Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2025-0025: openssl Security Advisory Updates
Timing side-channel in ECDSA signature computation. (CVE-2024-13176) References: - https://bugs.mageia.org/show_bug.cgi?id=33942 - https://openssl-library.org/…
Mageia 2024-0291: openssl Security Advisory Updates
Possible denial of service in X.509 name checks. (CVE-2024-6119) References: - https://bugs.mageia.org/show_bug.cgi?id=33520 - https://openssl-library.org/news…
Debian: DSA-5764-1: openssl Security Advisory Updates
David Benjamin reported a flaw in the X.509 name checks in OpenSSL, a Secure Sockets Layer toolkit, which may cause an application performing certificate name …
Mageia 2024-0247: openssl Security Advisory Updates
SSL_select_next_proto buffer overread. (CVE-2024-5535) References: - https://bugs.mageia.org/show_bug.cgi?id=33337 - https://openssl.org/news/secadv/20240627.t…
Ubuntu 6632-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Ubuntu 6622-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Gentoo: GLSA-202402-08: OpenSSL: Multiple Vulnerabilities
Multiple vulnerabilities have been found in OpenSSL, the worst of which could result in denial of service.
Debian LTS: DLA-3530-1: openssl security update
Two vunerabilities were discovered in openssl, a Secure Sockets Layer toolkit: CVE-2023-3446, CVE-2023-3817
Ubuntu 6188-1: OpenSSL vulnerability
OpenSSL could be made to consume resources and cause long delays if it processed certain input.
Mageia 2023-0195: openssl security update
Possible DoS translating ASN.1 object identifiers. (CVE-2023-2650) References: - https://bugs.mageia.org/show_bug.cgi?id=31981 - https://www.openssl.org/news/s…
Debian LTS: DLA-3449-1: openssl security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2023-0464
Multiple Easily Exploitable OpenSSL DoS Bugs Fixed
Multiple important denial of service (DoS) vulnerabilities (CVE-2023-0464 and CVE-2023-2650) have been discovered in the OpenSSL Secure Sockets Layer toolkit. …
RedHat: RHSA-2023-3408:01 Moderate: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
Debian: DSA-5417-1: openssl security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2023-0464
Ubuntu 6046-1: OpenSSL-ibmca vulnerabilities
OpenSSL-ibmca could be made to expose sensitive information.
Ubuntu 6039-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
RedHat: RHSA-2023-1437:01 Important: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as ha…
RedHat: RHSA-2023-1440:01 Important: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
SciLinux: SLSA-2023-1335-1 Important: openssl on SL7.x x86_64
openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, ac…
RedHat: RHSA-2023-1199:01 Moderate: openssl
An update for openssl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
Debian LTS: DLA-3325-1: openssl security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in incomplete encryption, side channel attacks, deni…
Serious Security: GnuTLS Follows OpenSSL, Fixes Timing Attack Bug
Last week, we wrote about a bunch of memory management bugs that were fixed in the latest security update of the popular OpenSSL encryption library. Along with…
Urgent OpenSSL Security Advisory: High-Severity Address Type Confusion Vuln Fixed
On February 7, 2023 OpenSSL released a security advisory regarding several security vulnerabilities that were recently discovered and fixed, including a high-s…
OpenSSL Fixes Multiple New Security Flaws with Latest Update
The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug in the open source encryption toolkit that could potent…