Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Slackware: 2022-174-01: openssl Security Update
New openssl packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue.
Fedora 36: openssl1.1 2022-b651cb69e6
Security fix for CVE-2022-1292 Upgrade to 1.1.1o, rhbz#2095817. See https://www.openssl.org/news/secadv/20220503.txt.
Ubuntu 5488-1: OpenSSL vulnerability
OpenSSL could be made to crash or run programs when the c_rehash script is used.
RedHat: RHSA-2022-4899:01 Important: compat-openssl11 security and bug fix
An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of I…
Ubuntu 5402-2: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Debian: DSA-5139-1: openssl security upda
Elison Niven discovered that the c_rehash script included in OpenSSL did not sanitise shell meta characters which could result in the execution of arbitrary co…
Mageia 2022-0173: openssl security upda
The c_rehash script allows command injection. (CVE-2022-1292) References: - https://bugs.mageia.org/show_bug.cgi?id=30369 - https://www.openssl.org/news/secadv…
Slackware: 2022-124-02: openssl Security Upda
New openssl packages are available for Slackware 14.2, 15.0, and -current to fix security issues.
Ubuntu 5402-1: OpenSSL vulnerabiliti
Several security issues were fixed in OpenSSL.
QNAP warns severe OpenSSL bug affects most of its NAS devic
Network-attached storage (NAS) maker QNAP has warned that most of its NAS devices are impacted by a high severity OpenSSL bug disclosed two weeks ago .
RedHat: RHSA-2022-1112:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as ha…
RedHat: RHSA-2022-1091:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
SciLinux: SLSA-2022-1066-1 Important: openssl on SL7.x x86_
openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778) For more details about the security issue(s), including the impact,…
RedHat: RHSA-2022-1065:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important.…
RedHat: RHSA-2022-1066:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important.…
RedHat: RHSA-2022-1073:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a se…
Slackware: 2022-076-02: openssl Security Upda
New openssl packages are available for Slackware 14.2, 15.0, and -current to fix a security issue.
Debian LTS: DLA-2953-1: openssl1.0 security upda
Tavis Ormandy discovered that the BN_mod_sqrt() function of OpenSSL could be tricked into an infinite loop. This could result in denial of service via malforme…
Debian LTS: DLA-2952-1: openssl security upda
Tavis Ormandy discovered that the BN_mod_sqrt() function of OpenSSL could be tricked into an infinite loop. This could result in denial of service via malforme…
Ubuntu 5328-2: OpenSSL vulnerabili
OpenSSL could be made to stop responding if it opened a specially crafted certificate.
Ubuntu 5328-1: OpenSSL vulnerabili
OpenSSL could be made to stop responding if it opened a specially crafted certificate.
Debian: DSA-5103-1: openssl security upda
Tavis Ormandy discovered that the BN_mod_sqrt() function of OpenSSL could be tricked into an infinite loop. This could result in denial of service via malforme…
SciLinux: SLSA-2022-0064-1 Moderate: openssl on SL7.x x86_
openssl: Read buffer overruns processing ASN.1 strings (CVE-2021-3712) For more details about the security issue(s), including the impact, a CVSS score, acknow…
RedHat: RHSA-2021-5226:02 Moderate: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. …