Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 9 articles for you...
172
security advisorydenial of servicearbitrary code executionUbuntu 20.04 LTS USN-5099-1: Severe DoS Vulnerability in Imlib2
Imlib2 could be made to denial of service and possibly execute arbitrary code.. =========================================================================Ubuntu Security Notice USN-5099-1 October 04, 2021 imlib2 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Imlib2 could be made to denial of service and possibly execute arbitrary code. Software Description: - imlib2: Image manipulation and rendering library Details: It was discovered that Imlib2 incorrectly handled certain ICO images. An attacker could use this issue to cause a denial of service and possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: libimlib2 1.6.1-1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5099-1 CVE-2020-12761 Package Information: https://launchpad.net/ubuntu/+source/imlib2/1.6.1-1ubuntu0.1 . Ubuntu Security Notice USN-5100-1 pertains to a libxml2 flaw affecting LTS editions, potentially leading to operational interruptions.. Imlib2 Vulnerability, Ubuntu Security, Denial of Service, Code Execution. . Severity: Critical. LinuxSecurity.com Team
Oct 04, 2021
•Critical
Ubuntu
91
security advisoryremote executionGentoo LinuxGentoo: GLSA-201611-12 Normal: imlib2 Remote Code Execution Risk
Multiple vulnerabilities have been found in imlib2, the worst of which allows for the remote execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201611-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: imlib2: Multiple vulnerabilities Date: November 20, 2016 Bugs: #572884, #578810, #580038 ID: 201611-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in imlib2, the worst of which allows for the remote execution of arbitrary code. Background ========= imlib2 is an advanced replacement for image manipulation libraries such as libXpm. It is utilized by numerous programs, including gkrellm and several window managers, to display images. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/imlib2 < 1.4.9 > = 1.4.9 Description ========== Multiple vulnerabilities have been discovered in imlib2. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker could entice a user to open a specially crafted image file using an application linked against imlib2, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All imlib2 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-libs/imlib2-1.4.9" References ========= [ 1 ]CVE-2014-9762 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9762 [ 2 ] CVE-2014-9763 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9763 [ 3 ] CVE-2014-9764 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9764 [ 4 ] CVE-2016-4024 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4024 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201611-12 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Nov 21, 2016
Gentoo
198
security advisoryhigh severityinformation leakArch Linux: 201605-1 High Severity Advisory For Imlib2 Security Issues
The package imlib2 before version 1.4.9-1 is vulnerable to multiple issues that can lead to information leakage, application crash or arbitrary code execution. . Arch Linux Security Advisory ASA-201605-1 ======================================== Severity: High Date : 2016-05-01 CVE-ID : CVE-2011-5326 CVE-2016-3993 CVE-2016-3994 CVE-2016-4024 Package : imlib2 Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package imlib2 before version 1.4.9-1 is vulnerable to multiple issues that can lead to information leakage, application crash or arbitrary code execution. Resolution ========= Upgrade to 1.4.9-1. # pacman -Syu "imlib2> =1.4.9-1" The problems have been fixed upstream in version 1.4.9. Workaround ========= None. Description ========== - CVE-2011-5326 (denial of service) Kevin Ryde discovered that attempting to draw a 2x1 radi ellipse results in a floating point exception. - CVE-2016-3993 (information leakage) Yuriy M. Kaminskiy discovered that drawing using coordinates from an untrusted source could lead to an out-of-bound memory read, which in turn could result in an application crash. - CVE-2016-3994 (information Leakage) Jakub Wilk discovered that a malformed image could lead to an out-of-bound read in the GIF loader, which may result in an application crash or information leak. - CVE-2016-4024 (arbitrary code execution) Yuriy M. Kaminskiy discovered an integer overflow that could lead to an insufficient heap allocation and out-of-bound memory write. Impact ===== An attacker can leverage vulnerable library calls in imlib2 to crash an application, or read/write to the application's memory. This can lead to potential information leak or modification of the application'sflow. References ========= https://www.cve.org/CVERecord?id=CVE-2011-5326 https://www.cve.org/CVERecord?id=CVE-2016-3993 https://www.cve.org/CVERecord?id=CVE-2016-3994 https://www.cve.org/CVERecord?id=CVE-2016-4021 . Numerous vulnerabilities detected in imlib2 before version 1.4.9-1 as detailed in Arch Linux advisory. Prompt update advised.. Imlib2 Issues, High Severity Fix, Arch Linux Security Advisory. . LinuxSecurity.com Team
May 04, 2016
ArchLinux
87
security advisorydebianmoderate severityDebian Jessie: DSA-3555-1 Moderate: Imlib2 Memory Issues
Several vulnerabilities were discovered in imlib2, an image manipulation library. CVE-2011-5326 . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3555-1
Apr 23, 2016
Debian
89
security advisorysoftware updateFedoraFedora 23 Security Advisory: 2016-f8eee2e628 Critical Imlib2 Out Of Bounds
Rebase to the new upstream bugfix-only version. Add security fixes for the referenced bugs.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-f8eee2e628 2016-04-13 03:26:08.777154 -------------------------------------------------------------------------------- Name : imlib2 Product : Fedora 23 Version : 1.4.8 Release : 1.fc23 URL : Summary : Image loading, saving, rendering, and manipulation library Description : Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing speed. This is a complete rewrite over the Imlib 1.x series. The architecture is more modular, simple, and flexible. -------------------------------------------------------------------------------- Update Information: Rebase to the new upstream bugfix-only version. Add security fixes for the referenced bugs. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1323060 - CVE-2016-3994 imlib2: out of bound read in GIF loader https://bugzilla.redhat.com/show_bug.cgi?id=1323060 [ 2 ] Bug #1323080 - CVE-2011-5326 imlib2: divide by zero on 2x1 ellipse https://bugzilla.redhat.com/show_bug.cgi?id=1323080 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update imlib2' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Apr 13, 2016
•Critical
Fedora
87
security advisorycriticaldebianDebian 8 DSA-3537-1 Critical: Imlib2 Segmentation Faults and Fixes
Several vulnerabilities were discovered in imlib2, an image manipulation library. CVE-2014-9762 . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3537-1
Mar 31, 2016
•Critical
Debian
89
security advisorysecurity issuebuffer overflowFedora: imlib2 Security Update February 2016 Critical: Multiple Issues
Rebase to version 1.4.7 Security fix for CVE-2014-9762, CVE-2014-9763, CVE-2014-9764. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-3c0b37e056 2016-02-10 10:19:50.056754 -------------------------------------------------------------------------------- Name : imlib2 Product : Fedora 22 Version : 1.4.7 Release : 1.fc22 URL : Summary : Image loading, saving, rendering, and manipulation library Description : Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing speed. This is a complete rewrite over the Imlib 1.x series. The architecture is more modular, simple, and flexible. -------------------------------------------------------------------------------- Update Information: Rebase to version 1.4.7 Security fix for CVE-2014-9762, CVE-2014-9763, CVE-2014-9764 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301614 - CVE-2014-9762 imlib2: security issues fixed in 1.4.7 https://bugzilla.redhat.com/show_bug.cgi?id=1301614 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update imlib2' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailinglist
Feb 10, 2016
•Critical
Fedora
89
security advisorysecurity issueFedoraFedora 23 Imlib2 Security Update 2016-b62d19661f Critical Fix
Rebase to version 1.4.7 Security fix for CVE-2014-9762, CVE-2014-9763, CVE-2014-9764. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-b62d19661f 2016-01-30 14:54:08.579964 -------------------------------------------------------------------------------- Name : imlib2 Product : Fedora 23 Version : 1.4.7 Release : 1.fc23 URL : http://docs.enlightenment.org/api/imlib2/html/ Summary : Image loading, saving, rendering, and manipulation library Description : Imlib 2 is a library that does image file loading and saving as well as rendering, manipulation, arbitrary polygon support, etc. It does ALL of these operations FAST. Imlib2 also tries to be highly intelligent about doing them, so writing naive programs can be done easily, without sacrificing speed. This is a complete rewrite over the Imlib 1.x series. The architecture is more modular, simple, and flexible. -------------------------------------------------------------------------------- Update Information: Rebase to version 1.4.7 Security fix for CVE-2014-9762, CVE-2014-9763, CVE-2014-9764 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1301614 - CVE-2014-9762 imlib2: security issues fixed in 1.4.7 https://bugzilla.redhat.com/show_bug.cgi?id=1301614 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update imlib2' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailinglist
Jan 30, 2016
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!