Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Ubuntu 6039-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
RedHat: RHSA-2023-1437:01 Important: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as ha…
RedHat: RHSA-2023-1440:01 Important: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
SciLinux: SLSA-2023-1335-1 Important: openssl on SL7.x x86_64
openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, ac…
RedHat: RHSA-2023-1199:01 Moderate: openssl
An update for openssl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
What Is OpenSSL?
Secure Sockets Layer (SSL) is an internet security protocol. It establishes encrypted connections between computers on a network, such as the internet. The Ope…
Debian LTS: DLA-3325-1: openssl security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in incomplete encryption, side channel attacks, deni…
Serious Security: GnuTLS Follows OpenSSL, Fixes Timing Attack Bug
Last week, we wrote about a bunch of memory management bugs that were fixed in the latest security update of the popular OpenSSL encryption library. Along with…
Urgent OpenSSL Security Advisory: High-Severity Address Type Confusion Vuln Fixed
On February 7, 2023 OpenSSL released a security advisory regarding several security vulnerabilities that were recently discovered and fixed, including a high-s…
OpenSSL Fixes Multiple New Security Flaws with Latest Update
The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug in the open source encryption toolkit that could potent…
Ubuntu 5845-2: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Ubuntu 5845-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Ubuntu 5844-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
NixOS 22.11 Raccoon Released with GNOME 43, KDE Plasma 5.26, and OpenSSL 3
The NixOS 22.11 release also comes with OpenSSL 3, OpenSSH 9.1, PHP 8.1, Perl 5.36, and Python 3.10 by default, support for Linode cloud images, native compila…
RedHat: RHSA-2022-7384:01 Critical: openssl-container security update
An update for openssl-container is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of …
Ubuntu 5710-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Incoming OpenSSL Critical Fix: Organizations, Users, Get Ready!
The OpenSSL Project team has announced that, on November 1, 2022, they will release OpenSSL version 3.0.7, which will fix a critical vulnerability in the popul…
Severe Remote Code Execution Vulnerability Riddled OpenSSL
The recent OpenSSL updates address two security bugs in the service, including a high-severity vulnerability…Severe Remote Code Execution Vulnerability Riddled…
Ubuntu 5488-2: OpenSSL vulnerability
OpenSSL could be made to crash or run programs when the c_rehash script is used.
Ubuntu 5502-1: OpenSSL vulnerability
OpenSSL could be made to expose sensitive information over the network.
Mageia 2022-0246: openssl security update
The c_rehash script allows command injection. (CVE-2022-2068) References: - https://bugs.mageia.org/show_bug.cgi?id=30573 - https://www.openssl.org/news/secadv…
Fedora 35: openssl 2022-c9c02865f6
Security fix for CVE-2022-1292 Upgrade to 1.1.1o, #2095817. See https://www.openssl.org/news/secadv/20220503.txt.
Slackware: 2022-179-03: Slackware 14.2 openssl Security Update
New openssl packages are available for Slackware 14.2 to fix a security issue.
Debian: DSA-5169-1: openssl security update
It was discovered that the c_rehash script included in OpenSSL did not sanitise shell meta characters which could result in the execution of arbitrary commands.