Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
197
security advisorysecurity issuebuffer overflowDebian 10: DLA-3805-1 critical: qtbase multiple threats
Several issues have been found in qtbase-opensource-src, a collection of several Qt modules/libraries. The issues are related to buffer overflows, infinite loops or application . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3805-1
Apr 30, 2024
•Critical
Debian LTS
100
security advisorysecurity fixcritical patchSUSE SLE Micro 5.4 Advisory 2023:3892-2 for Critical Stability Patch
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:. SUSE Container Update Advisory: suse/sle-micro/5.4/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2023:3892-1 Container Tags : suse/sle-micro/5.4/toolbox:12.1 , suse/sle-micro/5.4/toolbox:12.1-4.2.158 , suse/sle-micro/5.4/toolbox:latest Container Release : 4.2.158 Severity : moderate Type : security References : 1041742 1203760 1212422 1215979 1216091 1216129 CVE-2023-45322 ----------------------------------------------------------------- The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2023:4534-1 Released: Thu Nov 23 08:13:57 2023 Summary: Recommended update for libzypp, zypper Type: recommended Severity: moderate References: 1041742,1203760,1212422,1215979,1216091 This update for libzypp, zypper fixes the following issues: - Preliminary disable 'rpm --runposttrans' usage for chrooted systems (bsc#1216091) - Fix comment typo on zypp.conf (bsc#1215979) - Attempt to delay %transfiletrigger(postun|in) execution if rpm supports it (bsc#1041742) - Make sure the old target is deleted before a new one is created (bsc#1203760) - Return 104 also if info suggests near matches - Rephrase upgrade message for openSUSE Tumbleweed (bsc#1212422) - commit: Insert a headline to separate output of different rpm scripts (bsc#1041742) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:4537-1 Released: Thu Nov 23 09:34:08 2023 Summary: Security update for libxml2 Type: security Severity: moderate References: 1216129,CVE-2023-45322 This update for libxml2 fixes the following issues: - CVE-2023-45322: Fixed a use-after-free in xmlUnlinkNode() in tree.c (bsc#1216129). The followingpackage changes have been done: - libxml2-2-2.9.14-150400.5.25.1 updated - libzypp-17.31.22-150400.3.43.1 updated - zypper-1.14.66-150400.3.35.1 updated - container:sles15-image-15.0.0-27.14.122 updated . SUSE SLE Micro 5.4 Toolbox has received essential updates and critical fixes to enhance stability and performance for users and administrators. SUSE Container Updates, Toolbox Security, Security Patches. . LinuxSecurity.com Team
Nov 24, 2023
SuSE
89
security advisoryFedoradbusFedora 35: FEDORA-2022-7a963a79d1 Moderate Stability Issues in D-Bus Apps
Update to 1.12.24 * Fix CVE-2022-42010, CVE-2022-42011, CVE-2022-42012. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-7a963a79d1 2022-10-26 17:34:16.951766 --------------------------------------------------------------------------------Name : dbus Product : Fedora 35 Version : 1.12.24 Release : 1.fc35 URL : https://https:// Summary : D-BUS message bus Description : D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. --------------------------------------------------------------------------------Update Information: Update to 1.12.24 * Fix CVE-2022-42010, CVE-2022-42011, CVE-2022-42012 --------------------------------------------------------------------------------ChangeLog: * Tue Oct 11 2022 David King - 1:1.12.24-1 - Update to 1.12.24 --------------------------------------------------------------------------------References: [ 1 ] Bug #2133619 - CVE-2022-42010 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets [fedora-35] https://bugzilla.redhat.com/show_bug.cgi?id=2133619 [ 2 ] Bug #2133623 - CVE-2022-42011 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type [fedora-35] https://bugzilla.redhat.com/show_bug.cgi?id=2133623 [ 3 ] Bug #2133627 - CVE-2022-42012 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly [fedora-35] https://bugzilla.redhat.com/show_bug.cgi?id=2133627 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-7a963a79d1' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Oct 26, 2022
•Important
Fedora
89
security advisoryFedoralibpngFedora 9: 2009-2045 Critical Libpng Memory Management Vulnerability Alert
This release fixes a vulnerability in which some arrays of pointers are not initialized prior to using malloc to define the pointers. If the application runs out of memory while executing the allocation loop (which can be forced by malevolent input), libpng10 will jump to a cleanup process that attempts to free all of the pointers, including the undefined ones. This issue has been assigned CVE-2009-0040. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-2045 2009-02-24 17:21:33 --------------------------------------------------------------------------------Name : libpng10 Product : Fedora 9 Version : 1.0.43 Release : 1.fc9 URL : http://www.libpng.org/pub/png/libpng.html Summary : Old version of libpng, needed to run old binaries Description : The libpng10 package contains an old version of libpng, a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. This package is needed if you want to run binaries that were linked dynamically with libpng 1.0.x. --------------------------------------------------------------------------------Update Information: This release fixes a vulnerability in which some arrays of pointers are not initialized prior to using malloc to define the pointers. If the application runs out of memory while executing the allocation loop (which can be forced by malevolent input), libpng10 will jump to a cleanup process that attempts to free all of the pointers, including the undefined ones. This issue has been assigned CVE-2009-0040 --------------------------------------------------------------------------------ChangeLog: * Thu Feb 19 2009 Paul Howarth 1.0.43-1 - update to 1.0.43 (clear pointer arrays created using png_malloc()) * Fri Dec 19 2008 Paul Howarth 1.0.42-1 - update to 1.0.42 (various minor bugfixes and code cleanups) * Fri Oct 31 2008 Paul Howarth 1.0.41-1 - update to 1.0.41 (addresses#468990, memory leak after reading a malformed tEXt chunk) * Fri Sep 19 2008 Paul Howarth 1.0.40-1 - update to 1.0.40 * Thu Aug 21 2008 Paul Howarth 1.0.39-1 - update to 1.0.39 * Sun Aug 17 2008 Paul Howarth 1.0.38-1 - update to 1.0.38 - update soname patch to apply without fuzz * Fri May 9 2008 Paul Howarth 1.0.37-1 - update to 1.0.37 - autotools patch no longer needed - explicitly specify the library filename in %files as a consistency check * Wed Apr 30 2008 Paul Howarth 1.0.34-1 - update to 1.0.34 - update autotools patch * Wed Apr 30 2008 Paul Howarth 1.0.33-1 - update to 1.0.33 (CVE-2008-1382, #441839) - add patch to fix broken autotools build scripts --------------------------------------------------------------------------------References: [ 1 ] Bug #486355 - CVE-2009-0040 libpng arbitrary free() flaw https://bugzilla.redhat.com/show_bug.cgi?id=486355 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update libpng10' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Mar 09, 2009
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!