Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
87

Debian: DSA-4646-1 Critical: ICU Integer Overflow DoS Threat

Andre Bargull discovered an integer overflow in the International Components for Unicode (ICU) library which could result in denial of service and potentially the execution of arbitrary code. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4646-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso March 25, 2020 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : icu CVE ID : CVE-2020-10531 Debian Bug : 953747 Andre Bargull discovered an integer overflow in the International Components for Unicode (ICU) library which could result in denial of service and potentially the execution of arbitrary code. For the oldstable distribution (stretch), this problem has been fixed in version 57.1-6+deb9u4. For the stable distribution (buster), this problem has been fixed in version 63.1-6+deb10u1. We recommend that you upgrade your icu packages. For the detailed security status of icu please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/icu Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Enhance library components to resolve buffer overflow vulnerabilities, which may result in service disruptions and potential unauthorized command execution.. Debian Security, ICU Library Update, Integer Overflow Issue, Denial Of Service, Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 25, 2020 Critical Debian
197

Debian 7 DLA-947-1 Critical: Icu Buffer Overflow DoS Flaw

It was discovered that icu, the International Components for Unicode library, did not correctly validate its input. An attacker could use this problem to trigger an out-of-bound write through a heap-based buffer overflow, thus causing a denial of service via application . Hash: SHA512 Package : icu Version : 4.8.1.1-12+deb7u7 CVE ID : CVE-2017-7867 CVE-2017-7868 It was discovered that icu, the International Components for Unicode library, did not correctly validate its input. An attacker could use this problem to trigger an out-of-bound write through a heap-based buffer overflow, thus causing a denial of service via application crash, or potential execution of arbitrary code. For Debian 7 "Wheezy", these problems have been fixed in version 4.8.1.1-12+deb7u7. We recommend that you upgrade your icu packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . A patch for icu on Debian LTS addresses a critical buffer overflow issue that may result in denial of service and the possibility of remote code execution.. Debian Updates, Buffer Overflow Fix, icu Library Security, Denial of Service, Software Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 20, 2017 Critical Debian LTS
87

Debian 9: DSA-3360-1 Critical: icu Denial Of Service Threat Mitigation

It was discovered that the International Components for Unicode (ICU) library mishandles converter names starting with x- , which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3360-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Laszlo Boszormenyi (GCS) September 15, 2015 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : icu CVE ID : CVE-2015-1270 Debian Bug : 798647 It was discovered that the International Components for Unicode (ICU) library mishandles converter names starting with x- , which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file. For the stable distribution (jessie), this problem has been fixed in version 52.1-8+deb8u3. For the testing distribution (stretch), this problem has been fixed in version 55.1-5. For the unstable distribution (sid), this problem has been fixed in version 55.1-5. We recommend that you upgrade your icu packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Notice DSA-3361-1 details an update to the libxml library designed to remediate vulnerabilities that expose systems to remote exploitation risks.. Debian Security,DENIAL Of SERVICE,ICU Library,Remote Attack Mitigation,Security Updates. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 15, 2015 Critical Debian
98

Red Hat 5 RHSA-2009:1122-01 Moderate: ICU Unicode Issue

Updated icu packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: icu security update Advisory ID: RHSA-2009:1122-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1122.html Issue date: 2009-06-25 CVE Names: CVE-2009-0153 ==================================================================== 1. Summary: Updated icu packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 3. Description: The International Components for Unicode (ICU) library provides robust and full-featured Unicode services. A flaw was found in the way ICU processed certain, invalid byte sequences during Unicode conversion. If an application used ICU to decode malformed, multibyte character data, it may have been possible to bypass certain content protection mechanisms, or display information in a manner misleading to the user. (CVE-2009-0153) All users of icu should upgrade to these updated packages, which contain backported patches to resolve this issue. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 503071 - CVE-2009-0153 icu: XSS vulnerability due to improper invalid byte sequencehandling 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: icu-3.6-5.11.4.i386.rpm icu-debuginfo-3.6-5.11.4.i386.rpm libicu-3.6-5.11.4.i386.rpm libicu-doc-3.6-5.11.4.i386.rpm x86_64: icu-3.6-5.11.4.x86_64.rpm icu-debuginfo-3.6-5.11.4.i386.rpm icu-debuginfo-3.6-5.11.4.x86_64.rpm libicu-3.6-5.11.4.i386.rpm libicu-3.6-5.11.4.x86_64.rpm libicu-doc-3.6-5.11.4.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: icu-debuginfo-3.6-5.11.4.i386.rpm libicu-devel-3.6-5.11.4.i386.rpm x86_64: icu-debuginfo-3.6-5.11.4.i386.rpm icu-debuginfo-3.6-5.11.4.x86_64.rpm libicu-devel-3.6-5.11.4.i386.rpm libicu-devel-3.6-5.11.4.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: icu-3.6-5.11.4.i386.rpm icu-debuginfo-3.6-5.11.4.i386.rpm libicu-3.6-5.11.4.i386.rpm libicu-devel-3.6-5.11.4.i386.rpm libicu-doc-3.6-5.11.4.i386.rpm ia64: icu-3.6-5.11.4.ia64.rpm icu-debuginfo-3.6-5.11.4.ia64.rpm libicu-3.6-5.11.4.ia64.rpm libicu-devel-3.6-5.11.4.ia64.rpm libicu-doc-3.6-5.11.4.ia64.rpm ppc: icu-3.6-5.11.4.ppc.rpm icu-debuginfo-3.6-5.11.4.ppc.rpm icu-debuginfo-3.6-5.11.4.ppc64.rpm libicu-3.6-5.11.4.ppc.rpm libicu-3.6-5.11.4.ppc64.rpm libicu-devel-3.6-5.11.4.ppc.rpm libicu-devel-3.6-5.11.4.ppc64.rpm libicu-doc-3.6-5.11.4.ppc.rpm s390x: icu-3.6-5.11.4.s390x.rpm icu-debuginfo-3.6-5.11.4.s390.rpm icu-debuginfo-3.6-5.11.4.s390x.rpm libicu-3.6-5.11.4.s390.rpm libicu-3.6-5.11.4.s390x.rpm libicu-devel-3.6-5.11.4.s390.rpm libicu-devel-3.6-5.11.4.s390x.rpm libicu-doc-3.6-5.11.4.s390x.rpm x86_64: icu-3.6-5.11.4.x86_64.rpm icu-debuginfo-3.6-5.11.4.i386.rpm icu-debuginfo-3.6-5.11.4.x86_64.rpm libicu-3.6-5.11.4.i386.rpm libicu-3.6-5.11.4.x86_64.rpm libicu-devel-3.6-5.11.4.i386.rpm libicu-devel-3.6-5.11.4.x86_64.rpm libicu-doc-3.6-5.11.4.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7.References: https://www.cve.org/CVERecord?id=CVE-2009-0153 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2009 Red Hat, Inc. . Important security enhancement for CentOS 6 provides vital patches and resolves significant vulnerabilities.. Enterprise Linux, ICU security, Red Hat update, security patch. . LinuxSecurity.com Team

Calendar 2 Jun 25, 2009 Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here