Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 15 articles for you...
197
security advisorycriticalsoftware updateDebian 9 Stretch: DLA-2851-1 Critical: libextractor Malformed File Issue
Invalid read for malformed DVI files was fixed in GNU libextractor, a library that extracts meta-data from files of arbitrary type. For Debian 9 stretch, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2851-1
Dec 26, 2021
•Critical
Debian LTS
172
security advisorydenial of servicecriticalUbuntu 16.04 LTS: USN-4641-1 Critical: Libextractor Denial Of Service
Several security issues were fixed in libextractor.. =========================================================================Ubuntu Security Notice USN-4641-1 November 23, 2020 libextractor vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in libextractor. Software Description: - libextractor: library used to extract metadata from files Details: It was discovered that Libextractor incorrectly handled zero sample rate. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-15266) It was discovered that Libextractor incorrectly handled certain FLAC metadata. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-15267) It was discovered that Libextractor incorrectly handled certain specially crafted files. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-15600, CVE-2018-16430, CVE-2018-20430) It was discovered that Libextractor incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-15601) It was discovered that Libextractor incorrectly handled integers. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-15602) It was discovered that Libextractore incorrectly handled certain crafted files. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-15922) It was discovered tha Libextractor incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-17440) It was discovered that Libextractor incorrectly handled certain malformed files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-14346) It was discovered that Libextractor incorrectly handled malformed files. An attacker could possiblyuse this issue to cause a denial of service. (CVE-2018-14347) It was discovered that Libextractor incorrectly handled metadata. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-20431) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: extract 1:1.3-4+deb9u3build0.16.04.1 libextractor-dev 1:1.3-4+deb9u3build0.16.04.1 libextractor3 1:1.3-4+deb9u3build0.16.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4641-1 CVE-2017-15266, CVE-2017-15267, CVE-2017-15600, CVE-2017-15601, CVE-2017-15602, CVE-2017-15922, CVE-2017-17440, CVE-2018-14346, CVE-2018-14347, CVE-2018-16430, CVE-2018-20430, CVE-2018-20431 Package Information: https://launchpad.net/ubuntu/+source/libextractor/1:1.3-4+deb9u3build0.16.04.1 . Unveil crucial information regarding the libextractor security flaws impacting Ubuntu 16.04 LTS and associated complications.. libextractor issues, ubuntu security notice, denial of service, metadata extraction vulnerabilities. . Severity: Critical. LinuxSecurity.com Team
Nov 23, 2020
•Critical
Ubuntu
203
security advisorybuffer overflowsoftware updateMageia 7: MGASA-2020-0015 Moderate: Libextractor Buffer Over-Read
Updated libextractor packages fix security vulnerability: GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c (CVE-2019-15531). . MGASA-2020-0015 - Updated libextractor packages fix security vulnerability Publication date: 05 Jan 2020 URL: https://advisories.mageia.org/MGASA-2020-0015.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-15531 Updated libextractor packages fix security vulnerability: GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c (CVE-2019-15531). References: - https://bugs.mageia.org/show_bug.cgi?id=25945 - https://lists.fedoraproject.org/archives/list/
Jan 05, 2020
Mageia
89
security advisorylibextractorbuffer over-readFedora 31: libextractor FEDORA-2019-b467cab3c8 Critical: Buffer Over-Read
Patch for CVE-2019-15531. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-b467cab3c8 2019-09-30 00:00:36.231186 --------------------------------------------------------------------------------Name : libextractor Product : Fedora 31 Version : 1.9 Release : 5.fc31 URL : Summary : Simple library for keyword extraction Description : libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen helper-libraries that can be used to obtain keywords from common file-types. libextractor is a part of the GNU project (). --------------------------------------------------------------------------------Update Information: Patch for CVE-2019-15531 --------------------------------------------------------------------------------References: [ 1 ] Bug #1749219 - CVE-2019-15531 libextractor: heap-based buffer over-read in function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1749219 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-b467cab3c8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 29, 2019
•Critical
Fedora
89
security advisoryupdatecriticalFedora 29: 2019-5628767261 High: libextractor Buffer Over-Read
Patch for CVE-2019-15531. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-5628767261 2019-09-14 01:53:52.304182 --------------------------------------------------------------------------------Name : libextractor Product : Fedora 29 Version : 1.9 Release : 5.fc29 URL : http://www.gnu.org/software/libextractor/ Summary : Simple library for keyword extraction Description : libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen helper-libraries that can be used to obtain keywords from common file-types. libextractor is a part of the GNU project (http://www.gnu.org/). --------------------------------------------------------------------------------Update Information: Patch for CVE-2019-15531 --------------------------------------------------------------------------------ChangeLog: * Thu Sep 5 2019 Gwyn Ciesla - 1.9-5 - Patch for CVE-2019-15531 * Thu Jul 25 2019 Fedora Release Engineering - 1.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Jun 10 2019 Igor Gnatenko - 1.9-3 - Rebuild for RPM 4.15 * Mon Jun 10 2019 Igor Gnatenko - 1.9-2 - Rebuild for RPM 4.15 * Mon Feb 11 2019 Gwyn Ciesla - 1.9-1 - 1.9 * Fri Feb 1 2019 Fedora Release Engineering - 1.7-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Wed Jan 30 2019 Rex Dieter - 1.7-2 - pull in candidate fix for exiv2-0.27 (#1671085) - fix rpath harder - BR: gcc-c++ * Wed Jul 18 2018 Gwyn Ciesla - 1.7-1 - 1.7. * Fri Jul 13 2018 Fedora Release Engineering - 1.6-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1749219 - CVE-2019-15531 libextractor: heap-based buffer over-read in function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1749219 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-5628767261' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 13, 2019
Fedora
89
security advisorycriticalFedoraFedora 30: FEDORA-2019-62b65ed7f6 Critical: Libextractor Buffer Over-Read
Patch for CVE-2019-15531. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-62b65ed7f6 2019-09-14 01:11:50.072998 --------------------------------------------------------------------------------Name : libextractor Product : Fedora 30 Version : 1.9 Release : 5.fc30 URL : http://www.gnu.org/software/libextractor/ Summary : Simple library for keyword extraction Description : libextractor is a simple library for keyword extraction. libextractor does not support all formats but supports a simple plugging mechanism such that you can quickly add extractors for additional formats, even without recompiling libextractor. libextractor typically ships with a dozen helper-libraries that can be used to obtain keywords from common file-types. libextractor is a part of the GNU project (http://www.gnu.org/). --------------------------------------------------------------------------------Update Information: Patch for CVE-2019-15531 --------------------------------------------------------------------------------ChangeLog: * Thu Sep 5 2019 Gwyn Ciesla - 1.9-5 - Patch for CVE-2019-15531 * Thu Jul 25 2019 Fedora Release Engineering - 1.9-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Mon Jun 10 2019 Igor Gnatenko - 1.9-3 - Rebuild for RPM 4.15 * Mon Jun 10 2019 Igor Gnatenko - 1.9-2 - Rebuild for RPM 4.15 --------------------------------------------------------------------------------References: [ 1 ] Bug #1749219 - CVE-2019-15531 libextractor: heap-based buffer over-read in function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1749219 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-62b65ed7f6' at the command line. For more information, referto the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 13, 2019
•Critical
Fedora
197
security advisorysecurity issuedebianDebian: DLA-1904-1 Critical: libextractor Heap Overflow
jianglin found an issue in libextractor, a library that extracts meta-data from files of arbitrary type. . Package : libextractor Version : 1:1.3-2+deb8u5 CVE ID : CVE-2019-15531 jianglin found an issue in libextractor, a library that extracts meta-data from files of arbitrary type. A crafted file could result in a heap-buffer-overflow vulnerability in function EXTRACTOR_dvi_extract_method in dvi_extractor.c. For Debian 8 "Jessie", this problem has been fixed in version 1:1.3-2+deb8u5. We recommend that you upgrade your libextractor packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS DLA-1904-1 (END) . Enhance libextractor to address heap-buffer-overflow security flaws. Check the advisory details, relevant information, and available updates.. libextractor Update, Debian LTS Patch, Heap Overflow Security Issue. . Severity: Critical. LinuxSecurity.com Team
Aug 30, 2019
•Critical
Debian LTS
203
security advisoryupdatememory disclosureMageia 6: MGASA-2019-0013 Moderate: Libextractor Memory Disclosure
Several vulnerabilities were discovered in libextractor which may lead to denial of service or memory disclosure if a malformed OLE file is processed (CVE-2018-20430, CVE-2018-20431). References: . MGASA-2019-0013 - Updated libextractor packages fix security vulnerabilities Publication date: 05 Jan 2019 URL: https://advisories.mageia.org/MGASA-2019-0013.html Type: security Affected Mageia releases: 6 CVE: CVE-2018-20430, CVE-2018-20431 Several vulnerabilities were discovered in libextractor which may lead to denial of service or memory disclosure if a malformed OLE file is processed (CVE-2018-20430, CVE-2018-20431). References: - https://bugs.mageia.org/show_bug.cgi?id=24093 - https://lists.debian.org/debian-security-announce/2018/msg00294.html - https://www.cve.org/CVERecord?id=CVE-2018-20430 - https://www.cve.org/CVERecord?id=CVE-2018-20431 SRPMS: - 6/core/libextractor-1.7-1.1.mga6 . Revised libextractor distributions tackle vulnerabilities causing potential denial of service and leakage of memory information.. Mageia, Libextractor Security Update, Denial of Service, Memory Disclosure. . Severity: Important. LinuxSecurity.com Team
Jan 05, 2019
•Important
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!