Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
197

Debian 10: DLA-3526-1 Moderate: LibreOffice Array Index Issues

LibreOffice an office productivity suite was affected by multiple vulnerabilities. CVE-2022-3874 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3526-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Bastien Roucariès August 13, 2023 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : libreoffice Version : 1:6.1.5-3+deb10u10 CVE ID : CVE-2022-3874 CVE-2023-0950 CVE-2023-2255 Debian Bug : LibreOffice an office productivity suite was affected by multiple vulnerabilities. CVE-2022-3874 Libreoffice may be configured to add an empty entry to the Java class path. This may lead to run arbitrary Java code from the current directory. CVE-2023-0950 Improper Validation of Array Index vulnerability in the spreadsheet component allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffice certain malformed spreadsheet formulas, such as AGGREGATE, could be created with less parameters passed to the formula interpreter than it expected, leading to an array index underflow, in which case there is a risk that arbitrary code could be executed. CVE-2023-2255 Improper access control in editor components of LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. For Debian 10 buster, these problems have been fixed in version 1:6.1.5-3+deb10u10. We recommend that you upgrade your libreofficepackages. For the detailed security status of libreoffice please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libreoffice Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . The Debian LTS team released Advisory DLA-3526-1 for LibreOffice, fixing multiple security vulnerabilities. Users should update promptly to ensure protection.. Debian, LibreOffice, Security Update, Office Suite, Vulnerability Fix. . LinuxSecurity.com Team

Calendar%202 Aug 13, 2023 Debian LTS
203

Mageia 7: 2021-0148 Critical Advisory: HtmlUnit Java Execution Risk

It was discovered that HtmlUnit incorrectly initialized Rhino engine. An Attacker could possibly use this issue to execute arbitrary Java code (CVE-2020-5529). References: . MGASA-2021-0148 - Updated htmlunit packages fix security vulnerability Publication date: 21 Mar 2021 URL: https://advisories.mageia.org/MGASA-2021-0148.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-5529 It was discovered that HtmlUnit incorrectly initialized Rhino engine. An Attacker could possibly use this issue to execute arbitrary Java code (CVE-2020-5529). References: - https://bugs.mageia.org/show_bug.cgi?id=27167 - https://ubuntu.com/security/notices/USN-4584-1 - https://www.cve.org/CVERecord?id=CVE-2020-5529 SRPMS: - 7/core/htmlunit-2.23-2.1.mga7 . CVE-2023-1234 vulnerability identified in HtmlUnit poses serious threat due to potential unauthorized Java code execution. Discover further details here.. HtmlUnit Security, Mageia Patch, Java Execution Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 21, 2021 Critical Mageia
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200