Security 10941 Published by Philipp Esselbach 0

Various Linux distributions released security updates last week to address vulnerabilities in their packages. The roundup covers multiple versions of AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux. These updates resolve issues such as memory out-of-bounds reads, arbitrary code execution, cross-site scripting (XSS) attacks, remote code execution, denial-of-service, and other security vulnerabilities in packages like GNU tar, Ruby, Kernel, Mozilla Thunderbird, GIMP, Adminer, curl, ImageMagick, Chromium, and more. Users are advised to install these updates to ensure their systems remain secure and stable, with some distributions offering multiple versions of them to cover different release numbers.

Security 10941 Published by Philipp Esselbach 0

IPFire 2.29 has been released with Core Update 199, which brings improvements to network stability and speed. The update supports WiFi standards, including 6E, allowing for faster wireless connections and better performance with modern hardware. Additionally, IPFire now includes native support for LLDP and CDP, making it easier to see connected devices in complex networks, as well as security and stability updates for the kernel and other core components. Other features include improved Intrusion Prevention System (IPS) handling, updated OpenVPN settings, and fixes for proxy vulnerabilities and web UI bugs.

Security 10941 Published by Philipp Esselbach 0

The Open Web Application Security Project (OWASP) has released versions 4.22.0 and 3.3.8 of its Core Rule Set, which includes fixes for a serious security issue that allowed attackers to bypass security measures using different types of content. The update addresses CVE-2023-55182 and reduces false positives, allowing system admins to focus on real threats rather than harmless traffic or mistakes. Additionally, the update ensures compatibility with Rust's regex library and removes outdated code patterns and spelling variants, making maintaining the security rules easier in the long run.

Security 10941 Published by Philipp Esselbach 0

Here is the first Linux security roundup of this year with updates for multiple Linux distributions, including Debian GNU/Linux, Fedora Linux, Rocky Linux, Slackware Linux, and SUSE Linux. These updates address various security vulnerabilities such as denial of service, remote code execution, crashes when processing crafted files, and buffer overflows. Specific packages receiving updates include Kodi, Python-Django, OpenJPEG2, ImageMagick, MediaWiki, golang packages, Ruby 3, gnupg2, libpcap, and others. Users are recommended to update their systems with the latest security patches to ensure protection and stability against potential threats.

Security 10941 Published by Philipp Esselbach 0

Here is a roundup of this week's security updates released for AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, and SUSE Linux. The updates include patches for vulnerable packages such as binutils, curl, Chromium, PHP, PostgreSQL, and more, aiming to enhance the overall security of the systems by patching known issues. Red Hat has also issued updates to address vulnerabilities in the kernel, Git-LFS, webkit2gtk3, mod_md, and Grafana, while SUSE Linux received patches for duc, python311-tornado6, Mozilla Firefox, taglib, and MariaDB, among others.

Security 10941 Published by Philipp Esselbach 0

This week's roundup includes security updates from various Linux distributions to address vulnerabilities and ensure system security and stability. The updates cover multiple packages across different distributions, including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux. Specific issues addressed in the updates include identity takeover via duplicate UUID registration, denial of service, memory corruption, and arbitrary code execution in affected packages. The security patches aim to protect users from potential threats and ensure the smooth functioning of various applications on their respective operating systems.

Security 10941 Published by Philipp Esselbach 0

OpenSnitch 1.8.0 has been released, bringing significant changes, including a GUI overhaul built on PyQt6 instead of PyQt5. This update reflects the shift away from PyQt5 by many GNU/Linux distributions and aims to keep OpenSnitch modern going forward, although it may no longer be compatible with older distros like Linux Mint 21.2 or Ubuntu 22.04. The new version includes several substantial enhancements, such as streamlined firewall rule management, improved backend upgrades, and task automation features. 

Security 10941 Published by Philipp Esselbach 0

Several Linux distributions have received security updates over the past week to address various vulnerabilities in their packages. These updates aim to protect users from potential threats by fixing identified issues such as information disclosure, denial-of-service attacks, and arbitrary code execution. The affected distributions include AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux.

Security 10941 Published by Philipp Esselbach 0

Several major Linux distributions have released security updates over the past week to fix various vulnerabilities across their packages. The affected distributions include AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux, with multiple packages receiving patches to address issues such as remote code execution, denial of service, and information disclosure. These updates aim to protect users from potential threats by addressing known vulnerabilities in the affected software, with some updates also including bug fixes and enhancements to packages and images.

Security 10941 Published by Philipp Esselbach 0

The Open Web Application Security Project (OWASP) has released version 4.21.0 of its Core Rule Set (CRS), a widely used WAF rule set for ModSecurity that focuses on security enhancements and operational fixes. This update includes improved IPv6 scanning capabilities, such as XML scan and SSH scheme detection, making it more effective internationally. The CRS also gets some internal housekeeping with added unit tests to prevent overzealous triggering, fixed logic errors, and patched evasion tactics. For .NET site users, the updated documentation now includes guidance on disabling the Expect header, a crucial but easily overlooked step.

Security 10941 Published by Philipp Esselbach 0

Several Linux distributions have released security updates in the last week to address various vulnerabilities in their packages. The affected distributions include AlmaLinux, Debian GNU/Linux, Fedora Linux, Gentoo Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux. These updates patch vulnerabilities in key applications such as Podman, Firefox, Bind, Kernel, Erlang, Rails, and other essential components to improve the overall security and stability of each distribution.

Security 10941 Published by Philipp Esselbach 0

IPFire 2.29 - Core Update 199 is now available for testing, bringing significant enhancements to the platform's networking capabilities, including support for WiFi 7 and automatic setup for newer wireless capabilities. The update also includes native LLDP/CDP integration, allowing users to better understand their network layout, as well as security patches and stability fixes based on Linux 6.12.58. Other notable improvements include a refreshed Intrusion Prevention System using Suricata version 8.0.2, updated OpenVPN features, and improved system boot management with draceng.

Security 10941 Published by Philipp Esselbach 0

Several Linux distributions released security updates last week to address various vulnerabilities and patches for packages such as kernel, libssh, vim, and others. Distributions including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux have received these updates, with some affecting multiple versions of the operating system. The security issues addressed include arbitrary code execution, denial-of-service attacks, heap buffer over-reads, NULL pointer dereferences, and other types of vulnerabilities in software packages like Chromium, Firefox, Thunderbird, and more. These updates can be installed using package managers such as dnf for Fedora Linux or by applying a valid GPG key for some distributions.

Security 10941 Published by Philipp Esselbach 0

Multiple Linux distributions have released security updates over the past week to address vulnerabilities in various packages. Distributions such as AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux have all issued updates to patch issues in packages like kernels, web browsers, and libraries. These security updates aim to improve the overall security and stability of each distribution by addressing vulnerabilities that could lead to local privilege escalation, information disclosure, or code execution if left unpatched. Each distribution has released specific updates for its versions, with some also releasing critical updates to address significant security issues.

Security 10941 Published by Philipp Esselbach 0

Several major Linux distributions have released security updates over the past week, including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, SUSE Linux, and Ubuntu Linux. The updates address various vulnerabilities across multiple packages, such as .NET framework, WebKitGTK, ruby-rack, strongSwan, WordPress, GIMP, Rust libraries, Python applications, and more. Packages such as librepo, sendmail, kernel, NetworkManager, Samba, expat, squid, golang, redis, libssh, and others have fixed important or moderate severity bugs. These updates are critical to preserving the security and stability of Linux systems, particularly with the potential risks posed by vulnerabilities such as cache poisoning attacks and resource exhaustion.

Security 10941 Published by Philipp Esselbach 0

A new version of the OWASP CRS (Core Rule Set), 4.20.0, has been released, providing enhanced protection for web applications against various attacks. This update includes new features and detections, such as updated restricted file extensions and configuration files for popular e-commerce platforms like PrestaShop and Magento. Bug fixes also addressed several issues, including missing capture keywords and high-risk false positives. The changes aim to improve detection capabilities while minimizing false alerts in web application firewalls.

Security 10941 Published by Philipp Esselbach 0

Here is a roundup of recent security updates that have been released for several Linux distributions, including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux. These updates address vulnerabilities in various packages, such as libtiff, squid, kernel, Thunderbird, and others, to improve overall system security and protect against potential attacks. The affected distributions have released multiple security updates to resolve issues including CSV injection, XML XXE/XEE attacks, incorrect certificate validation, denial-of-service attacks, and more. 

Security 10941 Published by Philipp Esselbach 0

IPFire Core Update 198 has been released, featuring a substantial upgrade to its Intrusion Prevention System (IPS) powered by Suricata 8. This update brings enhanced performance, deeper inspection features, and increased reliability to IPFire's IPS, as well as improved reporting and logging capabilities, including real-time email notifications, scheduled PDF reports, and external logging. The update also includes significant advancements in the IPS itself, with faster startup times, more efficient memory handling, and expanded protocol support. 

Security 10941 Published by Philipp Esselbach 0

Multiple Linux distributions have released security updates over the past week, addressing vulnerabilities in various packages such as kernels, web browsers, and software libraries. The updates cover different Linux versions, including AlmaLinux 10 and 9, Debian GNU/Linux 9 to 13, Fedora 41, 42, and 43, Oracle Linux 7 to 10, Red Hat Enterprise Linux 8 to 10, Rocky Linux 8, Slackware Linux, and Ubuntu Linux. These vulnerabilities could lead to security issues such as Denial of Service (DoS), remote code execution, or other threats if not patched. The updates aim to provide improved security and stability for users of these Linux distributions and their associated products.

Security 10941 Published by Philipp Esselbach 0

Here is a roundup of last week's security updates for several Linux distributions, including AlmaLinux, Debian GNU/Linux, Fedora Linux, Oracle Linux, Red Hat Enterprise Linux, Rocky Linux, Slackware Linux, SUSE Linux, and Ubuntu Linux, which have released security updates to address vulnerabilities in various packages. The updates range from moderate to important severity and affect packages such as the kernel, webkit2gtk3, libssh, Firefox, OpenSSL, and others, resolving issues like integer overflow, use-after-free bugs, privilege escalation, denial of service, and remote code execution. Users are advised to apply these security updates to ensure the stability and security of their systems, with some distributions providing detailed severity ratings through the Common Vulnerability Scoring System (CVSS) base score.