Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
91
security advisorygentoocode executionGentoo: GLSA-201706-25 Normal: Graphite User-Assisted Code Execution
An out-of-bounds write in Graphite might allow remote attackers to execute arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201706-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Graphite: User-assisted execution of arbitrary code Date: June 22, 2017 Bugs: #616034 ID: 201706-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= An out-of-bounds write in Graphite might allow remote attackers to execute arbitrary code. Background ========= Graphite is a "smart font" system developed specifically to handle the complexities of lesser-known languages of the world. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/graphite2 < 1.3.8-r1 > = 1.3.8-r1 Description ========== An out-of-bounds write has been found in the Graphite 2 library. Impact ===== A remote attacker could entice a user to open a specially crafted document using Graphite or an application linked against Graphite library, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All Graphite users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-gfx/graphite2-1.3.8-r1" References ========= [ 1 ] CVE-2017-5436 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-5436 Availability =========== This GLSA and any updates to it are available for viewing at the GentooSecurity Website: https://security.gentoo.org/glsa/201706-25 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 22, 2017
Gentoo
91
security advisorydenial of serviceremote executionGentoo GLSA-201701-63 Normal Severity: Graphite Remote Execution Issues
Multiple vulnerabilities have been found in Graphite, the worst of which could lead to the remote execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201701-63 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Graphite: Multiple vulnerabilities Date: January 24, 2017 Bugs: #574276, #576864 ID: 201701-63 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in Graphite, the worst of which could lead to the remote execution of arbitrary code. Background ========= Graphite is a "smart font" system developed specifically to handle the complexities of lesser-known languages of the world. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-gfx/graphite2 < 1.3.7 > = 1.3.7 Description ========== Multiple vulnerabilities have been discovered in Graphite. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, or obtain sensitive information. Workaround ========= There is no known workaround at this time. Resolution ========= All Graphite users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-gfx/graphite2-1.3.7" References ========= [ 1 ] CVE-2016-1521 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1521 [ 2 ] CVE-2016-1522 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1522 [ 3 ] CVE-2016-1523 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1523 [ 4 ] CVE-2016-1526 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1526 [ 5 ] CVE-2016-1977 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-1977 [ 6 ] CVE-2016-2790 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2790 [ 7 ] CVE-2016-2791 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2791 [ 8 ] CVE-2016-2792 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2792 [ 9 ] CVE-2016-2793 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2793 [ 10 ] CVE-2016-2794 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2794 [ 11 ] CVE-2016-2795 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2795 [ 12 ] CVE-2016-2796 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2796 [ 13 ] CVE-2016-2797 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2797 [ 14 ] CVE-2016-2798 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2798 [ 15 ] CVE-2016-2799 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2799 [ 16 ] CVE-2016-2800 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2800 [ 17 ] CVE-2016-2801 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2801 [ 18 ] CVE-2016-2802 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-2802 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201701-63 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jan 24, 2017
Gentoo
87
security advisorydenial of serviceupdateDebian: DSA-3516-1 Important: FontForge Vulnerability Mitigation
Multiple vulnerabilities have been found in the Graphite font rendering engine which might result in denial of service or the execution of arbitrary code if a malformed font file is processed. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3515-1
Mar 13, 2016
•Important
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!