Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
91
security advisoryGentooremote code executionGentoo: GLSA-201603-08 Normal: VLC Multiple Risks and Code Execution
Multiple vulnerabilities have been found in VLC allowing remote attackers to execute arbitrary code or cause Denial of Service.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201603-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: VLC: Multiple vulnerabilities Date: March 12, 2016 Bugs: #534532, #537154, #542222, #558418 ID: 201603-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in VLC allowing remote attackers to execute arbitrary code or cause Denial of Service. Background ========= VLC is a cross-platform media player and streaming server. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-video/vlc < 2.2.1-r1 > = 2.2.1-r1 Description ========== Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact ===== Remote attackers could possibly execute arbitrary code or cause Denial of Service. Workaround ========= There is no known work around at this time. Resolution ========= All VLC users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-video/vlc-2.2.1-r1" References ========= [ 1 ] CVE-2014-1684 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-1684 [ 2 ] CVE-2014-6440 https://www.cve.org/CVERecord?id=CVE-2014-6440 [ 3 ] CVE-2014-9597 https://www.cve.org/CVERecord?id=CVE-2014-9597 [ 4 ] CVE-2014-9598 https://www.cve.org/CVERecord?id=CVE-2014-9598 [ 5 ] CVE-2014-9625 https://www.cve.org/CVERecord?id=CVE-2014-9625 [ 6 ] CVE-2014-9626 https://www.cve.org/CVERecord?id=CVE-2014-9626 [ 7 ] CVE-2014-9627 https://www.cve.org/CVERecord?id=CVE-2014-9627 [ 8 ] CVE-2014-9628 https://www.cve.org/CVERecord?id=CVE-2014-9628 [ 9 ] CVE-2014-9629 https://www.cve.org/CVERecord?id=CVE-2014-9629 [ 10 ] CVE-2014-9630 https://www.cve.org/CVERecord?id=CVE-2014-9630 [ 11 ] CVE-2015-1202 https://www.cve.org/CVERecord?id=CVE-2015-1202 [ 12 ] CVE-2015-1203 https://www.cve.org/CVERecord?id=CVE-2015-1203 [ 13 ] CVE-2015-5949 https://www.cve.org/CVERecord?id=CVE-2015-5949 [ 14 ] CVE-2015-5949 https://www.cve.org/CVERecord?id=CVE-2015-5949 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201603-08 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Mar 12, 2016
Gentoo
91
security advisorygentoocode executionGentoo: GLSA-201406-28 Normal: Libav Multiple DoS Issues
Multiple vulnerabilities have been found in Libav, allowing attackers to execute arbitrary code or cause Denial of Service.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201406-28 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Libav: Multiple vulnerabilities Date: June 26, 2014 Bugs: #439052, #452202, #470734 ID: 201406-28 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in Libav, allowing attackersto execute arbitrary code or cause Denial of Service. Background ========= Libav is a complete solution to record, convert and stream audio and video. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-video/libav < 0.8.7 > = 0.8.7 Description ========== Multiple vulnerabilities have been discovered in Libav. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker could entice a user to open a specially crafted media file in an application linked against Libav, possibly resulting in execution of arbitrary code with the privileges of the application or a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All Libav users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-video/libav-0.8.7" Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying thesepackages. References ========= [ 1 ] CVE-2012-2772 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2772 [ 2 ] CVE-2012-2775 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2775 [ 3 ] CVE-2012-2776 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2776 [ 4 ] CVE-2012-2777 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2777 [ 5 ] CVE-2012-2779 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2779 [ 6 ] CVE-2012-2783 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2783 [ 7 ] CVE-2012-2784 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2784 [ 8 ] CVE-2012-2786 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2786 [ 9 ] CVE-2012-2787 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2787 [ 10 ] CVE-2012-2788 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2788 [ 11 ] CVE-2012-2789 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2789 [ 12 ] CVE-2012-2790 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2790 [ 13 ] CVE-2012-2791 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2791 [ 14 ] CVE-2012-2793 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2793 [ 15 ] CVE-2012-2794 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2794 [ 16 ] CVE-2012-2796 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2796 [ 17 ] CVE-2012-2797 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2797 [ 18 ] CVE-2012-2798 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2798 [ 19 ] CVE-2012-2800 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2800 [ 20 ] CVE-2012-2801 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2801 [ 21 ] CVE-2012-2802 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2802 [ 22 ] CVE-2012-2803 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2803 [ 23 ] CVE-2012-2804 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-2804 [ 24 ] CVE-2012-5144 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5144 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201406-28 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jun 26, 2014
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!