Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
197
security advisoryDebiandata exfiltrationDebian 11 bullseye DLA-3961-1 critical: webkit2gtk address bar spoofing
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-40866 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3961-1
Nov 22, 2024
•Critical
Debian LTS
203
security advisoryhigh severitymemory safetyMageia 9 MGASA-2023-0309 High Severity: Thunderbird Clickjack Issues
The updated packages fix security vulnerabilities: Queued up rendering could have allowed websites to clickjack. (CVE-2023-5721) . MGASA-2023-0309 - Updated thunderbird packages fix security vulnerabilities Publication date: 06 Nov 2023 URL: https://advisories.mageia.org/MGASA-2023-0309.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-5721, CVE-2023-5732, CVE-2023-5724, CVE-2023-5725, CVE-2023-5728, CVE-2023-5730 The updated packages fix security vulnerabilities: Queued up rendering could have allowed websites to clickjack. (CVE-2023-5721) Address bar spoofing via bidirectional characters. (CVE-2023-5732) Large WebGL draw could have led to a crash. (CVE-2023-5724) WebExtensions could open arbitrary URLs. (CVE-2023-5725) Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1. (CVE-2023-5730) References: - https://bugs.mageia.org/show_bug.cgi?id=32478 - https://www.thunderbird.net/en-US/thunderbird/115.4.1/releasenotes/ - https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/ - https://www.cve.org/CVERecord?id=CVE-2023-5721 - https://www.cve.org/CVERecord?id=CVE-2023-5732 - https://www.cve.org/CVERecord?id=CVE-2023-5724 - https://www.cve.org/CVERecord?id=CVE-2023-5725 - https://www.cve.org/CVERecord?id=CVE-2023-5728 - https://www.cve.org/CVERecord?id=CVE-2023-5730 SRPMS: - 9/core/thunderbird-115.4.1-1.mga9 - 9/core/thunderbird-l10n-115.4.1-1.mga9 . Mozilla has released critical updates for Thunderbird, addressing various security flaws such as memory corruption and clickjacking vulnerabilities.. Thunderbird Security Update, Mageia Software Patch, Clickjacking Fix. . LinuxSecurity.com Team
Nov 06, 2023
Mageia
203
security advisorythunderbirdmemory safetyMageia 8: MGASA-2022-0315 Moderate: Thunderbird Address Bar Spoofing
Address bar spoofing via XSLT error handling (CVE-2022-38472) Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) Memory safety bugs. (CVE-2022-38478) . MGASA-2022-0315 - Updated thunderbird packages fix security vulnerability Publication date: 29 Aug 2022 URL: https://advisories.mageia.org/MGASA-2022-0315.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-38472, CVE-2022-38473, CVE-2022-38478 Address bar spoofing via XSLT error handling (CVE-2022-38472) Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) Memory safety bugs. (CVE-2022-38478) References: - https://bugs.mageia.org/show_bug.cgi?id=30766 - https://www.mozilla.org/en-US/security/advisories/mfsa2022-37/ - https://access.redhat.com/errata/RHSA-2022:6165 - https://www.cve.org/CVERecord?id=CVE-2022-38472 - https://www.cve.org/CVERecord?id=CVE-2022-38473 - https://www.cve.org/CVERecord?id=CVE-2022-38478 SRPMS: - 8/core/thunderbird-91.13.0-1.mga8 - 8/core/thunderbird-l10n-91.13.0-1.mga8 . Mageia 2022-0315 introduces patches for Thunderbird addressing security flaws related to spoofing and memory safety concerns.. Thunderbird Update, Security Patch, Mageia Advisory. . Severity: Important. LinuxSecurity.com Team
Aug 29, 2022
•Important
Mageia
200
security advisorysecurity fixmemory safetyScientific Linux SL7: SLSA-2022-6179-1 Important Firefox Update
This update upgrades Firefox to version 91.13.0 ESR. * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and F [More...]. Synopsis: Important: firefox security update Advisory ID: SLSA-2022:6179-1 Issue Date: 2022-08-25 CVE Numbers: CVE-2022-38472 CVE-2022-38473 CVE-2022-38476 CVE-2022-38477 CVE-2022-38478 -- This update upgrades Firefox to version 91.13.0 ESR. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478) * Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE -- SL7 x86_64 firefox-91.13.0-1.el7_9.x86_64.rpm firefox-debuginfo-91.13.0-1.el7_9.x86_64.rpm firefox-91.13.0-1.el7_9.i686.rpm - Scientific Linux Development Team . Crucial Chrome security patch addressing various vulnerabilities such as URL deception and heap corruption errors.. Firefox Update, Scientific Linux Advisory, Mozilla Security Fixes, Address Bar Spoofing Issue, Memory Safety Issues. . Severity: Important. LinuxSecurity.com Team
Aug 25, 2022
•Important
Scientific Linux
98
security advisoryred hatimportantRed Hat: RHSA-2022-6176-01 Important: Firefox Security Update
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: firefox security update Advisory ID: RHSA-2022:6176-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:6176 Issue date: 2022-08-24 CVE Names: CVE-2022-38472 CVE-2022-38473 CVE-2022-38476 CVE-2022-38477 CVE-2022-38478 ==================================================================== 1. Summary: An update for firefox is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream EUS (v.8.4) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.13.0 ESR. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478) * Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476) For more details about the security issue(s),including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2120673 - CVE-2022-38472 Mozilla: Address bar spoofing via XSLT error handling 2120674 - CVE-2022-38473 Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions 2120678 - CVE-2022-38476 Mozilla: Data race and potential use-after-free in PK11_ChangePW 2120695 - CVE-2022-38477 Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 2120696 - CVE-2022-38478 Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 6. Package List: Red Hat Enterprise Linux AppStream EUS (v.8.4): Source: firefox-91.13.0-1.el8_4.src.rpm aarch64: firefox-91.13.0-1.el8_4.aarch64.rpm firefox-debuginfo-91.13.0-1.el8_4.aarch64.rpm firefox-debugsource-91.13.0-1.el8_4.aarch64.rpm ppc64le: firefox-91.13.0-1.el8_4.ppc64le.rpm firefox-debuginfo-91.13.0-1.el8_4.ppc64le.rpm firefox-debugsource-91.13.0-1.el8_4.ppc64le.rpm s390x: firefox-91.13.0-1.el8_4.s390x.rpm firefox-debuginfo-91.13.0-1.el8_4.s390x.rpm firefox-debugsource-91.13.0-1.el8_4.s390x.rpm x86_64: firefox-91.13.0-1.el8_4.x86_64.rpm firefox-debuginfo-91.13.0-1.el8_4.x86_64.rpm firefox-debugsource-91.13.0-1.el8_4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2022-38472 https://access.redhat.com/security/cve/CVE-2022-38473 https://access.redhat.com/security/cve/CVE-2022-38476 https://access.redhat.com/security/cve/CVE-2022-38477 https://access.redhat.com/security/cve/CVE-2022-38478 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYwa9qdzjgjWX9erEAQiMpw//cIoDqmld19+5rcBWMfkPztLrjNA5njNe L8X2N0/6JteczLtZu508HoirPjoYeTXFFA8PuZiuZcfkkaX0XFWKaV9sbhTsX0J8 nzlAN7FD/rZWcLuxYrlupzwnHq8T43NoAfkwyNQasH5C2upYoigKk0W4lVFRp+w7 SyfgS3Ik9TLQmkUfho+bP/Dd9HsardUwqBCy//ZxHDEJv5lXVZv0ZYZbVjAUjK3F xUqMppq9o9wkMFOfiGyzBEMhH5VmDTPgOLW5LVEwJlq4DiTBNjBFv6ftTwMOAcEl hCobnrO/pA07B6p2JSpHz0tr5AW6ZFBMyqyGX1Hfuzv0tMo5hrAOBo1iclBUGomG OervxcbOyqIcpd369Bb+bez/e8aeunZhJ2Al0qCQU0t+CDj3KyO8mmem7aItiD5Z o3Axcb/UwWl0zyDU87lv9AemrdLyQqC2Tak33ZfYtlqp6mFbzpu+RrtS+UzeDOe3 uFumUpyK3cIPTTDYAvYcustp8HT5e0OTS5s8Oh83Nw2u2Aifuu80ASXb27xvRxht +SGfp7brKSS+rYOTY8odI4kB2tCaMjWI4V4VmMl2HNBCe5KjKr+0vbpZ8nxf2hsE bzOOUQ1yIegBnko9BggDSt49jaGkhhrGpGdcbPKFZnGaUefNOw0E7cQbcNkDgvBQ ZXIRIfQeRj0=zXwY -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Aug 24, 2022
•Important
Red Hat
98
security advisoryRed HatcriticalRed Hat Enterprise Linux 9: RHSA-2022-6174-01 Critical Firefox Updates
An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: firefox security update Advisory ID: RHSA-2022:6174-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2022:6174 Issue date: 2022-08-24 CVE Names: CVE-2022-38472 CVE-2022-38473 CVE-2022-38476 CVE-2022-38477 CVE-2022-38478 ==================================================================== 1. Summary: An update for firefox is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - aarch64, ppc64le, s390x, x86_64 3. Description: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.13.0 ESR. Security Fix(es): * Mozilla: Address bar spoofing via XSLT error handling (CVE-2022-38472) * Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions (CVE-2022-38473) * Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 (CVE-2022-38477) * Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 (CVE-2022-38478) * Mozilla: Data race and potential use-after-free in PK11_ChangePW (CVE-2022-38476) For more details about the securityissue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the update, Firefox must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2120673 - CVE-2022-38472 Mozilla: Address bar spoofing via XSLT error handling 2120674 - CVE-2022-38473 Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions 2120678 - CVE-2022-38476 Mozilla: Data race and potential use-after-free in PK11_ChangePW 2120695 - CVE-2022-38477 Mozilla: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2 2120696 - CVE-2022-38478 Mozilla: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2, and Firefox ESR 91.13 6. Package List: Red Hat Enterprise Linux AppStream (v. 9): Source: firefox-91.13.0-1.el9_0.src.rpm aarch64: firefox-91.13.0-1.el9_0.aarch64.rpm firefox-debuginfo-91.13.0-1.el9_0.aarch64.rpm firefox-debugsource-91.13.0-1.el9_0.aarch64.rpm ppc64le: firefox-91.13.0-1.el9_0.ppc64le.rpm firefox-debuginfo-91.13.0-1.el9_0.ppc64le.rpm firefox-debugsource-91.13.0-1.el9_0.ppc64le.rpm s390x: firefox-91.13.0-1.el9_0.s390x.rpm firefox-debuginfo-91.13.0-1.el9_0.s390x.rpm firefox-debugsource-91.13.0-1.el9_0.s390x.rpm x86_64: firefox-91.13.0-1.el9_0.x86_64.rpm firefox-debuginfo-91.13.0-1.el9_0.x86_64.rpm firefox-debugsource-91.13.0-1.el9_0.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2022-38472 https://access.redhat.com/security/cve/CVE-2022-38473 https://access.redhat.com/security/cve/CVE-2022-38476 https://access.redhat.com/security/cve/CVE-2022-38477 https://access.redhat.com/security/cve/CVE-2022-38478 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYwa9m9zjgjWX9erEAQgJsA//edx8BOnBgkWkbuACxgkX9Bw8zvJwb9DG Svr2N/8jgxssaw95sYCYPi5JedCxLyCqriXktJJWMVq9Xv8YmYvIZn4BzAGIb0gi UMiAbbpEzA7APianNDSkC96JytLoNk7d/aESQZ1mxlLDcl8wefcOFDnOC+81fycJ 5NY502fvPdyCzjHxkAk3OBcbwDFQfJahuBxxu5D3TZU1pK18BzDv7elfesLXBlNl uxxBp2PJBe1EDH8EVWfD7P0yu5YgbpCU5c1EFevKeoV2WDzjEPnqEVdKVlQ9Xpwd f0QuHPxI3qHxDFxunINEnEbxZe9wF0Gn4tib7dflez7u2pGjc/fjoD4kdUT1NhYy KJeh60N9WhFb3TSmBPJDuhh6If1yuF6J93j+4JAmUgbOTiYl5dP+G9yZTHHEd+wd UlhIUrPExUjUJqyaZQpR2NWfqlK/CtJVVu5W57xWHLtEvNlzlZKOA/sGSqX7rSQ9 FejXimiFzsebNZduxGrHuVk41Nb7AJn9H/vqqa0TSwsJnMbyj1YDCyC/Qmi/m7rX ly6WW5EmYX9fFLMAzccUWhLOUDe0MdriIKIAedkGxTaiuEpTcMReNR0X6dAmJHzO BcouWftZcZcDUPonKUARInIL0Xtnm1U4GvHQd8qgNeCunwgCzNeMc+Dt72wvmZxJ SrDuhuAzezY=K4mh -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Aug 24, 2022
•Important
Red Hat
202
security advisorycross-site scriptingimportantopenSUSE: 2016:1983-1 Important: Chromium Heap Overflow Issues
An update that solves 8 vulnerabilities and has one errata An update that solves 8 vulnerabilities and has one errata An update that solves 8 vulnerabilities and has one errata is now available. is now available.. openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1983-1 Rating: important References: #992305 #992309 #992310 #992311 #992313 #992314 #992315 #992319 #992320 Cross-References: CVE-2016-5139 CVE-2016-5140 CVE-2016-5141 CVE-2016-5142 CVE-2016-5143 CVE-2016-5144 CVE-2016-5145 CVE-2016-5146 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has one errata is now available. Description: Chromium was updated to 52.0.2743.116 to fix the following security issues: (boo#992305) - CVE-2016-5141: Address bar spoofing (boo#992314) - CVE-2016-5142: Use-after-free in Blink (boo#992313) - CVE-2016-5139: Heap overflow in pdfium (boo#992311) - CVE-2016-5140: Heap overflow in pdfium (boo#992310) - CVE-2016-5145: Same origin bypass for images in Blink (boo#992320) - CVE-2016-5143: Parameter sanitization failure in DevTools (boo#992319) - CVE-2016-5144: Parameter sanitization failure in DevTools (boo#992315) - CVE-2016-5146: Various fixes from internal audits, fuzzing and other initiatives (boo#992309) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-950=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): chromedriver-52.0.2743.116-92.1 chromium-52.0.2743.116-92.1 chromium-desktop-gnome-52.0.2743.116-92.1 chromium-desktop-kde-52.0.2743.116-92.1 chromium-ffmpegsumo-52.0.2743.116-92.1 References: https://www.suse.com/security/cve/CVE-2016-5139.html https://www.suse.com/security/cve/CVE-2016-5140.html https://www.suse.com/security/cve/CVE-2016-5141.html https://www.suse.com/security/cve/CVE-2016-5142.html https://www.suse.com/security/cve/CVE-2016-5143.html https://www.suse.com/security/cve/CVE-2016-5144.html https://www.suse.com/security/cve/CVE-2016-5145.html https://www.suse.com/security/cve/CVE-2016-5146.html https://bugzilla.suse.com/992305 https://bugzilla.suse.com/992309 https://bugzilla.suse.com/992310 https://bugzilla.suse.com/992311 https://bugzilla.suse.com/992313 https://bugzilla.suse.com/992314 https://bugzilla.suse.com/992315 https://bugzilla.suse.com/992319 https://bugzilla.suse.com/992320 . This Fedora security update addresses several vulnerabilities in Firefox, enhancing overall security and performance.. openSUSE Chromium updates, important security patches, Linux advisories. . Severity: Important. LinuxSecurity.com Team
Aug 08, 2016
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!