Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
100
security advisorymoderateDoSSUSE Linux 12-SP3: 2018:3102-1 Moderate: libX11 DoS Risks
An update that solves three vulnerabilities and has one errata is now available. . SUSE Security Update: Security update for libX11 and libxcb ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:3102-1 Rating: moderate References: #1094327 #1102062 #1102068 #1102073 Cross-References: CVE-2018-14598 CVE-2018-14599 CVE-2018-14600 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for libX11 and libxcb fixes the following issue: libX11: These security issues were fixed: - CVE-2018-14599: The function XListExtensions was vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact (bsc#1102062). - CVE-2018-14600: The function XListExtensions interpreted a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution (bsc#1102068). - CVE-2018-14598: A malicious server could have sent a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault) (bsc#1102073). This non-security issue was fixed: - Make use of the new 64-bit sequence number API in XCB 1.11.1 to avoid the 32-bit sequence number wrap in libX11 (bsc#1094327). libxcb: - Expose 64-bit sequence number from XCB API so that Xlib and others can use it even on 32-bit environment. (bsc#1094327) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods likeYaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP3: zypper in -t patch SUSE-SLE-SDK-12-SP3-2018-2202=1 - SUSE Linux Enterprise Server 12-SP3: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-2202=1 - SUSE Linux Enterprise Desktop 12-SP3: zypper in -t patch SUSE-SLE-DESKTOP-12-SP3-2018-2202=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP3 (aarch64 ppc64le s390x x86_64): libX11-debugsource-1.6.2-12.5.1 libX11-devel-1.6.2-12.5.1 libxcb-composite0-1.10-4.3.1 libxcb-composite0-debuginfo-1.10-4.3.1 libxcb-damage0-1.10-4.3.1 libxcb-damage0-debuginfo-1.10-4.3.1 libxcb-debugsource-1.10-4.3.1 libxcb-devel-1.10-4.3.1 libxcb-dpms0-1.10-4.3.1 libxcb-dpms0-debuginfo-1.10-4.3.1 libxcb-dri3-0-1.10-4.3.1 libxcb-dri3-0-debuginfo-1.10-4.3.1 libxcb-present0-1.10-4.3.1 libxcb-present0-debuginfo-1.10-4.3.1 libxcb-record0-1.10-4.3.1 libxcb-record0-debuginfo-1.10-4.3.1 libxcb-res0-1.10-4.3.1 libxcb-res0-debuginfo-1.10-4.3.1 libxcb-screensaver0-1.10-4.3.1 libxcb-screensaver0-debuginfo-1.10-4.3.1 libxcb-xevie0-1.10-4.3.1 libxcb-xevie0-debuginfo-1.10-4.3.1 libxcb-xinerama0-1.10-4.3.1 libxcb-xinerama0-debuginfo-1.10-4.3.1 libxcb-xprint0-1.10-4.3.1 libxcb-xprint0-debuginfo-1.10-4.3.1 libxcb-xtest0-1.10-4.3.1 libxcb-xtest0-debuginfo-1.10-4.3.1 libxcb-xvmc0-1.10-4.3.1 libxcb-xvmc0-debuginfo-1.10-4.3.1 - SUSE Linux Enterprise Software Development Kit 12-SP3 (noarch): libxcb-devel-doc-1.10-4.3.1 - SUSE Linux Enterprise Server 12-SP3 (aarch64 ppc64le s390x x86_64): libX11-6-1.6.2-12.5.1 libX11-6-debuginfo-1.6.2-12.5.1 libX11-debugsource-1.6.2-12.5.1 libX11-xcb1-1.6.2-12.5.1 libX11-xcb1-debuginfo-1.6.2-12.5.1 libxcb-debugsource-1.10-4.3.1 libxcb-dri2-0-1.10-4.3.1 libxcb-dri2-0-debuginfo-1.10-4.3.1 libxcb-dri3-0-1.10-4.3.1 libxcb-dri3-0-debuginfo-1.10-4.3.1 libxcb-glx0-1.10-4.3.1 libxcb-glx0-debuginfo-1.10-4.3.1 libxcb-present0-1.10-4.3.1 libxcb-present0-debuginfo-1.10-4.3.1 libxcb-randr0-1.10-4.3.1 libxcb-randr0-debuginfo-1.10-4.3.1 libxcb-render0-1.10-4.3.1 libxcb-render0-debuginfo-1.10-4.3.1 libxcb-shape0-1.10-4.3.1 libxcb-shape0-debuginfo-1.10-4.3.1 libxcb-shm0-1.10-4.3.1 libxcb-shm0-debuginfo-1.10-4.3.1 libxcb-sync1-1.10-4.3.1 libxcb-sync1-debuginfo-1.10-4.3.1 libxcb-xf86dri0-1.10-4.3.1 libxcb-xf86dri0-debuginfo-1.10-4.3.1 libxcb-xfixes0-1.10-4.3.1 libxcb-xfixes0-debuginfo-1.10-4.3.1 libxcb-xinerama0-1.10-4.3.1 libxcb-xinerama0-debuginfo-1.10-4.3.1 libxcb-xkb1-1.10-4.3.1 libxcb-xkb1-debuginfo-1.10-4.3.1 libxcb-xv0-1.10-4.3.1 libxcb-xv0-debuginfo-1.10-4.3.1 libxcb1-1.10-4.3.1 libxcb1-debuginfo-1.10-4.3.1 - SUSE Linux Enterprise Server 12-SP3 (s390x x86_64): libX11-6-32bit-1.6.2-12.5.1 libX11-6-debuginfo-32bit-1.6.2-12.5.1 libX11-xcb1-32bit-1.6.2-12.5.1 libX11-xcb1-debuginfo-32bit-1.6.2-12.5.1 libxcb-dri2-0-32bit-1.10-4.3.1 libxcb-dri2-0-debuginfo-32bit-1.10-4.3.1 libxcb-dri3-0-32bit-1.10-4.3.1 libxcb-dri3-0-debuginfo-32bit-1.10-4.3.1 libxcb-glx0-32bit-1.10-4.3.1 libxcb-glx0-debuginfo-32bit-1.10-4.3.1 libxcb-present0-32bit-1.10-4.3.1 libxcb-present0-debuginfo-32bit-1.10-4.3.1 libxcb-render0-32bit-1.10-4.3.1 libxcb-render0-debuginfo-32bit-1.10-4.3.1 libxcb-shm0-32bit-1.10-4.3.1 libxcb-shm0-debuginfo-32bit-1.10-4.3.1 libxcb-sync1-32bit-1.10-4.3.1 libxcb-sync1-debuginfo-32bit-1.10-4.3.1 libxcb-xfixes0-32bit-1.10-4.3.1 libxcb-xfixes0-debuginfo-32bit-1.10-4.3.1 libxcb-xkb1-32bit-1.10-4.3.1 libxcb-xkb1-debuginfo-32bit-1.10-4.3.1 libxcb1-32bit-1.10-4.3.1 libxcb1-debuginfo-32bit-1.10-4.3.1 - SUSE Linux Enterprise Server 12-SP3 (noarch): libX11-data-1.6.2-12.5.1 - SUSE Linux Enterprise Desktop 12-SP3 (x86_64): libX11-6-1.6.2-12.5.1 libX11-6-32bit-1.6.2-12.5.1 libX11-6-debuginfo-1.6.2-12.5.1 libX11-6-debuginfo-32bit-1.6.2-12.5.1 libX11-debugsource-1.6.2-12.5.1 libX11-xcb1-1.6.2-12.5.1 libX11-xcb1-32bit-1.6.2-12.5.1 libX11-xcb1-debuginfo-1.6.2-12.5.1 libX11-xcb1-debuginfo-32bit-1.6.2-12.5.1 libxcb-debugsource-1.10-4.3.1 libxcb-dri2-0-1.10-4.3.1 libxcb-dri2-0-32bit-1.10-4.3.1 libxcb-dri2-0-debuginfo-1.10-4.3.1 libxcb-dri2-0-debuginfo-32bit-1.10-4.3.1 libxcb-dri3-0-1.10-4.3.1 libxcb-dri3-0-32bit-1.10-4.3.1 libxcb-dri3-0-debuginfo-1.10-4.3.1 libxcb-dri3-0-debuginfo-32bit-1.10-4.3.1 libxcb-glx0-1.10-4.3.1 libxcb-glx0-32bit-1.10-4.3.1 libxcb-glx0-debuginfo-1.10-4.3.1 libxcb-glx0-debuginfo-32bit-1.10-4.3.1 libxcb-present0-1.10-4.3.1 libxcb-present0-32bit-1.10-4.3.1 libxcb-present0-debuginfo-1.10-4.3.1 libxcb-present0-debuginfo-32bit-1.10-4.3.1 libxcb-randr0-1.10-4.3.1 libxcb-randr0-debuginfo-1.10-4.3.1 libxcb-render0-1.10-4.3.1 libxcb-render0-32bit-1.10-4.3.1 libxcb-render0-debuginfo-1.10-4.3.1 libxcb-render0-debuginfo-32bit-1.10-4.3.1 libxcb-shape0-1.10-4.3.1 libxcb-shape0-debuginfo-1.10-4.3.1 libxcb-shm0-1.10-4.3.1 libxcb-shm0-32bit-1.10-4.3.1 libxcb-shm0-debuginfo-1.10-4.3.1 libxcb-shm0-debuginfo-32bit-1.10-4.3.1 libxcb-sync1-1.10-4.3.1 libxcb-sync1-32bit-1.10-4.3.1 libxcb-sync1-debuginfo-1.10-4.3.1 libxcb-sync1-debuginfo-32bit-1.10-4.3.1 libxcb-xf86dri0-1.10-4.3.1 libxcb-xf86dri0-debuginfo-1.10-4.3.1 libxcb-xfixes0-1.10-4.3.1 libxcb-xfixes0-32bit-1.10-4.3.1 libxcb-xfixes0-debuginfo-1.10-4.3.1 libxcb-xfixes0-debuginfo-32bit-1.10-4.3.1 libxcb-xinerama0-1.10-4.3.1 libxcb-xinerama0-debuginfo-1.10-4.3.1 libxcb-xkb1-1.10-4.3.1 libxcb-xkb1-32bit-1.10-4.3.1 libxcb-xkb1-debuginfo-1.10-4.3.1 libxcb-xkb1-debuginfo-32bit-1.10-4.3.1 libxcb-xv0-1.10-4.3.1 libxcb-xv0-debuginfo-1.10-4.3.1 libxcb1-1.10-4.3.1 libxcb1-32bit-1.10-4.3.1 libxcb1-debuginfo-1.10-4.3.1 libxcb1-debuginfo-32bit-1.10-4.3.1 - SUSE Linux Enterprise Desktop 12-SP3 (noarch): libX11-data-1.6.2-12.5.1 References: https://www.suse.com/security/cve/CVE-2018-14598.html https://www.suse.com/security/cve/CVE-2018-14599.html https://www.suse.com/security/cve/CVE-2018-14600.html https://bugzilla.suse.com/1094327 https://bugzilla.suse.com/1102062 https://bugzilla.suse.com/1102068 https://bugzilla.suse.com/1102073 _______________________________________________ sle-security-updates mailing list
Oct 12, 2018 SuSE 172
security advisorydenial of servicecriticalUbuntu 13.04 USN-1855-1 Critical Libxcb Denial of Service
Several security issues were fixed in libxcb.. =========================================================================Ubuntu Security Notice USN-1855-1 June 05, 2013 libxcb vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 13.04 - Ubuntu 12.10 - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: Several security issues were fixed in libxcb. Software Description: - libxcb: X C Binding Details: Ilja van Sprundel discovered multiple security issues in various X.org libraries and components. An attacker could use these issues to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 13.04: libxcb1 1.8.1-2ubuntu2.1 Ubuntu 12.10: libxcb1 1.8.1-1ubuntu1.1 Ubuntu 12.04 LTS: libxcb1 1.8.1-1ubuntu0.2 Ubuntu 10.04 LTS: libxcb1 1.5-2ubuntu0.1 After a standard system update you need to restart your session to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1855-1 CVE-2013-2064 Package Information: https://launchpad.net/ubuntu/+source/libxcb/1.8.1-2ubuntu2.1 https://launchpad.net/ubuntu/+source/libxcb/1.8.1-1ubuntu1.1 https://launchpad.net/ubuntu/+source/libxcb/1.8.1-1ubuntu0.2 https://launchpad.net/ubuntu/+source/libxcb/1.5-2ubuntu0.1 . Several vulnerabilities patched in libxcb mitigate risks of service disruption and possible code execution threats for Ubuntu platforms.. libxcb issues, Ubuntu updates, security notices. . Severity: Critical. LinuxSecurity.com Team
Jun 05, 2013 •Critical Ubuntu 
87
security advisorydenial of servicebuffer overflowDebian: DSA-2686-1 Critical: Libxcb Buffer Overflow DoS Risk
Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2686-1
May 23, 2013 •Critical Debian 
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!