Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98

Red Hat Enterprise Linux 8: RHSA-2021-4251 Security Update for OpenJPEG2

An update for openjpeg2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: openjpeg2 security update Advisory ID: RHSA-2021:4251-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:4251 Issue date: 2021-11-09 CVE Names: CVE-2018-5727 CVE-2018-5785 CVE-2018-20845 CVE-2018-20847 CVE-2019-12973 CVE-2020-15389 CVE-2020-27814 CVE-2020-27823 CVE-2020-27824 CVE-2020-27842 CVE-2020-27843 CVE-2020-27845 CVE-2021-3575 CVE-2021-29338 ==================================================================== 1. Summary: An update for openjpeg2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 Red Hat Enterprise Linux CRB (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: OpenJPEG is an open source library for reading and writing image files in JPEG2000 format. The following packages have been upgraded to a later upstream version: openjpeg2 (2.4.0). Security Fix(es): * openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor (CVE-2020-15389) * openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c couldresult in DoS (CVE-2020-27814) * openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() (CVE-2020-27823) * openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution (CVE-2021-3575) * openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c (CVE-2018-5727) * openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c (CVE-2018-5785) * openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c (CVE-2018-20845) * openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c (CVE-2018-20847) * openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c (CVE-2019-12973) * openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() (CVE-2020-27824) * openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c (CVE-2020-27842) * openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c (CVE-2020-27843) * openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c (CVE-2020-27845) * openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c (CVE-2021-29338) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1536552 - CVE-2018-5727 openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c 1537758 - CVE-2018-5785 openjpeg: integer overflow in opj_j2k_setup_encoder function in openjp2/j2k.c 1728505 -CVE-2018-20845 openjpeg: division-by-zero in functions pi_next_pcrl, pi_next_cprl, and pi_next_rpcl in openmj2/pi.c 1728509 - CVE-2018-20847 openjpeg: integer overflow in function opj_get_encoding_parameters in openjp2/pi.c 1732270 - CVE-2019-12973 openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c 1852869 - CVE-2020-15389 openjpeg: use-after-free and double-free via a mix of valid and invalid files in a directory operated on by the decompressor 1901998 - CVE-2020-27814 openjpeg: heap-buffer-overflow in lib/openjp2/mqc.c could result in DoS 1905723 - CVE-2020-27824 openjpeg: global-buffer-overflow read in opj_dwt_calc_explicit_stepsizes() 1905762 - CVE-2020-27823 openjpeg: heap-buffer-overflow write in opj_tcd_dc_level_shift_encode() 1907513 - CVE-2020-27842 openjpeg: null pointer dereference in opj_tgt_reset function in lib/openjp2/tgt.c 1907516 - CVE-2020-27843 openjpeg: out-of-bounds read in opj_t2_encode_packet function in openjp2/t2.c 1907523 - CVE-2020-27845 openjpeg: heap-based buffer overflow in functions opj_pi_next_rlcp, opj_pi_next_rpcl and opj_pi_next_lrcp in openjp2/pi.c 1950101 - CVE-2021-29338 openjpeg: out-of-bounds write due to an integer overflow in opj_compress.c 1957616 - CVE-2021-3575 openjpeg: heap-buffer-overflow in color.c may lead to DoS or arbitrary code execution 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: openjpeg2-2.4.0-4.el8.src.rpm aarch64: openjpeg2-2.4.0-4.el8.aarch64.rpm openjpeg2-debuginfo-2.4.0-4.el8.aarch64.rpm openjpeg2-debugsource-2.4.0-4.el8.aarch64.rpm openjpeg2-tools-2.4.0-4.el8.aarch64.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.aarch64.rpm noarch: openjpeg2-devel-docs-2.4.0-4.el8.noarch.rpm ppc64le: openjpeg2-2.4.0-4.el8.ppc64le.rpm openjpeg2-debuginfo-2.4.0-4.el8.ppc64le.rpm openjpeg2-debugsource-2.4.0-4.el8.ppc64le.rpm openjpeg2-tools-2.4.0-4.el8.ppc64le.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.ppc64le.rpm s390x: openjpeg2-2.4.0-4.el8.s390x.rpm openjpeg2-debuginfo-2.4.0-4.el8.s390x.rpm openjpeg2-debugsource-2.4.0-4.el8.s390x.rpm openjpeg2-tools-2.4.0-4.el8.s390x.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.s390x.rpm x86_64: openjpeg2-2.4.0-4.el8.i686.rpm openjpeg2-2.4.0-4.el8.x86_64.rpm openjpeg2-debuginfo-2.4.0-4.el8.i686.rpm openjpeg2-debuginfo-2.4.0-4.el8.x86_64.rpm openjpeg2-debugsource-2.4.0-4.el8.i686.rpm openjpeg2-debugsource-2.4.0-4.el8.x86_64.rpm openjpeg2-tools-2.4.0-4.el8.x86_64.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.i686.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.x86_64.rpm Red Hat Enterprise Linux CRB (v.8): aarch64: openjpeg2-debuginfo-2.4.0-4.el8.aarch64.rpm openjpeg2-debugsource-2.4.0-4.el8.aarch64.rpm openjpeg2-devel-2.4.0-4.el8.aarch64.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.aarch64.rpm ppc64le: openjpeg2-debuginfo-2.4.0-4.el8.ppc64le.rpm openjpeg2-debugsource-2.4.0-4.el8.ppc64le.rpm openjpeg2-devel-2.4.0-4.el8.ppc64le.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.ppc64le.rpm s390x: openjpeg2-debuginfo-2.4.0-4.el8.s390x.rpm openjpeg2-debugsource-2.4.0-4.el8.s390x.rpm openjpeg2-devel-2.4.0-4.el8.s390x.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.s390x.rpm x86_64: openjpeg2-debuginfo-2.4.0-4.el8.i686.rpm openjpeg2-debuginfo-2.4.0-4.el8.x86_64.rpm openjpeg2-debugsource-2.4.0-4.el8.i686.rpm openjpeg2-debugsource-2.4.0-4.el8.x86_64.rpm openjpeg2-devel-2.4.0-4.el8.i686.rpm openjpeg2-devel-2.4.0-4.el8.x86_64.rpm openjpeg2-tools-2.4.0-4.el8.i686.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.i686.rpm openjpeg2-tools-debuginfo-2.4.0-4.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2018-5727 https://access.redhat.com/security/cve/CVE-2018-5785 https://access.redhat.com/security/cve/CVE-2018-20845 https://access.redhat.com/security/cve/CVE-2018-20847 https://access.redhat.com/security/cve/CVE-2019-12973 https://access.redhat.com/security/cve/CVE-2020-15389 https://access.redhat.com/security/cve/CVE-2020-27814 https://access.redhat.com/security/cve/CVE-2020-27823 https://access.redhat.com/security/cve/CVE-2020-27824 https://access.redhat.com/security/cve/CVE-2020-27842 https://access.redhat.com/security/cve/CVE-2020-27843 https://access.redhat.com/security/cve/CVE-2020-27845 https://access.redhat.com/security/cve/CVE-2021-3575 https://access.redhat.com/security/cve/CVE-2021-29338 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.5_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYYrdsdzjgjWX9erEAQhigw//YMH0qGWY0NRaqpWG5R/qfrKxxHNEPRFi sgppCLbFMI59HgzVrDzCkrPM4nz1duNzZrAPCZtwl57ZgZS6X4NDJXZ9Kyf5hed8 QuRhCZP0MilEmcuLcCBhJaKbsYTRNiAYg66MnPaRfNq4SIhBabMXLbosgMcHpfrr dWfoQSRJG+SS8z1wRKwaxi6QbsQq0XLP38yGz0j62rKW7cNUsFKhDfNntivZUXuN 2y7RzRK12ubt4TsQRCQFOGyUVuPBNWWYQxjaYmgHz/mpJGOlNFKns95gP5ExTwgw xp7NBAQ726WjcsbqGPH6G8mqSEw62BSOYhv/p2srEjdNI24+0GLYFSnruab8qXBq HbpWFKcWHN/biOJqNKGlzMCW7iCgOWmulvhWBecHPU+pg2DFv534CsxegNNXsOm+ 7bC9YmU89Ei4wxp5hrBkucbF0sKHS0DEjavJM8pExG+12wI6xIoE+SCvK/Gatjhz 8vAywTyyyMpoxjLy9nMZlXser++OHEv1D9xAWX8rk/PnHbih8gqQpS2+6za32UEj Pfq3KzgW1fNap7q79D/wp5ToSmt+8cpnExC2RWRixmR6mdTYSOQcj5eaxzJQfOv/ EwnNqptfrP9CgW1z/mG/sa3KPmH8M1Gd4LTIBHp7PzldW96MjTN8VPNd7a9wtihE VzgzQOVJZ3E=QXPl -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . The OpenJPEG2 security patch for Red Hat Enterprise Linux 8 resolves several vulnerabilitiesclassified as moderate, with updates now accessible.. OpenJPEG2 Security, Red Hat Updates, Image Processing Threats. . LinuxSecurity.com Team

Calendar 2 Nov 09, 2021 Red Hat
98

Red Hat 6: RHSA-2010-0858-03 Critical: Bzip2 Integer Overflow

Updated bzip2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS). -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: bzip2 security update Advisory ID: RHSA-2010:0858-03 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0858.html Issue date: 2010-11-10 CVE Names: CVE-2010-0405 ==================================================================== 1. Summary: Updated bzip2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: bzip2 is a freely available, high-quality data compressor. It provides both standalone compression and decompression utilities, as well as a shared library for use with other programs. An integer overflow flaw was discovered in the bzip2 decompression routine. This issue could, when decompressing malformed archives, cause bzip2, or an application linked against the libbz2 library, to crash or, potentially, execute arbitrary code. (CVE-2010-0405) Users of bzip2 should upgrade to these updated packages, which containa backported patch to resolve this issue. All running applications using the libbz2 library must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 627882 - CVE-2010-0405 bzip2: integer overflow flaw in BZ2_decompress 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: i386: bzip2-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-libs-1.0.5-7.el6_0.i686.rpm x86_64: bzip2-1.0.5-7.el6_0.x86_64.rpm bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.x86_64.rpm bzip2-libs-1.0.5-7.el6_0.i686.rpm bzip2-libs-1.0.5-7.el6_0.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): Source: i386: bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-devel-1.0.5-7.el6_0.i686.rpm x86_64: bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.x86_64.rpm bzip2-devel-1.0.5-7.el6_0.i686.rpm bzip2-devel-1.0.5-7.el6_0.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: bzip2-1.0.5-7.el6_0.x86_64.rpm bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.x86_64.rpm bzip2-libs-1.0.5-7.el6_0.i686.rpm bzip2-libs-1.0.5-7.el6_0.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.x86_64.rpm bzip2-devel-1.0.5-7.el6_0.i686.rpm bzip2-devel-1.0.5-7.el6_0.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: i386: bzip2-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-devel-1.0.5-7.el6_0.i686.rpm bzip2-libs-1.0.5-7.el6_0.i686.rpm ppc64: bzip2-1.0.5-7.el6_0.ppc64.rpm bzip2-debuginfo-1.0.5-7.el6_0.ppc.rpm bzip2-debuginfo-1.0.5-7.el6_0.ppc64.rpm bzip2-devel-1.0.5-7.el6_0.ppc.rpm bzip2-devel-1.0.5-7.el6_0.ppc64.rpm bzip2-libs-1.0.5-7.el6_0.ppc.rpm bzip2-libs-1.0.5-7.el6_0.ppc64.rpm s390x: bzip2-1.0.5-7.el6_0.s390x.rpm bzip2-debuginfo-1.0.5-7.el6_0.s390.rpm bzip2-debuginfo-1.0.5-7.el6_0.s390x.rpm bzip2-devel-1.0.5-7.el6_0.s390.rpm bzip2-devel-1.0.5-7.el6_0.s390x.rpm bzip2-libs-1.0.5-7.el6_0.s390.rpm bzip2-libs-1.0.5-7.el6_0.s390x.rpm x86_64: bzip2-1.0.5-7.el6_0.x86_64.rpm bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.x86_64.rpm bzip2-devel-1.0.5-7.el6_0.i686.rpm bzip2-devel-1.0.5-7.el6_0.x86_64.rpm bzip2-libs-1.0.5-7.el6_0.i686.rpm bzip2-libs-1.0.5-7.el6_0.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: bzip2-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-devel-1.0.5-7.el6_0.i686.rpm bzip2-libs-1.0.5-7.el6_0.i686.rpm x86_64: bzip2-1.0.5-7.el6_0.x86_64.rpm bzip2-debuginfo-1.0.5-7.el6_0.i686.rpm bzip2-debuginfo-1.0.5-7.el6_0.x86_64.rpm bzip2-devel-1.0.5-7.el6_0.i686.rpm bzip2-devel-1.0.5-7.el6_0.x86_64.rpm bzip2-libs-1.0.5-7.el6_0.i686.rpm bzip2-libs-1.0.5-7.el6_0.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2010-0405 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2010 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFM2vJPXlSAg2UNWIIRAhDjAKC48dJpaosiVbbCgKPMsTELZQd4DQCdFddW lwFEfrDu228ccL3xrVjYiIU=BLU3 -----END PGPSIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Essential bzip2 updates released to resolve a severe integer overflow vulnerability affecting Red Hat Enterprise Linux 6 customers.. bzip2 Update, Red Hat Advisory, Integer Overflow Issue. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Nov 10, 2010 Important Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here