Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is application sandboxing truly safe?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/155-is-application-sandboxing-truly-safe?task=poll.vote&format=json
155
radio
0
[{"id":500,"title":"Malware still escapes container walls.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":501,"title":"Supply chains corrupt trusted packages.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":502,"title":"Convenience consistently compromises strict security.","votes":1,"type":"x","order":3,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89

Fedora: 2015-a288773b9a Moderate: LibRaw Memory Initialization Problems

Patch for CVE-2015-8366, CVE-2015-8367. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-a288773b9a 2015-12-11 21:20:33.552959 -------------------------------------------------------------------------------- Name : LibRaw Product : Fedora 22 Version : 0.16.2 Release : 3.fc22 URL : https://www.libraw.org/ Summary : Library for reading RAW files obtained from digital photo cameras Description : LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future. -------------------------------------------------------------------------------- Update Information: Patch for CVE-2015-8366, CVE-2015-8367 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1287077 - CVE-2015-8367 LibRaw: Memory objects are not intialized properly [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1287077 [ 2 ] Bug #1287057 - CVE-2015-8366 LibRaw: Index overflow in smal_decode_segment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1287057 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update LibRaw' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . LibRaw patches address memory clearanceand bound overflow issues in RAW file processing for Fedora systems.. LibRaw Security,Fedora Patch,Memory Initialization Issue,Index Overflow Fix. . LinuxSecurity.com Team

Calendar%202 Dec 12, 2015 Fedora
89

Fedora 23 LibRaw Security Update: Memory Problems and Index Overflow

Patch for CVE-2015-8366, CVE-2015-8367. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-d2fc332108 2015-12-07 17:40:03.177757 -------------------------------------------------------------------------------- Name : LibRaw Product : Fedora 23 Version : 0.16.2 Release : 3.fc23 URL : https://www.libraw.org/ Summary : Library for reading RAW files obtained from digital photo cameras Description : LibRaw is a library for reading RAW files obtained from digital photo cameras (CRW/CR2, NEF, RAF, DNG, and others). LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future. -------------------------------------------------------------------------------- Update Information: Patch for CVE-2015-8366, CVE-2015-8367 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1287077 - CVE-2015-8367 LibRaw: Memory objects are not intialized properly [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1287077 [ 2 ] Bug #1287057 - CVE-2015-8366 LibRaw: Index overflow in smal_decode_segment [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1287057 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update LibRaw' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ .Tackling vulnerabilities in LibRaw for Fedora 23, this patch fixes significant memory problems and index out-of-bounds errors.. LibRaw Security Update, Fedora LibRaw Patch, Memory Correction. . LinuxSecurity.com Team

Calendar%202 Dec 07, 2015 Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is application sandboxing truly safe?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/155-is-application-sandboxing-truly-safe?task=poll.vote&format=json
155
radio
0
[{"id":500,"title":"Malware still escapes container walls.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":501,"title":"Supply chains corrupt trusted packages.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":502,"title":"Convenience consistently compromises strict security.","votes":1,"type":"x","order":3,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200