Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
197

Debian: DLA-2895-1 Critical: Multiple Out-Of-Bounds Errors in qt4-x11

Multiple out-of-bounds error were discovered in qt4-x11. The highest threat from CVE-2021-3481 (at least) is to data confidentiality the application availability. . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-2895-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Utkarsh Gupta January 24, 2022 https://wiki.debian.org/LTS - ----------------------------------------------------------------------- Package : qt4-x11 Version : 4:4.8.7+dfsg-11+deb9u3 CVE ID : CVE-2021-3481 CVE-2021-45930 Debian Bug : 986798 1002991 Multiple out-of-bounds error were discovered in qt4-x11. The highest threat from CVE-2021-3481 (at least) is to data confidentiality the application availability. For Debian 9 stretch, these problems have been fixed in version 4:4.8.7+dfsg-11+deb9u3. We recommend that you upgrade your qt4-x11 packages. For the detailed security status of qt4-x11 please refer to its security tracker page at: Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Advisory DLA-2900-1 resolves memory corruption vulnerabilities in gcc-11, bolstering system integrity.. Debian LTS, qt4-x11, out-of-bounds errors, data confidentiality. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 24, 2022 Critical Debian LTS
197

Debian 9: DLA-2885-1 Critical Qtsvg Out-Of-Bounds Threat Repair

Multiple out-of-bounds error were discovered in qtsvg-opensource-src. The highest threat from CVE-2021-3481 (at least) is to data confidentiality the application availability. . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-2885-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Utkarsh Gupta January 17, 2022 https://wiki.debian.org/LTS - ----------------------------------------------------------------------- Package : qtsvg-opensource-src Version : 5.7.1~20161021-2.1+deb9u1 CVE ID : CVE-2021-3481 CVE-2021-45930 Debian Bug : 986798 1002991 Multiple out-of-bounds error were discovered in qtsvg-opensource-src. The highest threat from CVE-2021-3481 (at least) is to data confidentiality the application availability. For Debian 9 stretch, these problems have been fixed in version 5.7.1~20161021-2.1+deb9u1. We recommend that you upgrade your qtsvg-opensource-src packages. For the detailed security status of qtsvg-opensource-src please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/qtsvg-opensource-src Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Explore vulnerabilities and solutions concerning qtsvg-opensource-src in Debian LTS Advisory DLA-2885-1. Find out more today!. Debian LTS Advisory, qtsvg, out-of-bounds errors, security updates, data confidentiality. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 23, 2022 Critical Debian LTS
203

Mageia: 2020-0479 Critical Risk: Openjpeg Memory Corruption Vulnerability

There's a flaw in openjpeg in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability (CVE-2020-27841). . MGASA-2020-0478 - Updated openjpeg2 packages fix security vulnerabilities Publication date: 29 Dec 2020 URL: https://advisories.mageia.org/MGASA-2020-0478.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-27841, CVE-2020-27842, CVE-2020-27843, CVE-2020-27845 There's a flaw in openjpeg in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bounds read. The greatest impact from this flaw is to application availability (CVE-2020-27841). There's a flaw in openjpeg's t2 encoder. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest impact of this flaw is to application availability (CVE-2020-27842). A flaw was found in OpenJPEG. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. The highest threat from this vulnerability is system availability (CVE-2020-27843). There's a flaw in src/lib/openjp2/pi.c of openjpeg. If an attacker is able to provide untrusted input to openjpeg's conversion/encoding functionality, they could cause an out-of-bounds read. The highest impact of this flaw is to application availability (CVE-2020-27845). References: - https://bugs.mageia.org/show_bug.cgi?id=27903 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/THY4LKGUS3D4XE5YHKLMTPVLURQ7OV57/ - https://www.cve.org/CVERecord?id=CVE-2020-27841 - https://www.cve.org/CVERecord?id=CVE-2020-27842 - https://www.cve.org/CVERecord?id=CVE-2020-27843 - https://www.cve.org/CVERecord?id=CVE-2020-27845 SRPMS: - 7/core/openjpeg2-2.3.1-1.6.mga7 .MGASA-2020-0479 enhances python3-pycryptodome to rectify vulnerabilities affecting data integrity and confidentiality.. Openjpeg Security,Mageia Update,Out-Of-Bounds Fix,Application Availability,Software Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 29, 2020 Critical Mageia
203

Mageia 7 MGASA-2020-0463: Critical Jasper Out-Of-Bounds Write

There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability (CVE-2020-27828). . MGASA-2020-0463 - Updated jasper packages fix security vulnerability Publication date: 17 Dec 2020 URL: https://advisories.mageia.org/MGASA-2020-0463.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-27828 There's a flaw in jasper's jpc encoder in versions prior to 2.0.23. Crafted input provided to jasper by an attacker could cause an arbitrary out-of-bounds write. This could potentially affect data confidentiality, integrity, or application availability (CVE-2020-27828). References: - https://bugs.mageia.org/show_bug.cgi?id=27842 - https://github.com/jasper-software/jasper/releases/tag/version-2.0.23 - https://www.cve.org/CVERecord?id=CVE-2020-27828 SRPMS: - 7/core/jasper-2.0.23-1.mga7 . An issue in Jasper's encoder may jeopardize data reliability and accessibility on Mageia. Ensure you upgrade to protect your system.. Jasper Security Update,Mageia Security Advisory,Data Integrity Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 17, 2020 Critical Mageia
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here