Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 5 articles for you...
87
security advisorydebianimportantDebian DSA-6217-1 Luanti Important Sandbox Escape Security Issues
Two security issues were discovered in Luanti, a multiplayer infinite-world block sandbox game, which could result in incomplete restrictions for installed mods or sandbox escape. For the stable distribution (trixie), these problems have been fixed in version 5.10.0+dfsg-5+deb13u1.. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6217-1
Apr 17, 2026
•Important
Debian
203
security advisoryremote attackimportantMageia 9 Vim Important Tabpanel Escape Risk Vulnerability MGASA-2026-0077
MGASA-2026-0077 - Updated vim packages fix security vulnerability. MGASA-2026-0077 - Updated vim packages fix security vulnerability Publication date: 31 Mar 2026 URL: https://advisories.mageia.org/MGASA-2026-0077.html Type: security Affected Mageia releases: 9 CVE: CVE-2026-34714 Description: Vim tabpanel modeline escape affects Vim < 9.2.0272. References: - https://bugs.mageia.org/show_bug.cgi?id=35292 - https://www.openwall.com/lists/oss-security/2026/03/30/3 - https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh - https://www.cve.org/CVERecord?id=CVE-2026-34714 SRPMS: - 9/core/vim-9.2.272-1.mga9 . Updated Vim packages in Mageia address critical security flaws and recommend immediate action for users.. Mageia Update, Vim Security, Package Fixes, Remote Attack Risk. . Severity: Important. LinuxSecurity.com Team
Apr 01, 2026
•Important
Mageia
202
security advisoryDoSimportantopenSUSE: MozillaFirefox Important Escapes & JIT Issues 2025:4424-1
An update that solves 10 vulnerabilities can now be installed.. # Security update for MozillaFirefox Announcement ID: SUSE-SU-2025:4424-1 Release Date: 2025-12-17T11:10:08Z Rating: important References: * bsc#1254551 Cross-References: * CVE-2025-14321 * CVE-2025-14322 * CVE-2025-14323 * CVE-2025-14324 * CVE-2025-14325 * CVE-2025-14328 * CVE-2025-14329 * CVE-2025-14330 * CVE-2025-14331 * CVE-2025-14333 CVSS scores: * CVE-2025-14321 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-14321 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14321 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-14321 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-14322 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-14322 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14322 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N * CVE-2025-14323 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-14323 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14323 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14324 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-14324 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14324 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-14324 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-14325 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-14325 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14325 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2025-14328 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-14328 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-14328 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14329 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-14329 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-14329 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14330 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-14330 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2025-14330 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-14330 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-14331 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-14331 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-14331 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-14331 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2025-14333 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-14333 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-14333 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-14333 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP6 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise HighPerformance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.6.0 ESR (bsc#1254551). * MFSA 2025-94 * CVE-2025-14321: use-after-free in the WebRTC: Signaling component. * CVE-2025-14322: sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2025-14323: privilege escalation in the DOM: Notifications component. * CVE-2025-14324: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2025-14325: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2025-14328: privilege escalation in the Netmonitor component. * CVE-2025-14329: privilege escalation in the Netmonitor component. * CVE-2025-14330: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2025-14331: same-origin policy bypass in the Request Handling component. * CVE-2025-14333: memory safety bugs. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSELeap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4424=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-4424=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2025-4424=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-4424=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-4424=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-4424=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-4424=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-4424=1 * SUSE Linux Enterprise Server 15 SP3 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-4424=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-4424=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-4424=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2025-4424=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2025-4424=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-4424=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2025-4424=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 *MozillaFirefox-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-branding-upstream-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * openSUSE Leap 15.6 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * Desktop Applications Module 15-SP6 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * Desktop Applications Module 15-SP7 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 *MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 *MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server 15 SP3 LTSS (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux EnterpriseServer for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * MozillaFirefox-translations-other-140.6.0-150200.152.213.1 * MozillaFirefox-debuginfo-140.6.0-150200.152.213.1 * MozillaFirefox-debugsource-140.6.0-150200.152.213.1 * MozillaFirefox-translations-common-140.6.0-150200.152.213.1 * MozillaFirefox-140.6.0-150200.152.213.1 * SUSE Enterprise Storage 7.1 (noarch) * MozillaFirefox-devel-140.6.0-150200.152.213.1 ## References: * https://www.suse.com/security/cve/CVE-2025-14321.html * https://www.suse.com/security/cve/CVE-2025-14322.html * https://www.suse.com/security/cve/CVE-2025-14323.html * https://www.suse.com/security/cve/CVE-2025-14324.html * https://www.suse.com/security/cve/CVE-2025-14325.html * https://www.suse.com/security/cve/CVE-2025-14328.html * https://www.suse.com/security/cve/CVE-2025-14329.html * https://www.suse.com/security/cve/CVE-2025-14330.html * https://www.suse.com/security/cve/CVE-2025-14331.html * https://www.suse.com/security/cve/CVE-2025-14333.html * https://bugzilla.suse.com/show_bug.cgi?id=1254551 . An important update for openSUSE's MozillaFirefox fixes 10 issues and includes vital patch instructions for users.. MozillaFirefox Security Update, openSUSE MozillaFirefox Patch, Important MozillaFirefox Fix. . Severity: Important. LinuxSecurity.com Team
Dec 17, 2025
•Important
OpenSUSE
219
security advisorysecurity issueimportantRocky Linux 8 RLSA-2024:3961 Important: Flatpak Sandbox Escape Update
Important: flatpak security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:3961", "synopsis": "Important: flatpak security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for flatpak.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.\n\nSecurity Fix(es):\n\n* flatpak: sandbox escape via RequestBackground portal (CVE-2024-32462)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2275981", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2275981", "description": ""}], "cves": [{"name": "CVE-2024-32462", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2024-32462", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-07-02T14:10:24.883859Z", "rpms": {"Rocky Linux 8": {"nvras": ["flatpak-0:1.12.9-1.el8_10.aarch64.rpm", "flatpak-0:1.12.9-1.el8_10.i686.rpm", "flatpak-0:1.12.9-1.el8_10.src.rpm", "flatpak-0:1.12.9-1.el8_10.x86_64.rpm", "flatpak-debuginfo-0:1.12.9-1.el8_10.aarch64.rpm", "flatpak-debuginfo-0:1.12.9-1.el8_10.i686.rpm", "flatpak-debuginfo-0:1.12.9-1.el8_10.x86_64.rpm", "flatpak-debugsource-0:1.12.9-1.el8_10.aarch64.rpm", "flatpak-debugsource-0:1.12.9-1.el8_10.i686.rpm", "flatpak-debugsource-0:1.12.9-1.el8_10.x86_64.rpm", "flatpak-devel-0:1.12.9-1.el8_10.aarch64.rpm", "flatpak-devel-0:1.12.9-1.el8_10.i686.rpm", "flatpak-devel-0:1.12.9-1.el8_10.x86_64.rpm", "flatpak-libs-0:1.12.9-1.el8_10.aarch64.rpm", "flatpak-libs-0:1.12.9-1.el8_10.i686.rpm","flatpak-libs-0:1.12.9-1.el8_10.x86_64.rpm", "flatpak-libs-debuginfo-0:1.12.9-1.el8_10.aarch64.rpm", "flatpak-libs-debuginfo-0:1.12.9-1.el8_10.i686.rpm", "flatpak-libs-debuginfo-0:1.12.9-1.el8_10.x86_64.rpm", "flatpak-selinux-0:1.12.9-1.el8_10.noarch.rpm", "flatpak-session-helper-0:1.12.9-1.el8_10.aarch64.rpm", "flatpak-session-helper-0:1.12.9-1.el8_10.i686.rpm", "flatpak-session-helper-0:1.12.9-1.el8_10.x86_64.rpm", "flatpak-session-helper-debuginfo-0:1.12.9-1.el8_10.aarch64.rpm", "flatpak-session-helper-debuginfo-0:1.12.9-1.el8_10.i686.rpm", "flatpak-session-helper-debuginfo-0:1.12.9-1.el8_10.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. A vital security patch for Flatpak has been issued for Rocky Linux, tackling critical sandbox bypass vulnerabilities. Ensure your system's safety by applying updates.. Rocky Linux, Flatpak Update, Linux Security Patch, Sandbox Threat. . Severity: Important. LinuxSecurity.com Team
Jul 02, 2024
•Important
Rocky Linux
89
security advisorycriticalFedoraFedora 34: Critical Flatpak Sandbox Escape Vulnerability on 2021-01-19
This is a security update that fixes a sandbox escape where a malicious application can execute code outside the sandbox by controlling the environment of the "flatpak run" command when spawning a sub-sandbox. See the advisory for details: https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-f807eb480a 2021-01-19 01:50:48.910487 --------------------------------------------------------------------------------Name : flatpak Product : Fedora 32 Version : 1.8.5 Release : 1.fc32 URL : https://flatpak.org/ Summary : Application deployment framework for desktop apps Description : flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. --------------------------------------------------------------------------------Update Information: This is a security update that fixes a sandbox escape where a malicious application can execute code outside the sandbox by controlling the environment of the "flatpak run" command when spawning a sub-sandbox. See the advisory for details: https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2 --------------------------------------------------------------------------------ChangeLog: * Thu Jan 14 2021 Kalev Lember - 1.8.5-1 - Update to 1.8.5 * Wed Nov 18 2020 David King - 1.8.3-2 - Drop obsolete Requires on system-release --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-f807eb480a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys usedby the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 18, 2021
•Critical
Fedora
98
security advisorysecurity updateRed HatRedHat: RHSA-2020-0222-01 Important Ghostscript Security Fix
An update for ghostscript is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: ghostscript security update Advisory ID: RHSA-2020:0222-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:0222 Issue date: 2020-01-23 CVE Names: CVE-2019-14869 ==================================================================== 1. Summary: An update for ghostscript is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream E4S (v. 8.0) - ppc64le, x86_64 3. Description: The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: -dSAFER escape in .charkeys (701841) (CVE-2019-14869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1768911 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys (701841) 6.Package List: Red Hat Enterprise Linux AppStream E4S (v. 8.0): Source: ghostscript-9.25-2.el8_0.4.src.rpm ppc64le: ghostscript-9.25-2.el8_0.4.ppc64le.rpm ghostscript-debuginfo-9.25-2.el8_0.4.ppc64le.rpm ghostscript-debugsource-9.25-2.el8_0.4.ppc64le.rpm ghostscript-gtk-debuginfo-9.25-2.el8_0.4.ppc64le.rpm ghostscript-x11-debuginfo-9.25-2.el8_0.4.ppc64le.rpm libgs-9.25-2.el8_0.4.ppc64le.rpm libgs-debuginfo-9.25-2.el8_0.4.ppc64le.rpm x86_64: ghostscript-9.25-2.el8_0.4.x86_64.rpm ghostscript-debuginfo-9.25-2.el8_0.4.i686.rpm ghostscript-debuginfo-9.25-2.el8_0.4.x86_64.rpm ghostscript-debugsource-9.25-2.el8_0.4.i686.rpm ghostscript-debugsource-9.25-2.el8_0.4.x86_64.rpm ghostscript-gtk-debuginfo-9.25-2.el8_0.4.i686.rpm ghostscript-gtk-debuginfo-9.25-2.el8_0.4.x86_64.rpm ghostscript-x11-debuginfo-9.25-2.el8_0.4.i686.rpm ghostscript-x11-debuginfo-9.25-2.el8_0.4.x86_64.rpm libgs-9.25-2.el8_0.4.i686.rpm libgs-9.25-2.el8_0.4.x86_64.rpm libgs-debuginfo-9.25-2.el8_0.4.i686.rpm libgs-debuginfo-9.25-2.el8_0.4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-14869 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXin7R9zjgjWX9erEAQjsEQ/9EyeK6HS8XmaG/ugyKrazmh5ViRplTSO2 onbvdFdr5jZV+04w0f43bv+mdHuTs6sUDuL1eBZgXI8pmAA7gVPpv6BF0fjmF2pm tbNwyYE888qQz8dexxBYvXkkr5/lRUuE9JhpOGeu45RJae9Laq5zeLVpSNZn52o8 LA7kQf2mVTicebcaEoTf3kW6JCebLUV1vCXzGcPYZ0PG69Ix0baqQxiOeqBLd26U j4RBQzlo8WKAw9iNk5aZwQCDmwyWLIiup4orolnzHNnfMD8Qp6584taJ54Sry99r CgH4uDHHTbFjV6U4JvaUK42Q92NPxXbUR/Ap4BA1OEM4FbTZgbxGf6qUncI4Uxbh ZW5Mm5tm91c9XmrsfUKzgtVEum3kLnhwsI8+b+VfifvDsxdU/OHuj+bVqLQalCFL 64TUQJXDRWIu4hNen3HWftHNnB5vKWHuQF4lrE64y86bMOCxsmOsjuKGKaxNUasE w1n3Dr3Xc1PUDF0nHBfj2lz4VOuKivLFhecEaOJqubXhRQ2HMER1vP80c2hgGn9B gZih4lLTMEBC5pgFhBVwGaZJuY0JzBWT4+4VYVOEISpoWGE+fqP9MvAr9NBk8C/Q 7moW2/DFMHZtFHFgy6oCIg/si5S81lLkNjhYRwJzU/R2IypGAJbcNPtY6Pe45PJE r5uyjkQfelQ=xV3P -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jan 23, 2020
•Important
Red Hat
200
security advisorysecurity issuecriticalSciLinux SL7: SLSA-2019:3888-1 Critical Ghostscript Escape Issue
ghostscript: -dSAFER escape in .charkeys (701841) (CVE-2019-14869) SL7 x86_64 ghostscript-9.25-2.el7_7.3.i686.rpm ghostscript-9.25-2.el7_7.3.x86_64.rpm ghostscript-cups-9.25-2.el7_7.3.x86_64.rpm ghostscript-debuginfo-9.25-2.el7_7.3.i686.rpm ghostscript-debuginfo-9.25-2.el7_7.3.x86_64.rpm libgs-9.25-2.el7_7.3.i686.rpm libgs-9.25-2.el7_7.3.x86_64.rpm ghostscrip [More...]. Synopsis: Important: ghostscript security update Advisory ID: SLSA-2019:3888-1 Issue Date: 2019-11-14 CVE Numbers: CVE-2019-14869 -- Security Fix(es): * ghostscript: -dSAFER escape in .charkeys (701841) (CVE-2019-14869) -- SL7 x86_64 ghostscript-9.25-2.el7_7.3.i686.rpm ghostscript-9.25-2.el7_7.3.x86_64.rpm ghostscript-cups-9.25-2.el7_7.3.x86_64.rpm ghostscript-debuginfo-9.25-2.el7_7.3.i686.rpm ghostscript-debuginfo-9.25-2.el7_7.3.x86_64.rpm libgs-9.25-2.el7_7.3.i686.rpm libgs-9.25-2.el7_7.3.x86_64.rpm ghostscript-gtk-9.25-2.el7_7.3.x86_64.rpm libgs-devel-9.25-2.el7_7.3.i686.rpm libgs-devel-9.25-2.el7_7.3.x86_64.rpm noarch ghostscript-doc-9.25-2.el7_7.3.noarch.rpm - Scientific Linux Development Team . A crucial Ghostscript patch for SL7 resolves a serious security vulnerability. Prioritize your system's safety by applying this essential update.. ghostscript update, SL7 security, escape vulnerability, security advisory. . Severity: Critical. LinuxSecurity.com Team
Nov 14, 2019
•Critical
Scientific Linux
98
security advisoryupdatered hatRed Hat Enterprise Linux 8 RHSA-2019-3890 Critical: Ghostscript Escape Flaw
An update for ghostscript is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability . -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: ghostscript security update Advisory ID: RHSA-2019:3890-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:3890 Issue date: 2019-11-14 CVE Names: CVE-2019-14869 ==================================================================== 1. Summary: An update for ghostscript is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat CodeReady Linux Builder (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fix(es): * ghostscript: -dSAFER escape in .charkeys (701841) (CVE-2019-14869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, referto: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1768911 - CVE-2019-14869 ghostscript: -dSAFER escape in .charkeys (701841) 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: ghostscript-9.25-5.el8_1.1.src.rpm aarch64: ghostscript-9.25-5.el8_1.1.aarch64.rpm ghostscript-debuginfo-9.25-5.el8_1.1.aarch64.rpm ghostscript-debugsource-9.25-5.el8_1.1.aarch64.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.aarch64.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.aarch64.rpm libgs-9.25-5.el8_1.1.aarch64.rpm libgs-debuginfo-9.25-5.el8_1.1.aarch64.rpm ppc64le: ghostscript-9.25-5.el8_1.1.ppc64le.rpm ghostscript-debuginfo-9.25-5.el8_1.1.ppc64le.rpm ghostscript-debugsource-9.25-5.el8_1.1.ppc64le.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.ppc64le.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.ppc64le.rpm libgs-9.25-5.el8_1.1.ppc64le.rpm libgs-debuginfo-9.25-5.el8_1.1.ppc64le.rpm s390x: ghostscript-9.25-5.el8_1.1.s390x.rpm ghostscript-debuginfo-9.25-5.el8_1.1.s390x.rpm ghostscript-debugsource-9.25-5.el8_1.1.s390x.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.s390x.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.s390x.rpm libgs-9.25-5.el8_1.1.s390x.rpm libgs-debuginfo-9.25-5.el8_1.1.s390x.rpm x86_64: ghostscript-9.25-5.el8_1.1.x86_64.rpm ghostscript-debuginfo-9.25-5.el8_1.1.i686.rpm ghostscript-debuginfo-9.25-5.el8_1.1.x86_64.rpm ghostscript-debugsource-9.25-5.el8_1.1.i686.rpm ghostscript-debugsource-9.25-5.el8_1.1.x86_64.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.i686.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.x86_64.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.i686.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.x86_64.rpm libgs-9.25-5.el8_1.1.i686.rpm libgs-9.25-5.el8_1.1.x86_64.rpm libgs-debuginfo-9.25-5.el8_1.1.i686.rpm libgs-debuginfo-9.25-5.el8_1.1.x86_64.rpm Red Hat CodeReady Linux Builder (v.8): aarch64: ghostscript-debuginfo-9.25-5.el8_1.1.aarch64.rpm ghostscript-debugsource-9.25-5.el8_1.1.aarch64.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.aarch64.rpm ghostscript-tools-dvipdf-9.25-5.el8_1.1.aarch64.rpm ghostscript-tools-fonts-9.25-5.el8_1.1.aarch64.rpm ghostscript-tools-printing-9.25-5.el8_1.1.aarch64.rpm ghostscript-x11-9.25-5.el8_1.1.aarch64.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.aarch64.rpm libgs-debuginfo-9.25-5.el8_1.1.aarch64.rpm libgs-devel-9.25-5.el8_1.1.aarch64.rpm noarch: ghostscript-doc-9.25-5.el8_1.1.noarch.rpm ppc64le: ghostscript-debuginfo-9.25-5.el8_1.1.ppc64le.rpm ghostscript-debugsource-9.25-5.el8_1.1.ppc64le.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.ppc64le.rpm ghostscript-tools-dvipdf-9.25-5.el8_1.1.ppc64le.rpm ghostscript-tools-fonts-9.25-5.el8_1.1.ppc64le.rpm ghostscript-tools-printing-9.25-5.el8_1.1.ppc64le.rpm ghostscript-x11-9.25-5.el8_1.1.ppc64le.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.ppc64le.rpm libgs-debuginfo-9.25-5.el8_1.1.ppc64le.rpm libgs-devel-9.25-5.el8_1.1.ppc64le.rpm s390x: ghostscript-debuginfo-9.25-5.el8_1.1.s390x.rpm ghostscript-debugsource-9.25-5.el8_1.1.s390x.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.s390x.rpm ghostscript-tools-dvipdf-9.25-5.el8_1.1.s390x.rpm ghostscript-tools-fonts-9.25-5.el8_1.1.s390x.rpm ghostscript-tools-printing-9.25-5.el8_1.1.s390x.rpm ghostscript-x11-9.25-5.el8_1.1.s390x.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.s390x.rpm libgs-debuginfo-9.25-5.el8_1.1.s390x.rpm libgs-devel-9.25-5.el8_1.1.s390x.rpm x86_64: ghostscript-debuginfo-9.25-5.el8_1.1.i686.rpm ghostscript-debuginfo-9.25-5.el8_1.1.x86_64.rpm ghostscript-debugsource-9.25-5.el8_1.1.i686.rpm ghostscript-debugsource-9.25-5.el8_1.1.x86_64.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.i686.rpm ghostscript-gtk-debuginfo-9.25-5.el8_1.1.x86_64.rpm ghostscript-tools-dvipdf-9.25-5.el8_1.1.x86_64.rpm ghostscript-tools-fonts-9.25-5.el8_1.1.x86_64.rpm ghostscript-tools-printing-9.25-5.el8_1.1.x86_64.rpm ghostscript-x11-9.25-5.el8_1.1.x86_64.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.i686.rpm ghostscript-x11-debuginfo-9.25-5.el8_1.1.x86_64.rpm libgs-debuginfo-9.25-5.el8_1.1.i686.rpm libgs-debuginfo-9.25-5.el8_1.1.x86_64.rpm libgs-devel-9.25-5.el8_1.1.i686.rpm libgs-devel-9.25-5.el8_1.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-14869 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE-----Version: GnuPG v1 iQIVAwUBXc2t09zjgjWX9erEAQgQVw/+KxEW387wsnKf1NJNWUMzY3wrm6aqJJsY NcK3NJ3u5VRQ1CnAoDHTSfR9M+zVOvFFWpohpnA3JqUdIMGovRe5pDBNsbMNOIhQ lAZDJJP/D+/rbaY6ocfbIUPJkqg4YMm3v3JUQqpk0EJ60hAH2pDAZVogPZ0DQlzO 5naSG5lB9hx5Qu3IQfqfFxqOU/QdHL12aI5W3s3BK6h5Xdjvl3KJ2qd9Wn62aJsj 3GQXPDGA2Oyh5HUoARJJD60iFmr/YBeiNVYfeX6amfv3yL0ihS8U4vFcDnOsbdvy 4GR3PghITrSNYoZg8vx5P9Fo69kJNkfPl7vrIBfbVPeY0N+KjdkyTP5ACfdc6QZI paQs+QfioU0YeAUs49RUgjPiCqiAxHZKYiCKHJ/eRIPIJyjEqhQgDxzEpUfLqHBE 5BtGGhTNXsplRni8RJxYO+QBnygNtynTei9cw7Ie+tB/ixwzeRHKpiQP/OkrnFXP U0zh9uHiVKWbZCMQJVDDaQgKW+C/54UgaELyBV3fczhnbLJ5B/R3542RkAXK9CDr 3eGdIxEPIcaNSBniiOpMg7i04nqN9xhNIOUx+C5dTuGvYxOWCGF3G74uGZHd31sz TsvS714DWk+1edO7KkiPWBMZDCSXXIaL3ef8Ij9W6BftvsAHutXQyODaPFwpilvS OCbqIA5XX7s=SNS3 -----END PGP SIGNATURE-------RHSA-announce mailing list
Nov 14, 2019
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!