Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
89
security advisoryupdateFedoraFedora 38: FEDORA-2023-abc123xyz moderate: webkitgtk stability improvements
* Bump Safari version in user agent header. * Fix blob URL regression that broke many websites. * Fix several crashes and rendering issues. * Fix CVE-2023-41983 and CVE-2023-42852. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-11aaf99627 2023-11-26 03:04:45.599082 -------------------------------------------------------------------------------- Name : webkitgtk Product : Fedora 38 Version : 2.42.2 Release : 1.fc38 URL : https://www.webkitgtk.org/ Summary : GTK web content engine library Description : WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. -------------------------------------------------------------------------------- Update Information: * Bump Safari version in user agent header. * Fix blob URL regression that broke many websites. * Fix several crashes and rendering issues. * Fix CVE-2023-41983 and CVE-2023-42852 -------------------------------------------------------------------------------- ChangeLog: * Fri Nov 10 2023 Michael Catanzaro - 2.42.2-1 - Update to 2.42.2 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-11aaf99627' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Nov 26, 2023
•Important
Fedora
202
security advisorymemory leakSUSEopenSUSE 15.4: SUSE-SU-2023:0343-1 Important: Wireshark Crash Fixes
An update that solves 7 vulnerabilities and has one errata is now available.. SUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: SUSE-SU-2023:0343-1 Rating: important References: #1206189 #1207447 #1207663 #1207664 #1207665 #1207667 #1207668 #1207669 Cross-References: CVE-2022-4345 CVE-2023-0411 CVE-2023-0412 CVE-2023-0413 CVE-2023-0415 CVE-2023-0416 CVE-2023-0417 CVSS scores: CVE-2022-4345 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2022-4345 (SUSE): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2023-0411 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2023-0411 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-0412 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2023-0412 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-0413 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2023-0413 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-0415 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2023-0415 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-0416 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-0416 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-0417 (NVD) : 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L CVE-2023-0417 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Enterprise Storage7.1 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Basesystem 15-SP4 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP3 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3-LTSS SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has one errata is now available. Description: This update for wireshark fixes the following issues: - Updated to version 3.6.11 (bsc#1207447): - CVE-2023-0417: Fixed a memory leak in the NFS dissector (bsc#1207669). - CVE-2023-0413: Fixed a crash in the dissection engine (bsc#1207665). - CVE-2023-0416: Fixed a crash in the GNW dissector (bsc#1207668). -CVE-2023-0415: Fixed a crash in the iSCSI dissector (bsc#1207667). - CVE-2023-0411: Fixed several issues where an excessive CPU consumption could be triggered in multiple dissectors (bsc#1207663). - CVE-2023-0412: Fixed a crash in the TIPC dissector (bsc#1207664). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2023-343=1 - SUSE Manager Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-343=1 - SUSE Manager Retail Branch Server 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-343=1 - SUSE Manager Proxy 4.2: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-343=1 - SUSE Linux Enterprise Server for SAP 15-SP3: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-343=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-343=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-343=1 - SUSE Linux Enterprise Server 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-343=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-343=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-343=1 - SUSE Linux Enterprise Realtime Extension 15-SP3: zypper in -t patch SUSE-SLE-Product-RT-15-SP3-2023-343=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-343=1 - SUSE Linux Enterprise Module for Basesystem 15-SP4: zypper in -t patchSUSE-SLE-Module-Basesystem-15-SP4-2023-343=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-343=1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-343=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-343=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-343=1 - SUSE Enterprise Storage 7.1: zypper in -t patch SUSE-Storage-7.1-2023-343=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2023-343=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2023-343=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Manager Server 4.2 (ppc64le s390x x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 - SUSE Manager Retail Branch Server 4.2 (x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 - SUSE Manager Proxy 4.2 (x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Server for SAP 15-SP3 (ppc64le x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Server 15-SP3-LTSS (aarch64 ppc64le s390x x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Realtime Extension 15-SP3 (x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (aarch64 ppc64le s390x x86_64): wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise Module for Basesystem 15-SP4 (aarch64 ppc64le s390x x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-LTSS (aarch64 x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise High Performance Computing 15-SP3-ESPOS (aarch64 x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS(aarch64 x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Enterprise Storage 7.1 (aarch64 x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 - SUSE CaaS Platform 4.0 (x86_64): libwireshark15-3.6.11-150000.3.83.1 libwireshark15-debuginfo-3.6.11-150000.3.83.1 libwiretap12-3.6.11-150000.3.83.1 libwiretap12-debuginfo-3.6.11-150000.3.83.1 libwsutil13-3.6.11-150000.3.83.1 libwsutil13-debuginfo-3.6.11-150000.3.83.1 wireshark-3.6.11-150000.3.83.1 wireshark-debuginfo-3.6.11-150000.3.83.1 wireshark-debugsource-3.6.11-150000.3.83.1 wireshark-devel-3.6.11-150000.3.83.1 wireshark-ui-qt-3.6.11-150000.3.83.1 wireshark-ui-qt-debuginfo-3.6.11-150000.3.83.1 References: https://www.suse.com/security/cve/CVE-2022-4345.html https://www.suse.com/security/cve/CVE-2023-0411.html https://www.suse.com/security/cve/CVE-2023-0412.html https://www.suse.com/security/cve/CVE-2023-0413.html https://www.suse.com/security/cve/CVE-2023-0415.html https://www.suse.com/security/cve/CVE-2023-0416.html https://www.suse.com/security/cve/CVE-2023-0417.html https://bugzilla.suse.com/1206189 https://bugzilla.suse.com/1207447 https://bugzilla.suse.com/1207663 https://bugzilla.suse.com/1207664 https://bugzilla.suse.com/1207665 https://bugzilla.suse.com/1207667 https://bugzilla.suse.com/1207668 https://bugzilla.suse.com/1207669 . Wireshark has released an update addressing 7 significant vulnerabilities across multiple SUSE platforms, complete with guidance for applying patches.. Wireshark Update, SUSE Advisory, Security Patch, Important Fixes. . Severity: Important. LinuxSecurity.com Team
Feb 10, 2023
•Important
OpenSUSE
100
security advisorykernel updatevulnerabilitySUSE: 2022:4033-1 Important: Kernel Update Addresses P2P Crashes
An update that fixes four vulnerabilities is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP3) ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:4033-1 Rating: important References: #1202087 #1203613 #1204170 #1204289 Cross-References: CVE-2021-33655 CVE-2022-2588 CVE-2022-42703 CVE-2022-42722 CVSS scores: CVE-2021-33655 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2021-33655 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-2588 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-42703 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-42703 (SUSE): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2022-42722 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2022-42722 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Module for Live Patching 15-SP3 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for the Linux Kernel 5.3.18-150300_59_87 fixes several issues. The following security issues were fixed: - CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096). - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168). -CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Live Patching 15-SP3: zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2022-4033=1 Package List: - SUSE Linux Enterprise Module for Live Patching 15-SP3 (ppc64le s390x x86_64): kernel-livepatch-5_3_18-150300_59_87-default-6-150300.2.1 References: https://www.suse.com/security/cve/CVE-2021-33655.html https://www.suse.com/security/cve/CVE-2022-2588.html https://www.suse.com/security/cve/CVE-2022-42703.html https://www.suse.com/security/cve/CVE-2022-42722.html https://bugzilla.suse.com/1202087 https://bugzilla.suse.com/1203613 https://bugzilla.suse.com/1204170 https://bugzilla.suse.com/1204289 . A new security enhancement for Linux Kernel Live Patch 22 resolves significant vulnerabilities found in SUSE's business platforms.. Linux Kernel Update,SUSE Live Patch 22,Kernel Security Fixes,Enterprise System Security. . Severity: Important. LinuxSecurity.com Team
Nov 16, 2022
•Important
SuSE
202
security advisorymoderatepatchopenSUSE Leap 15.2: openSUSE-SU-2021:0675-1 Moderate: Alpine Security Fix
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for alpine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0675-1 Rating: moderate References: #1173281 Cross-References: CVE-2020-14929 CVSS scores: CVE-2020-14929 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-14929 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for alpine fixes the following issues: Update to release 2.24 * A few crash fixes * Implementation of XOAUTH2 for Yahoo! Mail. Update to release 2.23.2 * Expansion of the configuration screen for XOAUTH2 to include username, and tenant. * Alpine uses the domain in the From: header of a message to generate a message-id and suppresses all information about Alpine, version, revision, and time of generation of the message-id from this header. * Alpine does not generate Sender or X-X-Sender by default by enabling [X] Disable Sender as the default. * Alpine does not disclose User Agent by default by enabling [X] Suppress User Agent by default. * When messages are selected, pressing the ';' command to broaden or narrow a search, now offers the possibility to completely replace the search, and is almost equivalent to being a shortcut to "unselect all messages, and select again". Update to release 2.23 * Fixes boo#1173281, CVE-2020-14929: Alpine silently proceeds to use an insecure connection after a /tls is sent in certain circumstances. * Implementation of XOAUTH2 authentication support for Outlook. * Add support for the OAUTHBEARER authentication method in Gmail. * Supportfor the SASL-IR IMAP extension. * Alpine can pass an HTML message to an external web browser, by using the "External" command in the ATTACHMENT INDEX screen. Update to release 2.22 * Support for XOAUTH2 authentication method in Gmail. * NTLM authentication support with the ntlm library. * Added the "/tls1_3" flag for servers that support it. * Add the "g" option to the select command that works in IMAP servers that implement the X-GM-EXT-1 capability (such as the one offered by Gmail). * Added "/auth=XYZ" to the way to define a server. This allows users to select the method to authenticate to an IMAP, SMTP or POP3 server. Examples are /auth=plain, or /auth=gssapi, etc. * When a message is of type multipart/mixed, and its first part is multipart/signed, Alpine will include the text of the original message in a reply message, instead of including a multipart attachment. * Added backward search in the index screen. * pico: Add -dict option to Pico, which allows users to choose a dictionary when spelling. - Drop /usr/bin/mailutil, it is not built by default anymore. * Added Quota subcommands for printing, forwarding, saving, etc. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-675=1 Package List: - openSUSE Leap 15.2 (x86_64): alpine-2.24-lp152.5.3.1 alpine-debuginfo-2.24-lp152.5.3.1 alpine-debugsource-2.24-lp152.5.3.1 pico-5.07-lp152.5.3.1 pico-debuginfo-5.07-lp152.5.3.1 pilot-2.99-lp152.5.3.1 pilot-debuginfo-2.99-lp152.5.3.1 References: https://www.suse.com/security/cve/CVE-2020-14929.html https://bugzilla.suse.com/1173281 . The latest alpine version addresses several notable concerns, such as bug resolutions and enhanced XOAUTH2compatibility for improved secure connections.. openSUSE, Alpine, Security Patch, Moderate Issues, XOAUTH2 Support. . LinuxSecurity.com Team
May 06, 2021
OpenSUSE
89
security advisoryfedorahardware accelerationFedora 30 Update: WebKitGTK 2.28.1 Security Fixes and Improvements
Update to WebKitGTK 2.28.1: * Fix position of default option element popup windows under Wayland. * Fix rendering after a cross site navigation with PSON enabled and hardware acceleration forced. * Fix a crash in nested wayland compositor when closing a tab with PSON enabled. * Update Chrome and Firefox versions in user agent quirks. * Fix several crashes and rendering issues. *. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-11b0f45883 2020-04-26 03:19:11.463812 --------------------------------------------------------------------------------Name : webkit2gtk3 Product : Fedora 30 Version : 2.28.1 Release : 3.fc30 URL : https://www.webkitgtk.org/ Summary : GTK Web content engine library Description : WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3. --------------------------------------------------------------------------------Update Information: Update to WebKitGTK 2.28.1: * Fix position of default option element popup windows under Wayland. * Fix rendering after a cross site navigation with PSON enabled and hardware acceleration forced. * Fix a crash in nested wayland compositor when closing a tab with PSON enabled. * Update Chrome and Firefox versions in user agent quirks. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-11793 --------------------------------------------------------------------------------ChangeLog: * Fri Apr 17 2020 Michael Catanzaro - 2.28.1-3 - Fix popup menus in X11. * Mon Apr 13 2020 Michael Catanzaro - 2.28.1-1 - Update to 2.28.1. Reenable PSON. * Thu Apr 9 2020 Michael Catanzaro - 2.28.0-9.1 - Fix attempt to disable PSON (WebKit #210287) * Thu Apr 9 2020 Michael Catanzaro - 2.28.0-9 - Second attempt to fix ppc64le - Forcibly disable PSON (WebKit#210287) --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-11b0f45883' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 25, 2020
•Critical
Fedora
89
security advisoryfedoraupdate notificationFedora Core 3: GIMP 2.2.4 Update Notification with Crash Fixes
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-204 2005-03-18 ---------------------------------------------------------------------Product : Fedora Core 3 Name : gimp Version : 2.2.4 Release : 0.fc3.3 Summary : The GNU Image Manipulation Program Description : The GIMP (GNU Image Manipulation Program) is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for webpages. The GIMP has many of the tools and filters you would expect to find in similar commercial offerings, and some interesting extras as well. The GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. The GIMP includes a scripting facility, but many of the included scripts rely on fonts that we cannot distribute. The GIMP FTP site has a package of fonts that you can install by yourself, which includes all the fonts needed to run the included scripts. Some of the fonts have unusual licensing requirements; all the licenses are documented in the package. Get and if you are so inclined. Alternatively, choose fonts which exist on your system before running the scripts. ---------------------------------------------------------------------* Wed Mar 9 2005 Nils Philippsen - prevent gifload plugin from crashing when loading files with bogus frame size (#150677, #150678) * Wed Mar 2 2005 Nils Philippsen - don't barf when building with gcc 4.0 ---------------------------------------------------------------------This update can be downloaded from: 85fa606526f9c5d55020909d3e4ad24a SRPMS/gimp-2.2.4-0.fc3.3.src.rpm 45554de9a6750bd039596164a10c086b x86_64/gimp-2.2.4-0.fc3.3.x86_64.rpm f310f4be2bb8a4af42fe84cea85b8ed9 x86_64/gimp-devel-2.2.4-0.fc3.3.x86_64.rpm 762f518f82f57812a778a4ed53b6e134 x86_64/debug/gimp-debuginfo-2.2.4-0.fc3.3.x86_64.rpm 13f9835ebff16bca1fca630968edd12e i386/gimp-2.2.4-0.fc3.3.i386.rpm 4cddb436c48fa22597002a99c7dff1d2 i386/gimp-devel-2.2.4-0.fc3.3.i386.rpm a117d0ace35e1fe80b66af7b5b7df380 i386/debug/gimp-debuginfo-2.2.4-0.fc3.3.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Mar 18, 2005
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!