Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 1 articles for you...
100

SUSE: cJSON Important Memory Issue Fix CVE-2023-26819, CVE-2025-57052

* bsc#1241502 * bsc#1249112 Cross-References: * CVE-2023-26819 . # Security update for cJSON Announcement ID: SUSE-SU-2025:03520-1 Release Date: 2025-10-10T07:22:45Z Rating: important References: * bsc#1241502 * bsc#1249112 Cross-References: * CVE-2023-26819 * CVE-2025-57052 CVSS scores: * CVE-2023-26819 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2023-26819 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-26819 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-57052 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-57052 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-57052 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for cJSON fixes the following issues: * CVE-2023-26819: Allocate memory for the temporary buffer when paring numbers (bsc#1241502) * CVE-2025-57052: Fix the incorrect check in decode_array_index_from_pointer (bsc#1249112) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2025-3520=1 ## Package List: * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * libcjson1-debuginfo-1.7.19-150700.3.3.1 * cJSON-debugsource-1.7.19-150700.3.3.1 * libcjson1-1.7.19-150700.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2023-26819.html *https://www.suse.com/security/cve/CVE-2025-57052.html * https://bugzilla.suse.com/show_bug.cgi?id=1241502 * https://bugzilla.suse.com/show_bug.cgi?id=1249112 . SUSE's security update for cJSON addresses two critical issues, enhancing stability and safety for enterprise users on SP7.. cJSON security patch, SUSE Linux advisory, important vulnerability fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 10, 2025 Important SuSE
203

Mageia 9: MGASA-2025-0017 critical: dcmtk DICOM improper index flaws

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability, CVE-2024-47796. An improper array index validation vulnerability exists in the . MGASA-2025-0017 - Updated dcmtk packages fix security vulnerabilities Publication date: 20 Jan 2025 URL: https://advisories.mageia.org/MGASA-2025-0017.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-47796, CVE-2024-52333 An improper array index validation vulnerability exists in the nowindow functionality of OFFIS. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability, CVE-2024-47796. An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability, CVE-2024-52333. References: - https://bugs.mageia.org/show_bug.cgi?id=33930 - - https://www.cve.org/CVERecord?id=CVE-2024-47796 - https://www.cve.org/CVERecord?id=CVE-2024-52333 SRPMS: - 9/core/dcmtk-3.6.7-4.3.mga9 . The latest Mageia dcmtk updates tackle significant array boundary flaws. Discover further details on the modifications and resolutions.. Mageia, dcmtk, array index vulnerability, security patch, DICOM security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 20, 2025 Critical Mageia
100

SUSE: 2024:2380-1 Moderate: ppp Array Index Issue Fixed

* bsc#1218251 Cross-References: * CVE-2022-4603 . # Security update for ppp Announcement ID: SUSE-SU-2024:2380-1 Rating: moderate References: * bsc#1218251 Cross-References: * CVE-2022-4603 CVSS scores: * CVE-2022-4603 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2022-4603 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.5 An update that solves one vulnerability can now be installed. ## Description: This update for ppp fixes the following issues: * CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-2380=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (ppc64le) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 ## References: * https://www.suse.com/security/cve/CVE-2022-4603.html * https://bugzilla.suse.com/show_bug.cgi?id=1218251 . SUSE Linux addresses a moderate security risk related to PPP addresses. Users should apply the patch promptly to prevent exploitation by following detailed instructions. SUSE Linux, ppp security, moderate advisory, patch update, security risk. . LinuxSecurity.com Team

Calendar 2 Jul 09, 2024 SuSE
202

openSUSE: 2023:4965-1 Moderate: ppp Array Index Vulnerability Alert

This update for ppp fixes the following issues: CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251).. # Security update for ppp Announcement ID: SUSE-SU-2023:4965-1 Rating: moderate References: * bsc#1218251 Cross-References: * CVE-2022-4603 CVSS scores: * CVE-2022-4603 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2022-4603 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ppp fixes the following issues: * CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4965=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4965=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4965=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4965=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2023-4965=1 * openSUSE Leap Micro 5.3 zypper in -t patch openSUSE-Leap-Micro-5.3-2023-4965=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4965=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4965=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4965=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4965=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4965=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap Micro 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 *ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap 15.4 (noarch) * ppp-modem-2.4.7-150000.5.13.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap 15.5 (noarch) * ppp-modem-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 ## References: * https://www.suse.com/security/cve/CVE-2022-4603.html * https://bugzilla.suse.com/show_bug.cgi?id=1218251 . Fortify your infrastructure with the recent sdk patch that resolves buffer overflow vulnerabilities and improves performance on all devices.. openSUSE updates, ppp security, array index fix, system vulnerabilities. . LinuxSecurity.com Team

Calendar 2 Dec 22, 2023 OpenSUSE
100

SUSE: 2023:4966-1 moderate alert for ppp array index validation issue

* bsc#1218251 Cross-References: * CVE-2022-4603 . # Security update for ppp Announcement ID: SUSE-SU-2023:4965-1 Rating: moderate References: * bsc#1218251 Cross-References: * CVE-2022-4603 CVSS scores: * CVE-2022-4603 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2022-4603 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP5 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * openSUSE Leap Micro 5.3 * openSUSE Leap Micro 5.4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ppp fixes the following issues: * CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4965=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2023-4965=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2023-4965=1 * Desktop Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-4965=1 * SUSE Linux Enterprise Real Time 15 SP4 zypper in -t patch SUSE-SLE-Product-RT-15-SP4-2023-4965=1 * openSUSE Leap Micro 5.3 zypperin -t patch openSUSE-Leap-Micro-5.3-2023-4965=1 * openSUSE Leap Micro 5.4 zypper in -t patch openSUSE-Leap-Micro-5.4-2023-4965=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4965=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4965=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4965=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2023-4965=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * Desktop Applications Module 15-SP5 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Real Time 15 SP4 (x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap Micro 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * openSUSE Leap Micro 5.4 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap 15.4 (noarch) *ppp-modem-2.4.7-150000.5.13.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * ppp-devel-2.4.7-150000.5.13.1 * openSUSE Leap 15.5 (noarch) * ppp-modem-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * ppp-debuginfo-2.4.7-150000.5.13.1 * ppp-debugsource-2.4.7-150000.5.13.1 * ppp-2.4.7-150000.5.13.1 ## References: * https://www.suse.com/security/cve/CVE-2022-4603.html * https://bugzilla.suse.com/show_bug.cgi?id=1218251 . Crucial update issued for curl addressing the CVE-2023-1234 flaw, enhancing safeguard measures in Fedora environments.. SUSE Update, ppp Patch, Linux Patch, SUSE Security Alert, OpenSUSE Update. . LinuxSecurity.com Team

Calendar 2 Dec 22, 2023 SuSE
197

Debian 10: DLA-3526-1 Moderate: LibreOffice Array Index Issues

LibreOffice an office productivity suite was affected by multiple vulnerabilities. CVE-2022-3874 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3526-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Bastien Roucariès August 13, 2023 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : libreoffice Version : 1:6.1.5-3+deb10u10 CVE ID : CVE-2022-3874 CVE-2023-0950 CVE-2023-2255 Debian Bug : LibreOffice an office productivity suite was affected by multiple vulnerabilities. CVE-2022-3874 Libreoffice may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory. CVE-2023-0950 Improper Validation of Array Index vulnerability in the spreadsheet component allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed. CVE-2023-2255 Improper access control in editor components of LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. For Debian 10 buster, these problems have been fixed in version 1:6.1.5-3+deb10u10. We recommend that you upgrade your libreofficepackages. For the detailed security status of libreoffice please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libreoffice Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . The Debian LTS team released Advisory DLA-3526-1 for LibreOffice, fixing multiple security vulnerabilities. Users should update promptly to ensure protection.. Debian, LibreOffice, Security Update, Office Suite, Vulnerability Fix. . LinuxSecurity.com Team

Calendar 2 Aug 13, 2023 Debian LTS
203

Mageia 8: MGASA-2023-0194 Critical: LibreOffice Array Issues

Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less . MGASA-2023-0194 - Updated libreoffice packages fix security vulnerability Publication date: 08 Jun 2023 URL: https://advisories.mageia.org/MGASA-2023-0194.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-0950, CVE-2023-2255 Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed. (CVE-2023-0950) Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. (CVE-2023-2255) References: - https://bugs.mageia.org/show_bug.cgi?id=31964 - - - https://www.cve.org/CVERecord?id=CVE-2023-0950 - https://www.cve.org/CVERecord?id=CVE-2023-2255 SRPMS: - 8/core/libreoffice-7.4.5.1-1.1.mga8 . Recent updates for LibreOffice have resolved critical security flaws in Mageia. Learn more about the enhancements introduced on June 8, 2023.. LibreOffice Update,Mageia Security,Array Index Issues,Access Control Flaws. .Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 08, 2023 Critical Mageia
172

Ubuntu 22.04 LTS: USN-6144-1 Moderate: LibreOffice Array Index Attack

Several security issues were fixed in LibreOffice.. =========================================================================Ubuntu Security Notice USN-6144-1 June 07, 2023 libreoffice vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in LibreOffice. Software Description: - libreoffice: Office productivity suite Details: It was discovered that LibreOffice did not properly validate the number of parameters passed to the formula interpreter, leading to an array index underflow attack. If a user were tricked into opening a specially crafted spreadsheet file, an attacker could possibly use this issue to execute arbitrary code. (CVE-2023-0950) Amel Bouziane-Leblond discovered that LibreOffice did not prompt the user before loading the host document inside an IFrame. If a user were tricked into opening a specially crafted input file, an attacker could possibly use this issue to cause information disclosure or execute arbitrary code. (CVE-2023-2255) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: libreoffice 1:7.3.7-0ubuntu0.22.04.3 Ubuntu 20.04 LTS: libreoffice 1:6.4.7-0ubuntu0.20.04.8 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6144-1 CVE-2023-0950, CVE-2023-2255 Package Information: https://launchpad.net/ubuntu/+source/libreoffice/1:7.3.7-0ubuntu0.22.04.3 https://launchpad.net/ubuntu/+source/libreoffice/1:6.4.7-0ubuntu0.20.04.8 . Multiple security issues were fixed in LibreOffice for Ubuntu 22.04 and 20.04 LTS addressing important vulnerabilities.. LibreOffice Security, Ubuntu Updates, LibreOffice Issues, Array Index Attack. . LinuxSecurity.com Team

Calendar 2 Jun 07, 2023 Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here