Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3325-1: openssl security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in incomplete encryption, side channel attacks, deni…
Serious Security: GnuTLS Follows OpenSSL, Fixes Timing Attack Bug
Last week, we wrote about a bunch of memory management bugs that were fixed in the latest security update of the popular OpenSSL encryption library. Along with…
Urgent OpenSSL Security Advisory: High-Severity Address Type Confusion Vuln Fixed
On February 7, 2023 OpenSSL released a security advisory regarding several security vulnerabilities that were recently discovered and fixed, including a high-s…
OpenSSL Fixes Multiple New Security Flaws with Latest Update
The OpenSSL Project has released fixes to address several security flaws, including a high-severity bug in the open source encryption toolkit that could potent…
Ubuntu 5845-2: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Ubuntu 5845-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Ubuntu 5844-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
RedHat: RHSA-2022-7384:01 Critical: openssl-container security update
An update for openssl-container is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of …
Ubuntu 5710-1: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Incoming OpenSSL Critical Fix: Organizations, Users, Get Ready!
The OpenSSL Project team has announced that, on November 1, 2022, they will release OpenSSL version 3.0.7, which will fix a critical vulnerability in the popul…
Severe Remote Code Execution Vulnerability Riddled OpenSSL
The recent OpenSSL updates address two security bugs in the service, including a high-severity vulnerability…Severe Remote Code Execution Vulnerability Riddled…
Ubuntu 5488-2: OpenSSL vulnerability
OpenSSL could be made to crash or run programs when the c_rehash script is used.
Ubuntu 5502-1: OpenSSL vulnerability
OpenSSL could be made to expose sensitive information over the network.
Mageia 2022-0246: openssl security update
The c_rehash script allows command injection. (CVE-2022-2068) References: - https://bugs.mageia.org/show_bug.cgi?id=30573 - https://www.openssl.org/news/secadv…
Fedora 35: openssl 2022-c9c02865f6
Security fix for CVE-2022-1292 Upgrade to 1.1.1o, #2095817. See https://www.openssl.org/news/secadv/20220503.txt.
Fedora 36: openssl1.1 2022-b651cb69e6
Security fix for CVE-2022-1292 Upgrade to 1.1.1o, rhbz#2095817. See https://www.openssl.org/news/secadv/20220503.txt.
Ubuntu 5488-1: OpenSSL vulnerability
OpenSSL could be made to crash or run programs when the c_rehash script is used.
RedHat: RHSA-2022-4899:01 Important: compat-openssl11 security and bug fix
An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of I…
Ubuntu 5402-2: OpenSSL vulnerabilities
Several security issues were fixed in OpenSSL.
Mageia 2022-0173: openssl security upda
The c_rehash script allows command injection. (CVE-2022-1292) References: - https://bugs.mageia.org/show_bug.cgi?id=30369 - https://www.openssl.org/news/secadv…
Ubuntu 5402-1: OpenSSL vulnerabiliti
Several security issues were fixed in OpenSSL.
RedHat: RHSA-2022-1112:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as ha…
RedHat: RHSA-2022-1091:01 Important: openssl security upda
An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a sec…
SciLinux: SLSA-2022-1066-1 Important: openssl on SL7.x x86_
openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (CVE-2022-0778) For more details about the security issue(s), including the impact,…