Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
203
security advisoryremote attackmoderate severityMageia: 2024-0034 Moderate: FileZilla Prefix Truncation Attack Fix
Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol used in FileZilla is prone to a prefix truncation attack, known as the "Terrapin attack". A remote attacker could use this issue to downgrade or disable some security features and obtain sensitive information. . MGASA-2024-0034 - Updated filezilla packages fix a security vulnerability ("Terrapin attack") Publication date: 10 Feb 2024 URL: https://advisories.mageia.org/MGASA-2024-0034.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-48795 Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol used in FileZilla is prone to a prefix truncation attack, known as the "Terrapin attack". A remote attacker could use this issue to downgrade or disable some security features and obtain sensitive information. This update fixes the issue. References: - https://bugs.mageia.org/show_bug.cgi?id=32748 - https://ubuntu.com/security/notices/USN-6589-1 - https://www.cve.org/CVERecord?id=CVE-2023-48795 SRPMS: - 9/core/filezilla-3.66.4-1.mga9 . Mageia's MGASA-2024-0035 tackles a major vulnerability in GIMP, reinforcing vital image editing safeguards.. FileZilla Security Update, Mageia Advisory, SSH Protocol Fix. . LinuxSecurity.com Team
Feb 10, 2024
Mageia
89
security advisorysecurity issueFedoraFedora 39: FEDORA-2024-a53b24023d Critical: Prometheus Exporter SSH Attack
Security fix for CVE-2023-48795. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-a53b24023d 2024-01-29 06:23:44.937502 -------------------------------------------------------------------------------- Name : prometheus-podman-exporter Product : Fedora 39 Version : 1.7.0 Release : 1.fc39 URL : https://github.com/containers/prometheus-podman-exporter Summary : Prometheus exporter for podman environment Description : Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-48795 -------------------------------------------------------------------------------- ChangeLog: * Sun Jan 21 2024 Navid Yaghoobi - 1.7.0-1 - release v1.7.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2255105 - CVE-2023-48795 prometheus-podman-exporter: ssh: Prefix truncation attack on Binary Packet Protocol (BPP) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2255105 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-a53b24023d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jan 29, 2024
•Critical
Fedora
89
security advisorymoderatefedoraFedora 39: FEDORA-2023-d82bc5df49 critical: OpenSSH Vulnerability
Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-b87ec6cf47 2023-12-30 01:30:19.049399 -------------------------------------------------------------------------------- Name : proftpd Product : Fedora 38 Version : 1.3.8b Release : 1.fc38 URL : http://www.proftpd.org/ Summary : Flexible, stable and highly-configurable FTP server Description : ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory visibility. This package defaults to the standalone behavior of ProFTPD, but all the needed scripts to have it run by systemd instead are included. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 20 2023 Paul Howarth - 1.3.8b-1 - Update to 1.3.8b - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed (GH#1735) - Build system failed for specific module names (GH#1756) - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp (CVE-2023-48795, GH#1760) * Fri Dec 8 2023 Florian Weimer - 1.3.8a-2 - Additional C compatibility fix -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) https://bugzilla.redhat.com/show_bug.cgi?id=2254210 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-b87ec6cf47' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 30, 2023
•Critical
Fedora
89
security advisoryfedoramoderate severityFedora 39 FEDORA-2023-153404713b moderate: SSH attack on ProFTPD
Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-153404713b 2023-12-30 01:20:53.296279 -------------------------------------------------------------------------------- Name : proftpd Product : Fedora 39 Version : 1.3.8b Release : 1.fc39 URL : http://www.proftpd.org/ Summary : Flexible, stable and highly-configurable FTP server Description : ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory visibility. This package defaults to the standalone behavior of ProFTPD, but all the needed scripts to have it run by systemd instead are included. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-48795 (Terrapin SSH protocol attack), affecting mod_sftp. -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 20 2023 Paul Howarth - 1.3.8b-1 - Update to 1.3.8b - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed (GH#1735) - Build system failed for specific module names (GH#1756) - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp (CVE-2023-48795, GH#1760) * Fri Dec 8 2023 Florian Weimer - 1.3.8a-2 - Additional C compatibility fix -------------------------------------------------------------------------------- References: [ 1 ] Bug #2254210 - CVE-2023-48795 ssh: Prefix truncation attack on Binary Packet Protocol (BPP) https://bugzilla.redhat.com/show_bug.cgi?id=2254210 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-153404713b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 30, 2023
Fedora
89
security advisoryupdatecriticalFedora 38 podman-tui 0.15.0 critical: ssh truncation attack fix
release v0.15.0 includes security fix for [CVE-2023-48795]. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-cb8c606fbb 2023-12-29 01:04:00.859658 -------------------------------------------------------------------------------- Name : podman-tui Product : Fedora 38 Version : 0.15.0 Release : 1.fc38 URL : https://github.com/containers/podman-tui Summary : Podman Terminal User Interface Description : podman-tui is a terminal user interface for Podman v4. podman-tui is using podman.socket service to communicate with podman environment and SSH to connect to remote podman machines. -------------------------------------------------------------------------------- Update Information: release v0.15.0 includes security fix for [CVE-2023-48795] -------------------------------------------------------------------------------- ChangeLog: * Wed Dec 20 2023 Navid Yaghoobi - 0.15.0-1 - release v0.15.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2255104 - CVE-2023-48795 podman-tui: ssh: Prefix truncation attack on Binary Packet Protocol (BPP) [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2255104 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-cb8c606fbb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 29, 2023
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!