Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
197

Debian LTS DLA-4161-1 critical: SimpleSAMLphp signature confusion risk

A vulnerability has been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2025-27773 . ------------------------------------------------------------------------- Debian LTS Advisory DLA-4161-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Tobias Frost May 09, 2025 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : simplesamlphp Version : 1.19.0-1+deb11u2 CVE ID : CVE-2025-27773 Debian Bug : 1100595 A vulnerability has been discovered in SimpleSAMLphp, a framework for authentication, primarily via the SAML protocol. CVE-2025-27773 The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to accept an unsigned message. Versions 4.17.0 and 5.0.0-alpha.20 contain a fix for the issue. For Debian 11 bullseye, this problem has been fixed in version 1.19.0-1+deb11u2. We recommend that you upgrade your simplesamlphp packages. For the detailed security status of simplesamlphp please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/simplesamlphp Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . An important upgrade for SimpleSAMLphp resolves a signature ambiguity problem, safeguarding users against possible vulnerabilities.. Simplesamlphp Security, Debian Updates, SAML Protocol Flaws, Authentication Vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 09, 2025 Critical Debian LTS
172

Ubuntu: 7409-1 critical: ruby-saml signature attack & DoS

Several security issues were fixed in ruby-saml.. ========================================================================== Ubuntu Security Notice USN-7409-1 April 02, 2025 ruby-saml vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in ruby-saml. Software Description: - ruby-saml: SAML toolkit for Ruby on Rails Details: It was discovered that ruby-saml did not correctly handle XML parsing. An attacker could possibly use this issue to perform a signature wrapping attack and bypass authentication. (CVE-2025-25291 and CVE-2025-25292) It was discovered that ruby-saml did not correctly handle decompressing SAML responses. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-25293) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 ruby-saml 1.15.0-1ubuntu0.24.10.2 Ubuntu 24.04 LTS ruby-saml 1.15.0-1ubuntu0.24.04.1+esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS ruby-saml 1.13.0-1ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS ruby-saml 1.11.0-1ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS ruby-saml 1.7.2-1ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS ruby-saml 1.1.2-1ubuntu1+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7409-1 CVE-2025-25291, CVE-2025-25292, CVE-2025-25293 Package Information: https://launchpad.net/ubuntu/+source/ruby-saml/1.15.0-1ubuntu0.24.10.2 . Tackling vulnerabilities in the ruby-saml library across various Ubuntu LTS releases. Upgrade immediately to enhance your system's safety!. RubySAML, Ubuntu Security, Update Instructions, SAML Toolkit. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 03, 2025 Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here