2015-1323 Package Information: https://launchpad.net/ubuntu/+source/aptdaemon/1.1.1+bzr982-0ubuntu3.1 https://launchpad.net/ubuntu/+source/aptdaemon/1.1.1+bzr980-0ubuntu1.1 https://launchpad.net/ubuntu/+source/aptdaemon/1.1.1-1ubuntu5.2 https://launchpad.net/ubuntu/+source/aptdaemon/0.43+bzr805-0ubuntu10 . Aptdaemon security notice issued for Ubuntu iterations reveals confidential data or enables file reach. Immediate upgrade recommended!. Aptdaemon Vulnerability, Ubuntu Security, Sensitive Information Risk. . Severity:Critical. LinuxSecurity.com Team
Jun 16, 2015
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!