Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

Stay Secure with the Latest Linux Advisories

Opensuse Large Esm H800
openSUSE

openSUSE Chromium Important Use After Free Vulnerabilities Vuln 2026-0254-1

Calendar White Jul 19, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 python-asyncssh Critical Unauthorized Access Fix 2026-574496d9ae

Calendar White Jul 19, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 44 libseccomp Important Buffer Overflow Issues 2026-752186819e

Calendar White Jul 19, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 44 python-asyncssh Important Unauthorized File Write CVE-2026-54590

Calendar White Jul 19, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 mbedtls 3.6.7 Critical Update DoS Buffer Overflow Fixes

Calendar White Jul 19, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE python-django-haystack Important Remote Code Exec Vuln 2026-0252-1

Calendar White Jul 19, 2026
Important
Debian Large Esm H800
Debian

Debian tiff Critical Denial of Service or Code Exec Advisory DSA-6392-1

Calendar White Jul 19, 2026
Critical
Debian Large Esm H900
Debian

Debian Roundcube Critical Account Takeover Denial of Service Fix DSA-6391-1

Calendar White Jul 19, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Python-Weasyprint Moderate CSS Injection CVE-2026-49452

Calendar White Jul 19, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 40 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

SUSE Linux Enterprise 15 SP6 Important Kernel Fix CVE-2026-23268

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:1527-1 Release Date: 2026-04-21T10:34:38Z Rating: important References: * bsc#1259859 Cross-References: * CVE-2026-23268 CVSS scores: * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.84 fixes one security issue The following security issue was fixed: * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1527=1 SUSE-2026-1528=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-1527=1 SUSE-SLE- Module-Live-Patching-15-SP6-2026-1528=1 ## Package List: * openSUSE Leap 15.6 (x86_64) * kernel-livepatch-SLE15-SP6_Update_18-debugsource-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-4-150600.2.1 *kernel-livepatch-SLE15-SP6_Update_19-debugsource-4-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x) * kernel-livepatch-SLE15-SP6_Update_19-debugsource-4-150600.2.2 * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-4-150600.2.2 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-4-150600.2.2 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-4-150600.2.2 * kernel-livepatch-6_4_0-150600_23_84-default-4-150600.2.2 * kernel-livepatch-6_4_0-150600_23_81-default-4-150600.2.2 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x) * kernel-livepatch-SLE15-SP6_Update_19-debugsource-4-150600.2.2 * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-4-150600.2.2 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-4-150600.2.2 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-4-150600.2.2 * kernel-livepatch-6_4_0-150600_23_84-default-4-150600.2.2 * kernel-livepatch-6_4_0-150600_23_81-default-4-150600.2.2 * SUSE Linux Enterprise Live Patching 15-SP6 (x86_64) * kernel-livepatch-SLE15-SP6_Update_18-debugsource-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-4-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . Update resolves critical kernel issue, enhance your SUSE Linux performance with important updates for security.. SUSE Kernel Patch, Linux Security Update, Live Patch Instructions. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 21, 2026 •Important SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

SUSE Linux Enterprise 15 SP6 Kernel Important Advisory 2026-1463-1

An update that solves two vulnerabilities can now be installed.. # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:1463-1 Release Date: 2026-04-20T06:34:20Z Rating: important References: * bsc#1255066 * bsc#1259859 Cross-References: * CVE-2025-40309 * CVE-2026-23268 CVSS scores: * CVE-2025-40309 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: * CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1463=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-1463=1 ## Package List: * openSUSE Leap 15.6 (x86_64) * kernel-livepatch-6_4_0-150600_23_53-default-debuginfo-15-150600.2.1 *kernel-livepatch-SLE15-SP6_Update_12-debugsource-15-150600.2.1 * kernel-livepatch-6_4_0-150600_23_53-default-15-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x) * kernel-livepatch-6_4_0-150600_23_53-default-debuginfo-15-150600.2.2 * kernel-livepatch-6_4_0-150600_23_53-default-15-150600.2.2 * kernel-livepatch-SLE15-SP6_Update_12-debugsource-15-150600.2.2 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x) * kernel-livepatch-6_4_0-150600_23_53-default-debuginfo-15-150600.2.2 * kernel-livepatch-6_4_0-150600_23_53-default-15-150600.2.2 * kernel-livepatch-SLE15-SP6_Update_12-debugsource-15-150600.2.2 * SUSE Linux Enterprise Live Patching 15-SP6 (x86_64) * kernel-livepatch-6_4_0-150600_23_53-default-debuginfo-15-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_12-debugsource-15-150600.2.1 * kernel-livepatch-6_4_0-150600_23_53-default-15-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40309.html * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1255066 * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . Update for SUSE Linux Enterprise Kernel addresses critical security issues and recommends swift patching for vulnerabilities.. SUSE Linux, Kernel Update, Security Issues, Live Patching, Important Update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 20, 2026 •Important SuSE
Banner 2 1028x280 1708121730 1 1771599631
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderatedenial of service

SUSE: cups Moderate Local DoS CVE-2025-61915 Advisory 2025:4289-1

* bsc#1253783 Cross-References: * CVE-2025-61915 . # Security update for cups Announcement ID: SUSE-SU-2025:4289-1 Release Date: 2025-11-28T08:50:37Z Rating: moderate References: * bsc#1253783 Cross-References: * CVE-2025-61915 CVSS scores: * CVE-2025-61915 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-61915 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cups fixes the following issues: * CVE-2025-61915: Fixed local denial-of-service via cupsd.conf update (bsc#1253783) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-4289=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cups-client-debuginfo-1.7.5-20.57.1 * cups-1.7.5-20.57.1 * cups-libs-1.7.5-20.57.1 * cups-libs-debuginfo-32bit-1.7.5-20.57.1 * cups-debuginfo-1.7.5-20.57.1 * cups-libs-32bit-1.7.5-20.57.1 * cups-libs-debuginfo-1.7.5-20.57.1 * cups-devel-1.7.5-20.57.1 * cups-client-1.7.5-20.57.1 * cups-debugsource-1.7.5-20.57.1 ## References: * https://www.suse.com/security/cve/CVE-2025-61915.html * https://bugzilla.suse.com/show_bug.cgi?id=1253783 . Important SUSE security update for cups addressing local denial-of-service from CVE-2025-61915. Install recommended patch.. SUSE cups update security moderate CVE-2025-61915. . LinuxSecurity.com Team

Calendar%202 Nov 28, 2025 SuSE
91
Ls Advisories Gentoo Esm H240
Price Tag%201security advisorydenial of servicegentoo

Gentoo: GLSA-202007-46 Normal: D-Bus Denial of Service Risk

A local Denial of Service vulnerability was discovered in D-Bus.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202007-46 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: D-Bus: Denial of service Date: July 27, 2020 Bugs: #727104 ID: 202007-46 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A local Denial of Service vulnerability was discovered in D-Bus. Background ========= D-Bus is a message bus system which processes can use to talk to each other. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-apps/dbus < 1.12.18 > = 1.12.18 Description ========== D-Bus does not correctly dispose of old connections meaning that it is possible for D-Bus to hit a connection limit. Impact ===== An attacker could cause a possible Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All D-Bus users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =sys-apps/dbus-1.12.18" References ========= [ 1 ] CVE-2020-12049 https://nvd.nist.gov/vuln/detail/CVE-2020-12049 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202007-46 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressedto This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2020 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . A significant Denial of Service flaw in D-Bus has been discovered on Gentoo platforms. Promptly update to maintain system integrity.. Denial of Service, Gentoo, D-Bus, Security Advisory, Upgrade. . LinuxSecurity.com Team

Calendar%202 Jul 26, 2020 Gentoo
Banner 2 1028x280 1708121730 1 1771599631
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorypatchimportant

SUSE: 2020:1790-1 Important: Local Root Exploit Fix for Tomcat

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for tomcat ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:1790-1 Rating: important References: #1172405 Cross-References: CVE-2020-8022 Affected Products: SUSE Linux Enterprise Module for Web Scripting 15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tomcat fixes the following issues: - CVE-2020-8022: Fixed a local root exploit due to improper permissions (bsc#1172405) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Web Scripting 15-SP1: zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP1-2020-1790=1 Package List: - SUSE Linux Enterprise Module for Web Scripting 15-SP1 (noarch): tomcat-9.0.35-4.35.1 tomcat-admin-webapps-9.0.35-4.35.1 tomcat-el-3_0-api-9.0.35-4.35.1 tomcat-jsp-2_3-api-9.0.35-4.35.1 tomcat-lib-9.0.35-4.35.1 tomcat-servlet-4_0-api-9.0.35-4.35.1 tomcat-webapps-9.0.35-4.35.1 References: https://www.suse.com/security/cve/CVE-2020-8022.html https://bugzilla.suse.com/1172405 _______________________________________________ sle-security-updates mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. http://lists.suse.com/mailman/listinfo/sle-security-updates . SUSE Security Patch for Tomcat mitigates a potential local privilege escalation issue, reinforcing system security and stability.. SUSE Security Update, Tomcat Patch, Local Root Exploit, Important Update. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 26, 2020 •Important SuSE
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorymoderatesecurity issue

Debian: 3142-2 Moderate: Ansible Security Vulnerabilities Resolution Notice

Several vulnerabilities were discovered in puppet, a centralized configuration management system. The Common Vulnerabilities and Exposures project identifies the following problems: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2761-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Raphael Geissert September 19, 2013 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : puppet Vulnerability : several Problem type : local Debian-specific: no CVE ID : CVE-2013-4761 CVE-2013-4956 Several vulnerabilities were discovered in puppet, a centralized configuration management system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-4761 The 'resource_type' service (disabled by default) could be used to make puppet load arbitrary Ruby code from puppet master's file system. CVE-2013-4956 Modules installed with the Puppet Module Tool might be installed with weak permissions, possibly allowing local users to read or modify them. The stable distribution (wheezy) has been updated to version 2.7.33 of puppet. This version includes the patches for all the previous DSAs related to puppet in wheezy. In this version, the puppet report format is now correctly reported as version 3. It is to be expected that future DSAs for puppet update to a newer, bug fix-only, release of the 2.7 branch. The oldstable distribution (squeeze) has not been updated for this advisory: as of this time there is no fix for CVE-2013-4761 and the package is not affected by CVE-2013-4956. For the stable distribution (wheezy), these problems have been fixed in version 2.7.23-1~deb7u1. For the testing distribution (jessie) and the unstable distribution (sid), these problems have been fixed in version 3.2.4-1. We recommend thatyou upgrade your puppet packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian has released an update for Puppet that resolves several security issues. To maintain the integrity of your system, make sure to install the latest updates promptly.. Puppet Security Advisory, Debian Update, Local Exploits, Configuration Issues. . LinuxSecurity.com Team

Calendar%202 Sep 19, 2013 Debian
Banner 2 1028x280 1708121730 1 1771599631
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticaldebian

Debian 4:0.5.9-1 Critical: Ffmpeg Codec Security Problems

It was discovered that ffmpeg, Debian's version of the libav media codec suite, contains vulnerabilities in the DPCM codecs (CVE-2011-3951), H.264 (CVE-2012-0851), ADPCM (CVE-2012-0852), and the KMVC decoder (CVE-2011-3952). . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2494-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Florian Weimer June 14, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : ffmpeg Vulnerability : several Problem type : local (remote) Debian-specific: no CVE ID : CVE-2011-3951 CVE-2011-3952 CVE-2012-0851 CVE-2012-0852 It was discovered that ffmpeg, Debian's version of the libav media codec suite, contains vulnerabilities in the DPCM codecs (CVE-2011-3951), H.264 (CVE-2012-0851), ADPCM (CVE-2012-0852), and the KMVC decoder (CVE-2011-3952). In addition, this update contains bug fixes from the libav 0.5.9 upstream release. For the stable distribution (squeeze), these problems have been fixed in version 4:0.5.9-1. For the unstable distribution (sid), these problems have been fixed in version 6:0.8.3-1. We recommend that you upgrade your ffmpeg packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . An update has been rolled out for Debian's ffmpeg that tackles several codec security flaws along with enhancements for overall performance.. Debian Security, Ffmpeg Update, Codec Issues, Media Codec Suite, Bug Fixes. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 14, 2012 •Critical Debian
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorycriticalcode execution

Debian: DSA-2388-1 Critical: T1lib Local Code Execution

Several vulnerabilities were discovered in t1lib, a Postscript Type 1 font rasterizer library, some of which might lead to code execution through the opening of files embedding bad fonts. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2388-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Yves-Alexis Perez January 14, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : t1lib Vulnerability : several Problem type : local Debian-specific: no CVE ID : CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554 Debian Bug : 652996 Several vulnerabilities were discovered in t1lib, a Postscript Type 1 font rasterizer library, some of which might lead to code execution through the opening of files embedding bad fonts. CVE-2010-2642 A heap-based buffer overflow in the AFM font metrics parser potentially leads to the execution of arbitrary code. CVE-2011-0433 Another heap-based buffer overflow in the AFM font metrics parser potentially leads to the execution of arbitrary code. CVE-2011-0764 An invalid pointer dereference allows execution of arbitrary code using crafted Type 1 fonts. CVE-2011-1552 Another invalid pointer dereference results in an application crash, triggered by crafted Type 1 fonts. CVE-2011-1553 A use-after-free vulnerability results in an application crash, triggered by crafted Type 1 fonts. CVE-2011-1554 An off-by-one error results in an invalid memory read and application crash, triggered by crafted Type 1 fonts. For the oldstable distribution (lenny), this problem has been fixed in version 5.1.2-3+lenny1. For the stable distribution (squeeze), this problem has been fixed in version 5.1.2-3+squeeze1. For the testing distribution (wheezy), this problem has been fixedin version 5.1.2-3.3. For the unstable distribution (sid), this problem has been fixed in version 5.1.2-3.3. We recommend that you upgrade your t1lib packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------. vulnerabilities, t1lib, postscript, rasterizer, library. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jan 15, 2012 •Critical Debian
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics