Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 26 articles for you...
172

Ubuntu: 6407-2 Moderate: libx11 Denial Of Service and Risks

Several security issues were fixed in libx11.. ========================================================================== Ubuntu Security Notice USN-6407-2 October 10, 2023 libx11 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) - Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: Several security issues were fixed in libx11. Software Description: - libx11: X11 client-side library Details: USN-6407-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Gregory James Duck discovered that libx11 incorrectly handled certain keyboard symbols. If a user were tricked into connecting to a malicious X server, a remote attacker could use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-43785) Yair Mizrahi discovered that libx11 incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to consume memory, leading to a denial of service. (CVE-2023-43786) Yair Mizrahi discovered that libx11 incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could use this issue to cause libx11 to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2023-43787) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS (Available with Ubuntu Pro): libx11-6 2:1.6.4-3ubuntu0.4+esm2 Ubuntu 16.04 LTS (Available with Ubuntu Pro): libx11-6 2:1.6.3-1ubuntu2.2+esm4 Ubuntu 14.04LTS (Available with Ubuntu Pro): libx11-6 2:1.6.2-1ubuntu2.1+esm5 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6407-2 https://ubuntu.com/security/notices/USN-6407-1 CVE-2023-43785, CVE-2023-43786, CVE-2023-43787 . Explore the latest Ubuntu Security Notice USN-6407-3, which tackles vulnerabilities in libx11 impacting various versions.. libx11 Issues, Remote Code Execution, Denial Of Service, Ubuntu Advisory. . LinuxSecurity.com Team

Calendar%202 Oct 10, 2023 Ubuntu
87

Debian: DSA-5517-1 High: libx11 Code Execution And DoS Risk

Multiple security vulnerabilities were discovered in libx11, the X11 client-side library, which may result in denial of service or the execution of arbitrary code. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5517-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff October 05, 2023 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libx11 CVE ID : CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 Multiple security vulnerabilities were discovered in libx11, the X11 client-side library, which may result in denial of service or the execution of arbitrary code. For the oldstable distribution (bullseye), these problems have been fixed in version 2:1.7.2-1+deb11u2. For the stable distribution (bookworm), these problems have been fixed in version 2:1.8.4-2+deb12u2. We recommend that you upgrade your libx11 packages. For the detailed security status of libx11 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libx11 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Attention Debian users: A critical security issue has been detected in libx11 affecting system integrity. Update your packages promptly to mitigate this risk.. libx11 security, debian advisory, code execution fix, service disruption update. . LinuxSecurity.com Team

Calendar%202 Oct 05, 2023 Debian
197

Debian 10 Buster DLA-3602-1 Moderate: LibX11 Memory Issues DoS Risk

Several vulnerabilities were found in libx11, the X11 client-side library. CVE-2023-43785 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3602-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 05, 2023 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : libx11 Version : 2:1.6.7-1+deb10u4 CVE ID : CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 Several vulnerabilities were found in libx11, the X11 client-side library. CVE-2023-43785 Gregory James Duck discovered an out of bounds memory access in _XkbReadKeySyms, which could result in denial of service. CVE-2023-43786 Yair Mizrahi found an infinite recursion in PutSubImage when parsing a crafted file, which would result in stack exhaustion and denial of service. CVE-2023-43787 Yair Mizrahi discovered an integer overflow in XCreateImage when parsing crafted input, which would result in a small buffer allocation leading into a buffer overflow. This could result in denial of service or potentially in arbitrary code execution. For Debian 10 buster, these problems have been fixed in version 2:1.6.7-1+deb10u4. We recommend that you upgrade your libx11 packages. For the detailed security status of libx11 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libx11 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Addressing multiple security flaws in Debian LTS libx11 through vital critical patches. LibX11 Security, Debian Updates, Denial Of Service, Buffer Overflow. . LinuxSecurity.com Team

Calendar%202 Oct 05, 2023 Debian LTS
172

Ubuntu: USN-6407-1 Moderate Vulnerability in libx11 Denial Of Service

Several security issues were fixed in libx11.. ========================================================================== Ubuntu Security Notice USN-6407-1 October 03, 2023 libx11 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.04 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in libx11. Software Description: - libx11: X11 client-side library Details: Gregory James Duck discovered that libx11 incorrectly handled certain keyboard symbols. If a user were tricked into connecting to a malicious X server, a remote attacker could use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-43785) Yair Mizrahi discovered that libx11 incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to consume memory, leading to a denial of service. (CVE-2023-43786) Yair Mizrahi discovered that libx11 incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could use this issue to cause libx11 to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2023-43787) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.04: libx11-6 2:1.8.4-2ubuntu0.3 Ubuntu 22.04 LTS: libx11-6 2:1.7.5-1ubuntu0.3 Ubuntu 20.04 LTS: libx11-6 2:1.6.9-2ubuntu1.6 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6407-1 CVE-2023-43785, CVE-2023-43786, CVE-2023-43787 Package Information: https://launchpad.net/ubuntu/+source/libx11/2:1.8.4-2ubuntu0.3 https://launchpad.net/ubuntu/+source/libx11/2:1.7.5-1ubuntu0.3 https://launchpad.net/ubuntu/+source/libx11/2:1.6.9-2ubuntu1.6 . Multiple libx11 vulnerabilities addressed for Ubuntu versions 20.04, 22.04, and 23.04 LTS. Update promptly to prevent service disruptions.. libx11 Security, Ubuntu Denial Of Service, Ubuntu Patch, Security Update, Software Fix. . LinuxSecurity.com Team

Calendar%202 Oct 03, 2023 Ubuntu
197

Debian 10 Buster: DLA-3472-1 Critical Libx11 Denial of Service Issue

Missing input validation in various functions may have resulted in denial of service in various functions provided by libx11, the X11 client-side library. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3472-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk June 26, 2023 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : libx11 Version : 2:1.6.7-1+deb10u3 CVE ID : CVE-2023-3138 Debian Bug : 1038133 Missing input validation in various functions may have resulted in denial of service in various functions provided by libx11, the X11 client-side library. For Debian 10 buster, this problem has been fixed in version 2:1.6.7-1+deb10u3. We recommend that you upgrade your libx11 packages. For the detailed security status of libx11 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libx11 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance libx11 to address input verification vulnerabilities that might result in denial of service incidents on Debian platforms.. libx11 Security Patch, Debian LTS Update, Input Validation Fix, Denial of Service Prevention. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 26, 2023 Critical Debian LTS
87

Debian: DSA-5433-1 Moderate: libx11 Denial Of Service Issue

Gregory James Duck reported that missing input validation in various functions provided by libx11, the X11 client-side library, may result in denial of service. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5433-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso June 21, 2023 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libx11 CVE ID : CVE-2023-3138 Debian Bug : 1038133 Gregory James Duck reported that missing input validation in various functions provided by libx11, the X11 client-side library, may result in denial of service. For the oldstable distribution (bullseye), this problem has been fixed in version 2:1.7.2-1+deb11u1. For the stable distribution (bookworm), this problem has been fixed in version 2:1.8.4-2+deb12u1. We recommend that you upgrade your libx11 packages. For the detailed security status of libx11 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/libx11 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Debian security notice highlights an essential libx11 patch aimed at resolving input validation vulnerabilities that lead to potential service disruptions.. Debian Security Advisory, libx11 Update, Denial of Service. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 21, 2023 Important Debian
172

Ubuntu 16.04, 18.04, 14.04 LTS USN-6168-2 Libx11 DoS Issue

libx11 could be made to crash if it received specially crafted network traffic.. =========================================================================Ubuntu Security Notice USN-6168-2 June 20, 2023 libx11 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) - Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: libx11 could be made to crash if it received specially crafted network traffic. Software Description: - libx11: X11 client-side library Details: USN-6168-1 fixed a vulnerability in libx11. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. Original advisory details: Gregory James Duck discovered that libx11 incorrectly handled certain Request, Event, or Error IDs. If a user were tricked into connecting to a malicious X Server, a remote attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS (Available with Ubuntu Pro): libx11-6 2:1.6.4-3ubuntu0.4+esm1 Ubuntu 16.04 LTS (Available with Ubuntu Pro): libx11-6 2:1.6.3-1ubuntu2.2+esm2 Ubuntu 14.04 LTS (Available with Ubuntu Pro): libx11-6 2:1.6.2-1ubuntu2.1+esm3 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6168-2 https://ubuntu.com/security/notices/USN-6168-1 CVE-2023-3138 . Explore the USN-6168-2 notification regarding security flaws in libx11 that impact Ubuntu systems. Find out about the specifics of the update and its level of risk.. libx11, Denial Of Service, Ubuntu Advisory, Security Issues. . Severity: Critical.LinuxSecurity.com Team

Calendar%202 Jun 20, 2023 Critical Ubuntu
89

Ubuntu 23: 2023-abc12de345 Critical: libX12 Memory Corruption

libX11 1.8.6 (CVE-2023-3138). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-7503ce855c 2023-06-18 01:29:01.914214 --------------------------------------------------------------------------------Name : libX11 Product : Fedora 38 Version : 1.8.6 Release : 1.fc38 URL : https://www.x.org/wiki/ Summary : Core X11 protocol client library Description : Core X11 protocol client library. --------------------------------------------------------------------------------Update Information: libX11 1.8.6 (CVE-2023-3138) --------------------------------------------------------------------------------ChangeLog: * Fri Jun 16 2023 Peter Hutterer - 1.8.6-1 - libX11 1.8.6 (CVE-2023-3138) * Mon Jun 5 2023 Peter Hutterer 1.8.5-1 - libX11 1.8.5 --------------------------------------------------------------------------------References: [ 1 ] Bug #2213748 - CVE-2023-3138 libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=2213748 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-7503ce855c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . libgtk 4.10.2 for Ubuntu 22.04 resolves a critical memory corruption vulnerability identified as CVE-2023-4567. Update to enhance protection.. Fedora 38, libX11, buffer overflow fix, security patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 18, 2023 Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200