Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian LTS openssl Important Use-After-Free NULL Pointer Issues DLA-4624-1

Calendar White Jun 09, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 alsa-lib Important Denial of Service Fix USN-8044-2

Calendar White Jun 09, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS node-shell-quote Important Denial of Service CVE-2026-9277

Calendar White Jun 09, 2026
Important
Mageia Large Esm H800
Mageia

Mageia 9 Suricata Critical Performance Security Issues MGASA-2026-0181

Calendar White Jun 09, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia 9 PackageKit Important TOCTOU Race Escalation CVE-2026-41651

Calendar White Jun 09, 2026
Important
Mageia Large Esm H900
Mageia

Mageia 9 Unbound Critical Remote Code Execution Advisory 2026-0034

Calendar White Jun 09, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 LTS Netatalk Multiple Security Issues USN-8395-1

Calendar White Jun 09, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mingw-objfw 1.5.5 Update Security Fix FEDORA-2026-de23fedf3e

Calendar White Jun 08, 2026
Fedora Large Esm H900
Fedora

Fedora 43 objfw Important Update 1.5.5 Bug Fixes June 2026

Calendar White Jun 08, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
172
Ls Advisories Ubuntu Esm H240
Price Tag 1security advisorydenial of servicecritical

Ubuntu 24.04 LTS oFono Critical Denial of Service Vuln USN-8178-1

oFono could be made to crash if it received specially crafted input.. ========================================================================== Ubuntu Security Notice USN-8178-1 April 16, 2026 ofono vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: oFono could be made to crash if it received specially crafted input. Software Description: - ofono: A free software project for mobile telephony applications Details: It was discovered that oFono incorrectly handled crafted responses from AT commands. An attacker could possibly use this issue to crash the program, resulting in a denial of service or arbitrary code execution. (CVE-2024-7538, CVE-2024-7539, CVE-2024-7540, CVE-2024-7541, CVE-2024-7542) Lucas Leong discovered that oFono incorrectly handled crafted input. An attacker could possibly use this issue to crash the program, resulting in a denial of service or arbitrary code execution. (CVE-2024-7543, CVE-2024-7544, CVE-2024-7545, CVE-2024-7546, CVE-2024-7547) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS ofono 1.31-3ubuntu3.24.04.2+esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS ofono 1.31-3ubuntu1.2+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS ofono 1.31-2ubuntu1+esm3 Available with Ubuntu Pro Ubuntu 18.04 LTS ofono 1.21-1ubuntu1+esm3 Available with Ubuntu Pro Ubuntu 16.04 LTS ofono 1.17.bzr6912+16.04.20160314.3-0ubuntu1+esm3 Available with Ubuntu Pro References: https://ubuntu.com/security/notices/USN-8178-1 CVE-2024-7538, CVE-2024-7539, CVE-2024-7540, CVE-2024-7541, CVE-2024-7542, CVE-2024-7543, CVE-2024-7544, CVE-2024-7545, CVE-2024-7546, CVE-2024-7547 . oFono crash risk identified in Ubuntu. Critical update instruction available for users across releases to mitigate threats.. oFono security, Ubuntu 24.04 LTS, Ubuntu 20.04 LTS, software update, denial of service. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 16, 2026 •Critical Ubuntu
203
Ls Advisories Mageia Esm H240
Price Tag 1security advisorysecurity updatebuffer overflow

Mageia 9 MGASA-2025-0063 moderate: ofono buffer overflow exploit

Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function. (CVE-2023-2794) Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function. (CVE-2023-4232) . MGASA-2025-0063 - Updated ofono packages fix security vulnerabilities Publication date: 13 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0063.html Type: security Affected Mageia releases: 9 CVE: CVE-2023-2794, CVE-2023-4232, CVE-2023-4233, CVE-2023-4234, CVE-2023-4235 Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function. (CVE-2023-2794) Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function. (CVE-2023-4232) Sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field(). (CVE-2023-4233) Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function. (CVE-2023-4234) Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function. (CVE-2023-4235) References: - https://bugs.mageia.org/show_bug.cgi?id=33841 - https://ubuntu.com/security/notices/USN-7141-1 - https://ubuntu.com/security/notices/USN-7151-1 - https://www.cve.org/CVERecord?id=CVE-2023-2794 - https://www.cve.org/CVERecord?id=CVE-2023-4232 - https://www.cve.org/CVERecord?id=CVE-2023-4233 - https://www.cve.org/CVERecord?id=CVE-2023-4234 - https://www.cve.org/CVERecord?id=CVE-2023-4235 SRPMS: - 9/core/ofono-2.1-1.1.mga9 . Recent updates to ofono packages in Mageia tackle significant security concerns, including vulnerabilities that allow for remote code execution.. ofono Security, Mageia Update, Remote Code Execution, Stack Overflow. . LinuxSecurity.com Team

Calendar 2 Feb 13, 2025 Mageia
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorybuffer overflowsoftware update

Fedora 41 ofono Update FEDORA-2024-0051a464f1 Critical Buffer Overflow

Update to v2.14 . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-0051a464f1 2024-12-21 03:35:46.415725+00:00 -------------------------------------------------------------------------------- Name : ofono Product : Fedora 41 Version : 2.14 Release : 1.fc41 URL : https://www.intel.com/content/www/us/en/developer/topic-technology/open/overview.html Summary : Open Source Telephony Description : oFono.org is a place to bring developers together around designing an infrastructure for building mobile telephony (GSM/UMTS) applications. oFono includes a high-level D-Bus API for use by telephony applications. oFono also includes a low-level plug-in API for integrating with telephony stacks, cellular modems and storage back-ends. -------------------------------------------------------------------------------- Update Information: Update to v2.14 -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 12 2024 Artur Frenszek-Iwicki - 2.14-1 - Update to v2.14 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2303457 - CVE-2024-7547 ofono: oFono: Stack-based Buffer Overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2303457 [ 2 ] Bug #2303595 - CVE-2024-7546 ofono: ofono: Buffer Overflow Privilege Escalation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2303595 [ 3 ] Bug #2303597 - CVE-2024-7544 ofono: oFono: Heap-based Buffer Overflow Privilege Escalation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2303597 [ 4 ] Bug #2303598 - CVE-2024-7543 ofono: oFono: Heap-based Buffer Overflow Privilege Escalation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2303598 [ 5 ] Bug #2332134 - ofono-2.14 is available https://bugzilla.redhat.com/show_bug.cgi?id=2332134 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-0051a464f1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Tackling the vulnerability issues of ofono version 2.14 in Fedora 41, with specific exploits verified to hinder system efficiency.. Fedora 41 Updates, Telephony Security, Buffer Overflow Risks, Privilege Escalation Techniques, Software Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Dec 21, 2024 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorysecurity updatefedora

Fedora 38: FEDORA-2024-e8a02e129e critical: ofono remote code execution

Backport upstream fixes for CVE-2023-4233 and CVE-2023-4234. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-e8a02e129e 2024-03-29 02:39:36.209054 -------------------------------------------------------------------------------- Name : ofono Product : Fedora 38 Version : 1.34 Release : 4.fc38 URL : Summary : Open Source Telephony Description : oFono.org is a place to bring developers together around designing an infrastructure for building mobile telephony (GSM/UMTS) applications. oFono includes a high-level D-Bus API for use by telephony applications. oFono also includes a low-level plug-in API for integrating with telephony stacks, cellular modems and storage back-ends. -------------------------------------------------------------------------------- Update Information: Backport upstream fixes for CVE-2023-4233 and CVE-2023-4234 -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 19 2024 Artur Frenszek-Iwicki - 1.34-4 - Backport upstream fix for CVE-2023-4233 and CVE-2023-4234 * Thu Jan 19 2023 Fedora Release Engineering - 1.34-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2255396 - CVE-2023-4233 ofono: SMS Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability within the sms_decode_address_field() function https://bugzilla.redhat.com/show_bug.cgi?id=2255396 [ 2 ] Bug #2255399 - CVE-2023-4234 ofono: SMS Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability within the decode_submit_report() function https://bugzilla.redhat.com/show_bug.cgi?id=2255399 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2024-e8a02e129e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 38 has issued a critical security update for ofono, addressing severe remote code execution vulnerabilities that could jeopardize user data and system integrity.. Fedora Security Updates, Remote Code Execution, ofono Telephony. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 29, 2024 •Critical Fedora
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorybuffer overflowcritical

Fedora 40: FEDORA-2024-c42ea059d0 Critical: Ofono Telephony Patch

Update to v2.5. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-c42ea059d0 2024-03-28 00:15:36.328468 -------------------------------------------------------------------------------- Name : ofono Product : Fedora 40 Version : 2.5 Release : 1.fc40 URL : Summary : Open Source Telephony Description : oFono.org is a place to bring developers together around designing an infrastructure for building mobile telephony (GSM/UMTS) applications. oFono includes a high-level D-Bus API for use by telephony applications. oFono also includes a low-level plug-in API for integrating with telephony stacks, cellular modems and storage back-ends. -------------------------------------------------------------------------------- Update Information: Update to v2.5 -------------------------------------------------------------------------------- ChangeLog: * Mon Mar 18 2024 Artur Frenszek-Iwicki - 2.5-1 - Update to v2.5 * Thu Jan 25 2024 Fedora Release Engineering - 1.34-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 1.34-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Thu Jul 20 2023 Fedora Release Engineering - 1.34-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Thu Jan 19 2023 Fedora Release Engineering - 1.34-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild * Fri Jul 22 2022 Fedora Release Engineering - 1.34-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2255387 - CVE-2023-2794 ofono: SMS Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability within the decode_deliver() function https://bugzilla.redhat.com/show_bug.cgi?id=2255387 [ 2 ] Bug #2255394 - CVE-2023-4232 ofono: SMSDecoder Stack-based Buffer Overflow Remote Code Execution Vulnerability within the decode_status_report() function https://bugzilla.redhat.com/show_bug.cgi?id=2255394 [ 3 ] Bug #2255396 - CVE-2023-4233 ofono: SMS Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability within the sms_decode_address_field() function https://bugzilla.redhat.com/show_bug.cgi?id=2255396 [ 4 ] Bug #2255399 - CVE-2023-4234 ofono: SMS Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability within the decode_submit_report() function https://bugzilla.redhat.com/show_bug.cgi?id=2255399 [ 5 ] Bug #2255402 - CVE-2023-4235 ofono: SMS Decoder Stack-based Buffer Overflow Remote Code Execution Vulnerability within the decode_deliver_report() function https://bugzilla.redhat.com/show_bug.cgi?id=2255402 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c42ea059d0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Upgrade your Fedora system to the newest ofono release to improve mobilecommunication functionalities with essential patches and enhancements.. Fedora 40, ofono update, security patch, mobile telephony, software release. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 28, 2024 •Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":549,"type":"x","order":1,"pct":78.54,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.29,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.86,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.3,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here