Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 9: perl-Crypt-OpenSSL-RSA Critical Side-Channel Attack CVE-2024-2467
MGASA-2025-0287 - Updated perl-Crypt-OpenSSL-RSA packages fix security vulnerability
Mageia: OpenSSL Important Out-of-Bounds Flaw MGASA-2025-0244 CVE-2025-9230
MGASA-2025-0244 - Updated openssl packages fix a security vulnerability
OpenSSL Flaws: Patch Status for CVE-2025-9230, 9231, 9232 in Linux
Three new OpenSSL flaws, CVE-2025-9230, 9231, and 9232, were patched upstream this week. They aren't another Heartbleed, but they still matter. Each one can op…
Debian LTS: DLA-4049-1: rust-openssl Security Advisory Updates
A vulnerability has been discovered in rust-openssl, a set of OpenSSL bindings for the Rust programming language. In affected versions ssl::select_next_proto c…
Mageia 2025-0025: openssl Security Advisory Updates
Timing side-channel in ECDSA signature computation. (CVE-2024-13176) References: - https://bugs.mageia.org/show_bug.cgi?id=33942 - https://openssl-library.org/…
Mageia 2024-0291: openssl Security Advisory Updates
Possible denial of service in X.509 name checks. (CVE-2024-6119) References: - https://bugs.mageia.org/show_bug.cgi?id=33520 - https://openssl-library.org/news…
Debian: DSA-5764-1: openssl Security Advisory Updates
David Benjamin reported a flaw in the X.509 name checks in OpenSSL, a Secure Sockets Layer toolkit, which may cause an application performing certificate name …
Mageia 2024-0247: openssl Security Advisory Updates
SSL_select_next_proto buffer overread. (CVE-2024-5535) References: - https://bugs.mageia.org/show_bug.cgi?id=33337 - https://openssl.org/news/secadv/20240627.t…
Ubuntu 6632-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Ubuntu 6622-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Gentoo: GLSA-202402-08: OpenSSL: Multiple Vulnerabilities
Multiple vulnerabilities have been found in OpenSSL, the worst of which could result in denial of service.
Debian LTS: DLA-3530-1: openssl security update
Two vunerabilities were discovered in openssl, a Secure Sockets Layer toolkit: CVE-2023-3446, CVE-2023-3817
Ubuntu 6188-1: OpenSSL vulnerability
OpenSSL could be made to consume resources and cause long delays if it processed certain input.
Mageia 2023-0195: openssl security update
Possible DoS translating ASN.1 object identifiers. (CVE-2023-2650) References: - https://bugs.mageia.org/show_bug.cgi?id=31981 - https://www.openssl.org/news/s…
Debian LTS: DLA-3449-1: openssl security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2023-0464
Multiple Easily Exploitable OpenSSL DoS Bugs Fixed
Multiple important denial of service (DoS) vulnerabilities (CVE-2023-0464 and CVE-2023-2650) have been discovered in the OpenSSL Secure Sockets Layer toolkit. …
RedHat: RHSA-2023-3408:01 Moderate: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
Debian: DSA-5417-1: openssl security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit. CVE-2023-0464
Ubuntu 6046-1: OpenSSL-ibmca vulnerabilities
OpenSSL-ibmca could be made to expose sensitive information.
Ubuntu 6039-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
RedHat: RHSA-2023-1437:01 Important: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as ha…
RedHat: RHSA-2023-1440:01 Important: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
SciLinux: SLSA-2023-1335-1 Important: openssl on SL7.x x86_64
openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, ac…
RedHat: RHSA-2023-1199:01 Moderate: openssl
An update for openssl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a sec…