Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":546,"type":"x","order":1,"pct":78.45,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.31,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.36,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
89

Fedora 29: FEDORA-2019-3389cb9047 Major: Libxml2 Buffer Overflow

This release fixes a heap-based buffer over-read when parsing a mallformed BSON document (CVE-2018-16790).. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-2062cd7548 2018-09-27 17:27:18.345505 --------------------------------------------------------------------------------Name : libbson Product : Fedora 28 Version : 1.9.5 Release : 3.fc28 URL : https://github.com/mongodb/libbson Summary : Building, parsing, and iterating BSON documents Description : This is a library providing useful routines related to building, parsing, and iterating BSON documents . --------------------------------------------------------------------------------Update Information: This release fixes a heap-based buffer over-read when parsing a mallformed BSON document (CVE-2018-16790). --------------------------------------------------------------------------------ChangeLog: * Tue Sep 18 2018 Petr Pisar - 1.9.5-3 - Fix CVE-2018-16790 (heap-based buffer over-read in _bson_iter_next_internal()) (bug #1627924) * Tue May 29 2018 Petr Pisar - 1.9.5-2 - Fix memory leaks in JSON parser (CDRIVER-2524) - Fix a buffer underflow in bson_strncpy() (CDRIVER-2596) - Fix a buffer underflow in bson_snprintf() (CDRIVER-2595) - Print an error when a memory allocation fails (CDRIVER-2608) - Fix memory leaks in tests - Fix obtaining time on 32-bit platforms (CDRIVER-2567) - Fix a race in OID tests * Thu May 3 2018 Petr Pisar - 1.9.5-1 - 1.9.5 bump --------------------------------------------------------------------------------References: [ 1 ] Bug #1627923 - CVE-2018-16790 libbson: Heap-based buffer over-read in _bson_iter_next_internal in bson-iter.c https://bugzilla.redhat.com/show_bug.cgi?id=1627923 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-2062cd7548'at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Resolves a significant stack-based buffer overflow vulnerability in libbson for Fedora 28. Essential update information has been provided.. libbson Update,Fedora 28,Software Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 27, 2018 Critical Fedora
89

Fedora 27 libbson Update: 2018-77d864ff39 Moderate Heap Over-Read Fix

This release fixes a heap-based buffer over-read when parsing a mallformed BSON document (CVE-2018-16790).. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-77d864ff39 2018-09-27 16:16:50.020595 --------------------------------------------------------------------------------Name : libbson Product : Fedora 27 Version : 1.9.5 Release : 3.fc27 URL : https://github.com/mongodb/libbson Summary : Building, parsing, and iterating BSON documents Description : This is a library providing useful routines related to building, parsing, and iterating BSON documents . --------------------------------------------------------------------------------Update Information: This release fixes a heap-based buffer over-read when parsing a mallformed BSON document (CVE-2018-16790). --------------------------------------------------------------------------------ChangeLog: * Tue Sep 18 2018 Petr Pisar - 1.9.5-3 - Fix CVE-2018-16790 (heap-based buffer over-read in _bson_iter_next_internal()) (bug #1627924) * Tue May 29 2018 Petr Pisar - 1.9.5-2 - Fix memory leaks in JSON parser (CDRIVER-2524) - Fix a buffer underflow in bson_strncpy() (CDRIVER-2596) - Fix a buffer underflow in bson_snprintf() (CDRIVER-2595) - Print an error when a memory allocation fails (CDRIVER-2608) - Fix memory leaks in tests - Fix obtaining time on 32-bit platforms (CDRIVER-2567) - Fix a race in OID tests * Thu May 3 2018 Petr Pisar - 1.9.5-1 - 1.9.5 bump * Wed Apr 11 2018 Petr Pisar - 1.9.4-1 - 1.9.4 bump * Thu Mar 22 2018 Petr Pisar - 1.9.3-2 - Adapt to sphinx 1.7.0 (bug #1555204) - Remove ldconfig postscripts where possible * Thu Mar 1 2018 Petr Pisar - 1.9.3-1 - 1.9.3 bump * Fri Jan 12 2018 Petr Pisar - 1.9.2-1 - 1.9.2 bump * Wed Jan 10 2018 Petr Pisar - 1.9.1-2 - Fix BSON_STATIC_ASSERT() definition * Wed Jan 10 2018 Petr Pisar - 1.9.1-1 - 1.9.1 bump * Thu Dec 21 2017 Petr Pisar -1.8.2-2 - Fix 128-bit float stringification (CDRIVER-2299) - Fix validating dbpointer when parsing BSON (CDRIVER-2339) - Fix handling UTF-8 two-byte NUL character (CDRIVER-2401) * Mon Nov 20 2017 Petr Pisar - 1.8.2-1 - 1.8.2 bump * Thu Nov 2 2017 Petr Pisar - 1.8.1-1 - 1.8.1 bump --------------------------------------------------------------------------------References: [ 1 ] Bug #1627923 - CVE-2018-16790 libbson: Heap-based buffer over-read in _bson_iter_next_internal in bson-iter.c https://bugzilla.redhat.com/show_bug.cgi?id=1627923 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-77d864ff39' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . The Libbson security flaw has been resolved in Fedora 27. This fix tackles the heap over-read issue, providing effective update steps for users.. Fedora Update, libbson Patch, Buffer Over-read Fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Sep 27, 2018 Important Fedora
89

Ubuntu 18.04: 2018-274c3b5e12b Important: OpenSSL Security Enhancement Fix

This release fixes a crash whwhen parsing an empty code string of a codewscope type. It also make functions for checking library version available for C++ programs.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-1953158d1f 2017-09-30 05:57:53.258502 --------------------------------------------------------------------------------Name : libbson Product : Fedora 27 Version : 1.8.0 Release : 1.fc27 URL : https://github.com/mongodb/libbson Summary : Building, parsing, and iterating BSON documents Description : This is a library providing useful routines related to building, parsing, and iterating BSON documents . --------------------------------------------------------------------------------Update Information: This release fixes a crash whwhen parsing an empty code string of a codewscope type. It also make functions for checking library version available for C++ programs. --------------------------------------------------------------------------------References: [ 1 ] Bug #1494401 - CVE-2017-14227 libbson: Heap based buffer over read in the bson_utf8_validate function https://bugzilla.redhat.com/show_bug.cgi?id=1494401 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libbson' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora 28 enhances libbson to resolve issues with crashing during the decoding of nil code inputs and guarantees compatibility with updated C++ standards.. Fedora Security Update, libbson Buffer Overflow, C++ Library Fixes. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Sep 30, 2017 Important Fedora
89

Fedora 25: 2017-09-26 - Critical: Libbson Buffer Over Read

This release fixes a crash when parsing an empty code string of a codewscope type.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-7edc2ea787 2017-09-26 19:35:44.725386 --------------------------------------------------------------------------------Name : libbson Product : Fedora 25 Version : 1.3.5 Release : 4.fc25 URL : https://github.com/mongodb/libbson Summary : Building, parsing, and iterating BSON documents Description : This is a library providing useful routines related to building, parsing, and iterating BSON documents . --------------------------------------------------------------------------------Update Information: This release fixes a crash when parsing an empty code string of a codewscope type. --------------------------------------------------------------------------------References: [ 1 ] Bug #1494401 - CVE-2017-14227 libbson: Heap based buffer over read in the bson_utf8_validate function https://bugzilla.redhat.com/show_bug.cgi?id=1494401 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libbson' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . This update resolves a critical issue in libbson related to processing an unfilled code input, enhancing overall performance and safeguarding enhancements.. FedoraSecurity Update, Libbson Crash Resolution, Critical Crash Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 27, 2017 Critical Fedora
89

Fedora 26: libbson Update Fixes Crash Issue With Empty Code Strings

This release fixes a crash when parsing an empty code string of a codewscope type.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-a4cf96bcca 2017-09-26 19:35:41.605008 --------------------------------------------------------------------------------Name : libbson Product : Fedora 26 Version : 1.6.3 Release : 2.fc26 URL : https://github.com/mongodb/libbson Summary : Building, parsing, and iterating BSON documents Description : This is a library providing useful routines related to building, parsing, and iterating BSON documents . --------------------------------------------------------------------------------Update Information: This release fixes a crash when parsing an empty code string of a codewscope type. --------------------------------------------------------------------------------References: [ 1 ] Bug #1494401 - CVE-2017-14227 libbson: Heap based buffer over read in the bson_utf8_validate function https://bugzilla.redhat.com/show_bug.cgi?id=1494401 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libbson' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Fixes a bug that occurs when handling null values in the libbson library for Fedora 26 users.. libbson update,Fedora security,buffer overflow fix,code executionerror. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 26, 2017 Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":546,"type":"x","order":1,"pct":78.45,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.31,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.36,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here