Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
RedHat: RHSA-2021-4424:03 Moderate: openssl security and bug fix upda
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. …
SciLinux: SLSA-2021-3798-1 Moderate: openssl on x86_
openssl: integer overflow in CipherUpdate (CVE-2021-23840) * openssl: NULL pointer dereference in X509_issuer_and_serial_hash() (CVE-2021-23841) For more detai…
RedHat: RHSA-2021-3798:01 Moderate: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. …
Debian LTS: DLA-2774-1: openssl1.0 security upda
An issue has been found in openssl1.0, a Secure Sockets Layer library. The issue is related to read buffer overruns while processing ASN.1 strings.
Debian LTS: DLA-2766-1: openssl security upda
An issue has been found in openssl, a Secure Sockets Layer toolkit. Ingo Schwarze reported a buffer overrun flaw when processing ASN.1 strings, which can resul…
Debian LTS: DLA-2761-1: openssl1.0 security upda
The legacy 1.0 version of OpenSSL, a cryptography library for secure communication, fails to validate alternate trust chains in some conditions. In particular …
3 years, 17 alphas, 2 betas, and over 7,500 commits later, OpenSSL version 3 is he
The OpenSSL team has released version 3.0 of its secure communications library after a lengthy gestation period. What have we learned during that time? Quite a…
Ubuntu 5051-4: OpenSSL regressi
USN-5051-2 introduced a regression in OpenSSL.
Ubuntu 5051-3: OpenSSL vulnerabili
OpenSSL could be made to crash or expose sensitive information if it received a specially crafted ASN.1 string.
Ubuntu 5051-2: OpenSSL vulnerabili
OpenSSL could be made to crash or expose sensitive information if it received a specially crafted ASN.1 string.
Ubuntu 5051-1: OpenSSL vulnerabiliti
Several security issues were fixed in OpenSSL.
Debian: DSA-4963-1: openssl security upda
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2021-3711
RedHat: RHSA-2021-1131:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2021-1024:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important.…
Serious Security: OpenSSL fixes two high-severity crypto bu
OpenSSL has patched two high-severity crypto bugs. Upgrade now!
OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities
The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service (DoS…
Debian: DSA-4875-1: openssl security upda
A NULL pointer dereference was found in the signature_algorithms processing in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service.
Ubuntu 4504-1: OpenSSL vulnerabiliti
Several security issues were fixed in OpenSSL.
Ubuntu 4376-2: OpenSSL vulnerabiliti
Several security issues were fixed in OpenSSL.
Ubuntu 4376-1: OpenSSL vulnerabiliti
Several security issues were fixed in OpenSSL.
ArchLinux: 202004-19: lib32-openssl: denial of servi
The package lib32-openssl before version 1.1.1.g-1 is vulnerable to denial of service.
Gentoo: GLSA-202004-10: OpenSSL: Multiple vulnerabiliti
Multiple vulnerabilities were found in OpenSSL, the worst of which could allow remote attackers to cause a Denial of Service condition.
ArchLinux: 202004-18: openssl: denial of servi
The package openssl before version 1.1.1.g-1 is vulnerable to denial of service.
Mageia 2020-0023: openssl security upda
Updated compat-openssl10 and openssl packages fix security vulnerability: There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponen…