Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
198
security advisorycriticalimage processingArch Linux: ASA-201605-6 Critical Advisory: ImageMagick Arbitrary Code Exec
The package imagemagick before version 6.9.3.10-1 is vulnerable to arbitrary code execution. . Arch Linux Security Advisory ASA-201605-6 ======================================== Severity: Critical Date : 2016-05-05 CVE-ID : CVE-2016-3714 Package : imagemagick Type : arbitrary code execution Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package imagemagick before version 6.9.3.10-1 is vulnerable to arbitrary code execution. Resolution ========= Upgrade to 6.9.3.10-1. # pacman -Syu "imagemagick> =6.9.3.10-1" The problem has been fixed upstream in version 6.9.3.10. Workaround ========= To prevent these possible exploits, simply add to your policy.xml file. To mitigate the dangerous HTTPS delegate, you can also remove support for it by deleting it from the delegates.xml configuration file. Description ========== It was discovered that ImageMagick did not properly sanitize certain input before passing it to the delegate functionality. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an unsuspecting user using the ImageMagick utilities, would lead to arbitrary execution of shell commands with the privileges of the user running the application. Impact ===== A remote attacker is able to use a specially crafted image file that, when processed, is leading to arbitrary code execution. References ========= https://access.redhat.com/security/cve/CVE-2016-3714 https://bugs.archlinux.org/task/49203 ;t=29588 https://imagetragick.com/ . Arch Linux Security Advisory ASA-201605-6 warns users of a critical vulnerability in ImageMagick requiring immediate action to ensure system safety and integrity. imagemagick, arch Linux, code exec, security advisory. . Severity: Critical. LinuxSecurity.com Team
May 06, 2016
•Critical
ArchLinux
91
security advisorydenial of servicegentooGentoo: GLSA-201509-04 Normal: LibTasn1 Arbitrary Code Execution Threat
Multiple vulnerabilities have been found in libtasn1, the worst of which could lead to arbitrary code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201509-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: libtasn1: Multiple vulnerabilities Date: September 24, 2015 Bugs: #544922, #548252 ID: 201509-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in libtasn1, the worst of which could lead to arbitrary code execution. Background ========= libtasn1 is an ASN.1 library Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-libs/libtasn1 < 1.4.5 > = 1.4.5 Description ========== Multiple vulnerabilities have been discovered in libtasn1. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All libtasn1 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-libs/libtasn1-1.4.5" References ========= [ 1 ] CVE-2015-2806 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-2806 [ 2 ] CVE-2015-3622 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-3622 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201509-04 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Sep 24, 2015
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!