Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
217

Oracle Linux 9 ELSA-2023-0304 Moderate: LibreOffice Weak Keys Issue

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-0304 https://linux.oracle.com/errata/ELSA-2023-0304.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: autocorr-af-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-bg-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ca-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-cs-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-da-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-de-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-dsb-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-el-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-en-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-es-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-fa-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-fi-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-fr-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ga-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-hr-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-hsb-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-hu-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-is-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-it-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ja-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ko-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-lb-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-lt-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-mn-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-nl-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-pl-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-pt-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ro-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ru-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-sk-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-sl-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-sr-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-sv-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-tr-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-vi-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-vro-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-zh-7.1.8.1-8.0.1.el9_1.noarch.rpm libreoffice-base-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-calc-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-core-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-data-7.1.8.1-8.0.1.el9_1.noarch.rpm libreoffice-draw-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-emailmerge-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-filters-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-gdb-debug-support-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-graphicfilter-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-gtk3-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-ar-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-bg-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-bn-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-ca-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-cs-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-da-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-de-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-dz-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-el-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-en-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-eo-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-es-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-et-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-eu-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-fi-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-fr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-gl-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-gu-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-he-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-hi-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-hr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-hu-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-id-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-it-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-ja-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-ko-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-lt-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-lv-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-nb-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-nl-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-nn-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-pl-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-pt-BR-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-pt-PT-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-ro-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-ru-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-si-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-sk-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-sl-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-sv-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-ta-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-tr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-uk-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-zh-Hans-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-help-zh-Hant-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-impress-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-af-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ar-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-as-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-bg-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-bn-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-br-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ca-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-cs-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-cy-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-da-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-de-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-dz-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-el-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-en-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-eo-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-es-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-et-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-eu-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-fa-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-fi-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-fr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-fy-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ga-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-gl-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-gu-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-he-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-hi-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-hr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-hu-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-id-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-it-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ja-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-kk-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-kn-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ko-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-lt-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-lv-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-mai-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ml-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-mr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-nb-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-nl-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-nn-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-nr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-nso-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-or-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-pa-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-pl-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-pt-BR-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-pt-PT-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ro-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ru-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-si-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-sk-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-sl-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-sr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ss-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-st-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-sv-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ta-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-te-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-th-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-tn-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-tr-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ts-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-uk-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-ve-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-xh-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-zh-Hans-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-zh-Hant-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-langpack-zu-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-math-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-ogltrans-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-opensymbol-fonts-7.1.8.1-8.0.1.el9_1.noarch.rpm libreoffice-pdfimport-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-pyuno-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-ure-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-ure-common-7.1.8.1-8.0.1.el9_1.noarch.rpm libreoffice-wiki-publisher-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-writer-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-x11-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-xsltfilter-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreofficekit-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-sdk-7.1.8.1-8.0.1.el9_1.x86_64.rpm libreoffice-sdk-doc-7.1.8.1-8.0.1.el9_1.x86_64.rpm aarch64: autocorr-af-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-bg-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ca-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-cs-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-da-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-de-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-dsb-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-el-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-en-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-es-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-fa-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-fi-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-fr-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ga-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-hr-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-hsb-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-hu-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-is-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-it-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ja-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ko-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-lb-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-lt-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-mn-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-nl-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-pl-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-pt-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ro-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-ru-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-sk-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-sl-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-sr-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-sv-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-tr-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-vi-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-vro-7.1.8.1-8.0.1.el9_1.noarch.rpm autocorr-zh-7.1.8.1-8.0.1.el9_1.noarch.rpm libreoffice-calc-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-core-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-data-7.1.8.1-8.0.1.el9_1.noarch.rpm libreoffice-graphicfilter-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-help-en-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-impress-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-langpack-en-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-ogltrans-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-opensymbol-fonts-7.1.8.1-8.0.1.el9_1.noarch.rpm libreoffice-pdfimport-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-pyuno-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-ure-7.1.8.1-8.0.1.el9_1.aarch64.rpm libreoffice-ure-common-7.1.8.1-8.0.1.el9_1.noarch.rpm libreoffice-writer-7.1.8.1-8.0.1.el9_1.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol9/SRPMS-updates//libreoffice-7.1.8.1-8.0.1.el9_1.src.rpm Related CVEs: CVE-2022-3140 CVE-2022-26305 CVE-2022-26306 CVE-2022-26307 Description of changes: [7.1.8.1-8.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor="Oracle America, Inc." - Added the --with-hamcrest option to configure. [1:7.1.8.1-8] - Resolves: rhbz#2134759 Untrusted Macros - Resolves: rhbz#2134757 Weak Master Keys - Resolves: rhbz#2134755 Static Initialization Vector - Resolves: rhbz#2134761 Macro URL arbitrary script execution _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Administrators of Oracle Linux are advised to implement ELSA-2023-0304 to addressvulnerabilities associated with inadequate key security and dubious macros. Additional information follows.. Oracle Linux Security, LibreOffice Update, ELSA-2023-0304. . LinuxSecurity.com Team

Calendar 2 Jan 24, 2023 Oracle
91

Gentoo GLSA 201206-23 Normal: PyCrypto Weak Key Generation Risk

PyCrypto generates weak ElGamal keys.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201206-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: PyCrypto: Weak key generation Date: June 24, 2012 Bugs: #417625 ID: 201206-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= PyCrypto generates weak ElGamal keys. Background ========= PyCrypto is the Python Cryptography Toolkit. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-python/pycrypto < 2.6 > = 2.6 Description ========== An error in the generate() function in ElGamal.py causes PyCrypto to generate weak ElGamal keys. Impact ===== A remote attacker might be able to derive private keys. Workaround ========= There is no known workaround at this time. Resolution ========= All PyCrypto users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-python/pycrypto-2.6" References ========= [ 1 ] CVE-2012-2417 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2417 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201206-23 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright2012 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . Gentoo GLSA 202309-15 highlights vulnerabilities in RSA implementation within OpenSSL, resulting in possible private key leaks. Immediate update recommended.. Gentoo Linux, PyCrypto Security, Key Management Update, Cryptography Threats. . LinuxSecurity.com Team

Calendar 2 Jun 24, 2012 Gentoo
172

Ubuntu 6.06 LTS USN-612-7 Critical: OpenSSH Key Security Advisory

USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems that may have been affected themselves. Original advisory details: . =========================================================== Ubuntu Security Notice USN-612-7 May 20, 2008 openssh update CVE-2008-0166 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: openssh-server 1:4.2p1-7ubuntu3.4 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems that may have been affected themselves. Original advisory details: A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledge of the system. This particularly affects the use of encryption keys in OpenSSH, OpenVPN and SSL certificates. Updated packages for Ubuntu 6.06 LTS: Source archives: Size/MD5: 182650 398d72f7b781e8e95fc087bf00fdd8d8 Size/MD5: 1003 9409a4fb78b08993a72b80b75c42fe35 Size/MD5: 928420 93295701e6bcd76fabd6a271654ed15c Architecture independent packages: Size/MD5: 1054 707ff475af54c989978b00383e5e5eb4 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 166396 64f92a79d3a23aaab66122a6f6296d05 Size/MD5: 655630 2356bca8d4236579fa5b747319a2afb6 Size/MD5: 237270 050a4bc996eceb1cd82171bae109da29 Size/MD5: 87316 f2289dde21d2c4a521c69e2a8b6d83bf Size/MD5: 183704 fae5bee4c7713fc89f26f1b829682e6a i386 architecture (x86 compatible Intel/AMD): Size/MD5: 141116 b35ffe9f7bb2b46a315c6afa39adb735 Size/MD5: 576684 8b7f2699886085c58544c1ae57de2533 Size/MD5: 207448 cfcf49b6dbf6c5b5bf6b2e207ec31767 Size/MD5: 86956 5ec0cb596226b1b13b48387f3874791c Size/MD5: 153746 d22536de2913597b80b518d19920e616 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 160082 b46a74f2d932afdd504b66ab8338a4a2 Size/MD5: 641064 f5a2eef8f2e15981c75da97d3b7483a5 Size/MD5: 228264 53ee26d4852f85388c4871212b4c60ca Size/MD5: 88590 6f2ab1c679612b45f29f635aeef27ef3 Size/MD5: 168906 d1c6dee5d716a7ab367d4737d17396f8 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 150316 8d74f69f08666fde4bcad1efec13fb00 Size/MD5: 584014 faa90e6f4211e484480a008ea7bbe082 Size/MD5: 210494 59eb147b73bcfc2bcc2dfe14216ad566 Size/MD5: 86968 1ad9475a33d64780765489cafd84731a Size/MD5: 163226 8d3e4af7465d8d4f1b39b510f6638754 . The recent OpenSSH upgrade for Ubuntu version 6.06 LTS tackles vulnerabilities related to OpenSSL, bolstering key security measures to guard against potential breaches.. OpenSSH Update, Key Management, Ubuntu Security, Encryption Issues. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 20, 2008 Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here