Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 13 articles for you...
172
security advisorydenial of serviceUbuntuUbuntu 24.04 LTS GIMP Security Advisory USN-8075-1 Denial of Service
Several security issues were fixed in GIMP.. ========================================================================== Ubuntu Security Notice USN-8075-1 March 04, 2026 gimp vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in GIMP. Software Description: - gimp: GNU Image Manipulation Program Details: Michael Randrianantenaina discovered that calculating the linear size of a DDS file could overflow on 32-bit systems. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2025-2760) Michael Randrianantenaina discovered that GIMP did not perform any bounds checking when calculating an offset into XWD Colormaps. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-10934) It was discovered that GIMP's PNM loader did not sufficiently check that the image could fit within the allocated memory, which could cause GIMP to read or write out-of-bounds. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-14422) It was discovered that maliciously-crafted TGA files could cause memory corruption and leave GIMP in an inconsistent state. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-48797) It was discovered that a maliciously-crafted XCF file could cause GIMP to free the same memory region twice, or access an already freed address. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-48798) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04LTS gimp 2.10.36-3ubuntu0.24.04.1+esm2 Available with Ubuntu Pro libgimp2.0t64 2.10.36-3ubuntu0.24.04.1+esm2 Available with Ubuntu Pro Ubuntu 22.04 LTS gimp 2.10.30-1ubuntu0.1+esm2 Available with Ubuntu Pro libgimp2.0 2.10.30-1ubuntu0.1+esm2 Available with Ubuntu Pro Ubuntu 20.04 LTS gimp 2.10.18-1ubuntu0.1+esm2 Available with Ubuntu Pro libgimp2.0 2.10.18-1ubuntu0.1+esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS gimp 2.8.22-1ubuntu0.1~esm2 Available with Ubuntu Pro libgimp2.0 2.8.22-1ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS gimp 2.8.16-1ubuntu1.1+esm2 Available with Ubuntu Pro libgimp2.0 2.8.16-1ubuntu1.1+esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8075-1 CVE-2025-10934, CVE-2025-14422, CVE-2025-2760, CVE-2025-48797, CVE-2025-48798 . Multiple security issues fixed in GIMP impacting Ubuntu 24.04, 22.04, 20.04, 18.04, and 16.04 LTS releases. Updates recommended.. GIMP security issues, Ubuntu security updates, GIMP vulnerabilities, software patching, Linux application security. . Severity: Critical. LinuxSecurity.com Team
Mar 04, 2026
•Critical
Ubuntu
100
security advisorysecurity updateSuSESUSE Linux Enterprise Server Low openjpeg2 Security Risk CVE-2023-39327
An update that solves one vulnerability can now be installed.. # Security update for openjpeg2 Announcement ID: SUSE-SU-2026:0320-1 Release Date: 2026-01-28T14:40:10Z Rating: low References: * bsc#1227412 Cross-References: * CVE-2023-39327 CVSS scores: * CVE-2023-39327 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2023-39327 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2023-39327 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openjpeg2 fixes the following issues: * CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-320=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libopenjp2-7-2.1.0-4.27.1 * libopenjp2-7-debuginfo-2.1.0-4.27.1 * openjpeg2-debuginfo-2.1.0-4.27.1 * openjpeg2-debugsource-2.1.0-4.27.1 ## References: * https://www.suse.com/security/cve/CVE-2023-39327.html * https://bugzilla.suse.com/show_bug.cgi?id=1227412 . An update for openjpeg2 addressing one low-rated security issue is now available for SUSE users. Upgrade now for better protection.. openjpeg2 security update Linux patches SUSE advisory. . Severity: Low. LinuxSecurity.com Team
Jan 28, 2026
•Low
SuSE
203
security advisorymoderateupdateMageia 8 MGASA-2022-0292 Moderate: Teeworlds Code Execution Threat
Code execution via malicious map file (CVE-2021-43518) References: - https://bugs.mageia.org/show_bug.cgi?id=30717 - https://lists.fedoraproject.org/archives/list/
Aug 20, 2022
•Important
Mageia
203
security advisorymoderateupdateMageia 8 MGASA-2022-0238 Moderate: Exo Malicious Desktop File Threat
MGASA-2022-0238 - Updated exo packages fix security vulnerability Publication date: 24 Jun 2022 URL: https://advisories.mageia.org/MGASA-2022-0238.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-32278 Changed to prevent executing possibly malicious .desktop files from online sources ( http:// etc.). References: - https://bugs.mageia.org/show_bug.cgi?id=30540 - https://gitlab.xfce.org/xfce/exo/-/commit/cc047717c3b5efded2cc7bd419c41a3d1f1e48b6 - https://www.cve.org/CVERecord?id=CVE-2022-32278 SRPMS: - 8/core/exo-4.16.0-1.1.mga8 . Changed to prevent executing possibly malicious .desktop files from online sources ( http:// etc.). References: - https://bugs.mageia.org/show_bug.cgi?id=30540 . Mageia security bulletin MGASA-2022-0238 outlines exo enhancements aimed at thwarting the execution of harmful desktop files.. Mageia Exo Update, Security Advisory, Malicious Files Prevention. . LinuxSecurity.com Team
Jun 24, 2022
Mageia
197
security advisoryXSSDebianDebian: DLA-2432-1 Moderate: Jupyter Notebook XSS Threats and Fixes
Several vulnerabilities have been discovered in jupyter-notebook. CVE-2018-8768 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2432-1
Nov 19, 2020
Debian LTS
172
security advisorydenial of serviceubuntuUbuntu 20.04: USN-4418-1 Critical: openexr Denial Of Service Issues
OpenEXR could be made to crash or run programs if it opened a specially crafted file.. =========================================================================Ubuntu Security Notice USN-4418-1 July 06, 2020 openexr vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 19.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: OpenEXR could be made to crash or run programs if it opened a specially crafted file. Software Description: - openexr: tools for the OpenEXR image format Details: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS: libopenexr24 2.3.0-6ubuntu0.2 openexr 2.3.0-6ubuntu0.2 Ubuntu 19.10: libopenexr23 2.2.1-4.1ubuntu1.2 openexr 2.2.1-4.1ubuntu1.2 Ubuntu 18.04 LTS: libopenexr22 2.2.0-11.1ubuntu1.3 openexr 2.2.0-11.1ubuntu1.3 Ubuntu 16.04 LTS: libopenexr22 2.2.0-10ubuntu2.3 openexr 2.2.0-10ubuntu2.3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4418-1 CVE-2020-15305, CVE-2020-15306 Package Information: https://launchpad.net/ubuntu/+source/openexr/2.3.0-6ubuntu0.2 https://launchpad.net/ubuntu/+source/openexr/2.2.1-4.1ubuntu1.2 https://launchpad.net/ubuntu/+source/openexr/2.2.0-11.1ubuntu1.3 https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.3 . Ubuntu Security Notice USN-4420-1 highlights vulnerabilitiesin the OpenSSL package that may result in crashes or potential unauthorized code execution.. OpenEXR Issues, Ubuntu Security Notice, Denial Of Service, Image File Exploit. . Severity: Critical. LinuxSecurity.com Team
Jul 06, 2020
•Critical
Ubuntu
197
security advisoryupdateDebianDebian 8: DLA-2226-1 Critical: GStreamer Plugin Memory Issues
Two memory management issues were found in the asfdemux element of the GStreamer "ugly" plugin collection, which can be triggered via a maliciously crafted file. . Package : gst-plugins-ugly0.10 Version : 0.10.19-2.1+deb8u1 CVE ID : CVE-2017-5846 CVE-2017-5847 Two memory management issues were found in the asfdemux element of the GStreamer "ugly" plugin collection, which can be triggered via a maliciously crafted file. For Debian 8 "Jessie", these problems have been fixed in version 0.10.19-2.1+deb8u1. We recommend that you upgrade your gst-plugins-ugly0.10 packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Significant flaws in GStreamer "ugly" plugin identified and resolved with recent patch. Users are encouraged to update for improved protection.. GStreamer Plugin Update, Debian Security Fix, Memory Management Issues. . Severity: Critical. LinuxSecurity.com Team
May 30, 2020
•Critical
Debian LTS
89
security advisoryFedoracode executionFedora 30: FEDORA-2019-48b691092f Critical: kf5-kconfig Code Execution
Backport upstream fix for CVE-2019-14744 security issue.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-48b691092f 2019-08-13 01:01:16.243669 --------------------------------------------------------------------------------Name : kf5-kconfig Product : Fedora 30 Version : 5.59.0 Release : 1.fc30.1 URL : Summary : KDE Frameworks 5 Tier 1 addon with advanced configuration system Description : KDE Frameworks 5 Tier 1 addon with advanced configuration system made of two parts: KConfigCore and KConfigGui. --------------------------------------------------------------------------------Update Information: Backport upstream fix for CVE-2019-14744 security issue. --------------------------------------------------------------------------------ChangeLog: * Thu Aug 8 2019 Rex Dieter - 5.59.0-1.1 - (branch backport) upstream fix for CVE-2019-14744 (#1738901) * Thu Jun 6 2019 Rex Dieter - 5.59.0-1 - 5.59.0 * Tue May 7 2019 Rex Dieter - 5.58.0-1 - 5.58.0 * Tue Apr 9 2019 Rex Dieter - 5.57.0-1 - 5.57.0 * Tue Mar 5 2019 Rex Dieter - 5.56.0-1 - 5.56.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1738901 - kconfig: malicious .desktop files (and others) would execute code https://bugzilla.redhat.com/show_bug.cgi?id=1738901 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-48b691092f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Aug 12, 2019
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!