Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
91

Gentoo: GLSA-202401-13 Impacts of Synapse Data Exposure On Security

Multiple vulnerabilites have been found in Synapse, the worst of which could result in information leaks.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202401-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: Synapse: Multiple Vulnerabilities Date: January 07, 2024 Bugs: #914765, #916609 ID: 202401-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilites have been found in Synapse, the worst of which could result in information leaks. Background ========== Synapse is a Matrix homeserver written in Python/Twisted. Affected packages ================= Package Vulnerable Unaffected -------------- ------------ ------------ net-im/synapse < 1.96.0 > = 1.96.0 Description =========== Multiple vulnerabilities have been discovered in Synapse. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All Synapse users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-im/synapse-1.96.0" References ========== [ 1 ] CVE-2023-41335 https://nvd.nist.gov/vuln/detail/CVE-2023-41335 [ 2 ] CVE-2023-42453 https://nvd.nist.gov/vuln/detail/CVE-2023-42453 [ 3 ] CVE-2023-43796 https://nvd.nist.gov/vuln/detail/CVE-2023-43796 [ 4 ] CVE-2023-45129 https://nvd.nist.gov/vuln/detail/CVE-2023-45129 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202401-12 Concerns? ========= Security is a primary focus ofGentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2024 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . Several weaknesses in Synapse may jeopardize your information. Take immediate steps to bolster security and defend your infrastructure against risks.. Synapse Software Threats, Gentoo Advisory, Information Leak Risk, Low Severity Issues, Software Patch Instructions. . Severity: Low. LinuxSecurity.com Team

Calendar 2 Jan 07, 2024 Low Gentoo
89

Fedora 29: FEDORA-2018-ab1234xyz Major: Synapse Vulnerabilities Identified

Update to latest Synapse release which fixes CVE-2018-12291 (0.31.1) and a second security bug in 0.31.2: https://github.com/matrix-org/synapse/releases/tag/v0.31.2 This update includes a new package which is a dependency introduced by synapse-0.31. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-6e759af8fb 2018-06-23 20:45:47.528690 --------------------------------------------------------------------------------Name : matrix-synapse Product : Fedora 28 Version : 0.31.2 Release : 1.fc28 URL : https://github.com/matrix-org/synapse Summary : A Matrix reference homeserver written in Python using Twisted Description : Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in the context of a coded base and let you run your own homeserver and generally help bootstrap the ecosystem. --------------------------------------------------------------------------------Update Information: Update to latest Synapse release which fixes CVE-2018-12291 (0.31.1) and a second security bug in 0.31.2: https://github.com/matrix-org/synapse/releases/tag/v0.31.2 This update includes a new package which is a dependency introduced by synapse-0.31 --------------------------------------------------------------------------------ChangeLog: * Thu Jun 14 2018 Jeremy Cline - 0.31.2-1 - Update to v0.31.2 - https://github.com/matrix-org/synapse/releases/tag/v0.31.2 * Wed Jun 13 2018 Jeremy Cline - 0.31.1-3 - Bring back the pin for pynacl * Wed Jun 13 2018 Jeremy Cline - 0.31.1-2 - Stop using Python dependency generator * Wed Jun 13 2018 Jeremy Cline - 0.31.1-1 - Update to v0.31.1 - Fix CVE-2018-12291 * Thu May 24 2018 Jeremy Cline - 0.29.1-1 - Update to the latestupstream release. - Use the Python dependency generator. * Tue May 1 2018 Jeremy Cline - 0.28.1-1 - Update to the latest upstream release. --------------------------------------------------------------------------------References: [ 1 ] Bug #1590102 - CVE-2018-12291 matrix-synapse: Missing event filtering in handlers/federation.py [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1590102 [ 2 ] Bug #1578181 - matrix-synapse-0.31.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=1578181 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-6e759af8fb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/R6OJWGSYGZYDEVDCIZH2RNIPI6N5IWPX/ . The latest update of matrix-synapse version 0.31.2 fixes two major security flaws. Users should follow the installation guide in the documentation for a secure upgrade. Matrix Synapse Update, Fedora Security Patch, Dependency Management. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jun 23, 2018 Important Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here