Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisoryFedorasecurity fixFedora 39: FEDORA-2024-c94f884440 critical: less command injection
Security fix for CVE-2024-32487 - less with LESSOPEN mishandles \n in paths. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-c94f884440 2024-09-22 02:03:26.291758 -------------------------------------------------------------------------------- Name : less Product : Fedora 39 Version : 633 Release : 4.fc39 URL : https://www.greenwoodsoftware.com/less/ Summary : A text file browser similar to more, but better Description : The less utility is a text file browser that resembles more, but has more capabilities. Less allows you to move backwards in the file as well as forwards. Since less doesn't have to read the entire input file before it starts, less starts up more quickly than text editors (for example, vi). You should install less because it is a basic utility for viewing text files, and you'll use it frequently. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2024-32487 - less with LESSOPEN mishandles \n in paths -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 21 2024 Michal Hlavinka - 643-6 - fix CVE-2024-32487 - less with LESSOPEN mishandles \n in paths (#2274981) * Sun Jul 28 2024 Michal Hlavinka - 633-3 - fix incorrect display when filename contains control chars -------------------------------------------------------------------------------- References: [ 1 ] Bug #2274980 - CVE-2024-32487 less: OS command injection https://bugzilla.redhat.com/show_bug.cgi?id=2274980 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c94f884440' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Sep 22, 2024
•Critical
Fedora
219
security advisoryupdatesecurity fixRocky Linux 8 RLSA-2024:1610 Moderate: Less Utility Shell Issue
Moderate: less security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2024:1610", "synopsis": "Moderate: less security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for less.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: missing quoting of shell metacharacters in LESSCLOSE handling (CVE-2022-48624)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2265081", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2265081", "description": ""}], "cves": [{"name": "CVE-2022-48624", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2022-48624", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2024-04-05T14:55:53.600745Z", "rpms": {"Rocky Linux 8": {"nvras": ["less-0:530-2.el8_9.aarch64.rpm", "less-0:530-2.el8_9.src.rpm", "less-0:530-2.el8_9.x86_64.rpm", "less-debuginfo-0:530-2.el8_9.aarch64.rpm", "less-debuginfo-0:530-2.el8_9.x86_64.rpm", "less-debugsource-0:530-2.el8_9.aarch64.rpm", "less-debugsource-0:530-2.el8_9.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. The update RLSA-2024:1610 for Rocky Linux brings significant security enhancements related to the 'less' command-line tool. Explore the details.. Rocky Linux RLSA, Less Utility Update, Moderate Security Fix. .LinuxSecurity.com Team
Apr 05, 2024
Rocky Linux
219
security advisorysecurity issuesecurity fixRocky Linux 9 RLSA-2023:3725 Moderate: Less Security Issue
Moderate: less security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2023:3725", "synopsis": "Moderate: less security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for less.\nThis update affects Rocky Linux 9.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "The \"less\" utility is a text file browser that resembles \"more\", but allows users to move backwards in the file as well as forwards. Since \"less\" does not read the entire input file at startup, it also starts more quickly than ordinary text editors.\n\nSecurity Fix(es):\n\n* less: crafted data can result in \"less -R\" not filtering ANSI escape sequences sent to the terminal (CVE-2022-46663)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 9"], "fixes": [{"ticket": "2169621", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2169621", "description": ""}], "cves": [{"name": "CVE-2022-46663", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2022-46663", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2023-08-31T16:55:39.127366Z", "rpms": {"Rocky Linux 9": {"nvras": ["less-0:590-2.el9_2.aarch64.rpm", "less-0:590-2.el9_2.ppc64le.rpm", "less-0:590-2.el9_2.s390x.rpm", "less-0:590-2.el9_2.src.rpm", "less-0:590-2.el9_2.x86_64.rpm", "less-debuginfo-0:590-2.el9_2.aarch64.rpm", "less-debuginfo-0:590-2.el9_2.ppc64le.rpm", "less-debuginfo-0:590-2.el9_2.s390x.rpm", "less-debuginfo-0:590-2.el9_2.x86_64.rpm", "less-debugsource-0:590-2.el9_2.aarch64.rpm", "less-debugsource-0:590-2.el9_2.ppc64le.rpm", "less-debugsource-0:590-2.el9_2.s390x.rpm","less-debugsource-0:590-2.el9_2.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Significant upgrade to the 'less' tool in Rocky Linux 9, targeting vulnerabilities to enhance performance and ensure security.. Rocky Linux Update, Less Utility Security, Moderate Security Fix. . LinuxSecurity.com Team
Aug 31, 2023
Rocky Linux
98
security advisorymoderatesecurity updateRed Hat Enterprise Linux 9: RHSA-2023-3725 Moderate Security Fix for less
An update for less is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: less security update Advisory ID: RHSA-2023:3725-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:3725 Issue date: 2023-06-21 CVE Names: CVE-2022-46663 ==================================================================== 1. Summary: An update for less is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux BaseOS (v. 9) - aarch64, ppc64le, s390x, x86_64 3. Description: The "less" utility is a text file browser that resembles "more", but allows users to move backwards in the file as well as forwards. Since "less" does not read the entire input file at startup, it also starts more quickly than ordinary text editors. Security Fix(es): * less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal (CVE-2022-46663) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2169621 - CVE-2022-46663 less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal 6. Package List: Red Hat Enterprise Linux BaseOS (v. 9): Source: less-590-2.el9_2.src.rpm aarch64: less-590-2.el9_2.aarch64.rpm less-debuginfo-590-2.el9_2.aarch64.rpm less-debugsource-590-2.el9_2.aarch64.rpm ppc64le: less-590-2.el9_2.ppc64le.rpm less-debuginfo-590-2.el9_2.ppc64le.rpm less-debugsource-590-2.el9_2.ppc64le.rpm s390x: less-590-2.el9_2.s390x.rpm less-debuginfo-590-2.el9_2.s390x.rpm less-debugsource-590-2.el9_2.s390x.rpm x86_64: less-590-2.el9_2.x86_64.rpm less-debuginfo-590-2.el9_2.x86_64.rpm less-debugsource-590-2.el9_2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2022-46663 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBZJNwxNzjgjWX9erEAQj9EA//dqVtURZzSi0ajBcFQSoa2mJ8MSi5uUw/ IsHIsb+iC2jVptQwXwTo3SInGQxQnDKoCVivptZbuhHG6Mu/FzzgvdpBNykTnZ1v rjSGnuI9mLMzNLesm9hs+Gr2Wxt6P7EtqBTku0ZXGAlzUA8V7bwW581yxucYodWL A5IJ44cWQvWgSoXDCVuVptxfYRw2dl9hp6cm5n0L2usYLA8MKkpayDu+Qub3Jn+5 9MoJc8iBFzfriZBk4CkP2/JPbMtWoBl0AFH7Wu67twwwe0pP4sh9jSYdDoXd75ps M1VKLzmxgQPYwD0u7bkDBvwQohkA7akaksC/NGTeXD/Eznyvfr9V24VCXNBDRxMZ 0CqPYrvMfsfTxZ0pSuZhe/W9tFNKelmwCKoNOcLTtCqwhcaCzWpzHHsfe2bYrBfW 7m0GFzVXbDNky6TICCK8fpEnmmdstXcYJtvp9fW1S4wRqAxKYROlb88JnxApFwBk Xcyv2ZODOjln5Kb8eiUhQQcB1UwzRDpUS9hXr9mOBc/ZO1x9Yx3N3vUyT2k1MfFZ RHq1iWqJZHSRYIvQn2On9JAKaAz3zh7QsDmYn0umWoljRq9yrdiY3eWc4R9I7Ity kkQ8AlKfzqwjS1SWIxNj+C5smmXL8GSORJdUdveXTMmuucpL0Oyk7KjThbQYoT/j PhxBRqKsdSc=vBsz -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jun 21, 2023
Red Hat
89
security advisoryfedorapatchFedora 22: 2015-9357 Moderate: Out Of Bounds Access In Less Utility
better fix of out of bounds read access in is_utf8_well_formed() CVE-2014-9488 out of bounds read access in is_utf8_well_formed() CVE-2014-9488. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-9357 2015-06-02 09:33:58 -------------------------------------------------------------------------------- Name : less Product : Fedora 22 Version : 471 Release : 4.fc22 URL : http://www.greenwoodsoftware.com/less/ Summary : A text file browser similar to more, but better Description : The less utility is a text file browser that resembles more, but has more capabilities. Less allows you to move backwards in the file as well as forwards. Since less doesn't have to read the entire input file before it starts, less starts up more quickly than text editors (for example, vi). You should install less because it is a basic utility for viewing text files, and you'll use it frequently. -------------------------------------------------------------------------------- Update Information: better fix of out of bounds read access in is_utf8_well_formed() CVE-2014-9488 out of bounds read access in is_utf8_well_formed() CVE-2014-9488 -------------------------------------------------------------------------------- ChangeLog: * Mon Jun 1 2015 Jozef Mlich - 471-4 - update of previous patch * Mon Jun 1 2015 Jozef Mlich - 471-3 - out of bounds read access in is_utf8_well_formed() Resolves: #1201310 CVE-2014-9488 * Sat Feb 21 2015 Till Maas - 471-2 - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code -------------------------------------------------------------------------------- References: [ 1 ] Bug #1201310 - CVE-2014-9488 less: out of bounds read access in is_utf8_well_formed() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1201310 -------------------------------------------------------------------------------- This update can beinstalled with the "yum" update program. Use su -c 'yum update less' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Jun 05, 2015
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!