Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Stay Secure with the Latest Linux Advisories

Rockylinux Esm H800
Rocky

Rocky Linux httpd Important Denial of Service Fix RLSA-2026-42828

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu Imagemagick Critical Denial of Service Vulnerabilities USN-8558-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu jbig2dec Important Denial of Service Vulnerabilities USN-8582-1

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 AccountsService Important Local Exec Threat CVE-2026-61897

Calendar White Jul 21, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu OpenSSH Critical Network Access Issue CVE-2026-35414 USN-8577-1

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H900
Ubuntu

Ubuntu 16.04 CUPS Critical Control Character Injection CVE-2026-34980

Calendar White Jul 21, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 26.04 Snapd Critical Security Issues July 2026 USN-8579-1

Calendar White Jul 21, 2026
Critical
Debianlts Large Esm H900
Debian LTS

Debian rtpengine Critical Origin Validation Issue DLA-4691-1 CVE-2025-53399

Calendar White Jul 21, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Beets Moderate Web Issue Fix SUSE-SU-2026-21383-1

Calendar White Jul 21, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 10 articles for you...
87
Ls Advisories Debian Esm H240
Price Tag%201security advisorydebianimportant

Debian Okular Important Code Execution Vulnerability DSA-6332-1

George Karagiannidis discovered multiple security vulnerabilities in the fax backend of the Okular document viewer, which could potentially result in the execution of arbitrary code if a malformed G3/G4 Fax file is opened. For the oldstable distribution (bookworm), this problem has been fixed. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6332-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff June 09, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : okular CVE ID : not yet available George Karagiannidis discovered multiple security vulnerabilities in the fax backend of the Okular document viewer, which could potentially result in the execution of arbitrary code if a malformed G3/G4 Fax file is opened. For the oldstable distribution (bookworm), this problem has been fixed in version 4:22.12.3-1+deb12u1. For the stable distribution (trixie), this problem has been fixed in version 4:25.04.2-1+deb13u1. We recommend that you upgrade your okular packages. For the detailed security status of okular please refer to its security tracker page at: https://security-tracker.debian.org/tracker/okular Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Multiple vulnerabilities in Okular's fax backend could allow arbitrary code execution. Fix available for Debian Bookworm.. Okular Security Patch, Debian Advisory, Code Execution Risk. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jun 09, 2026 •Important Debian
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderatesecurity fix

Red Hat Enterprise Linux 7: RHSA-2020:4024-01 Moderate: Okular Risk

An update for okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: okular security update Advisory ID: RHSA-2020:4024-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:4024 Issue date: 2020-09-29 CVE Names: CVE-2020-9359 ==================================================================== 1. Summary: An update for okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64le, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF, Postscript, DjVu, CHM, XPS, ePub and others. Security Fix(es): * okular: local binary execution via specially crafted PDF files (CVE-2020-9359) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section. 4. Solution: Fordetails on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1815651 - CVE-2020-9359 okular: local binary execution via specially crafted PDF files 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: okular-4.10.5-9.el7.src.rpm x86_64: okular-4.10.5-9.el7.x86_64.rpm okular-debuginfo-4.10.5-9.el7.i686.rpm okular-debuginfo-4.10.5-9.el7.x86_64.rpm okular-libs-4.10.5-9.el7.i686.rpm okular-libs-4.10.5-9.el7.x86_64.rpm okular-part-4.10.5-9.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: okular-debuginfo-4.10.5-9.el7.i686.rpm okular-debuginfo-4.10.5-9.el7.x86_64.rpm okular-devel-4.10.5-9.el7.i686.rpm okular-devel-4.10.5-9.el7.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: okular-4.10.5-9.el7.src.rpm ppc64le: okular-4.10.5-9.el7.ppc64le.rpm okular-debuginfo-4.10.5-9.el7.ppc64le.rpm okular-devel-4.10.5-9.el7.ppc64le.rpm okular-libs-4.10.5-9.el7.ppc64le.rpm okular-part-4.10.5-9.el7.ppc64le.rpm x86_64: okular-4.10.5-9.el7.x86_64.rpm okular-debuginfo-4.10.5-9.el7.i686.rpm okular-debuginfo-4.10.5-9.el7.x86_64.rpm okular-devel-4.10.5-9.el7.i686.rpm okular-devel-4.10.5-9.el7.x86_64.rpm okular-libs-4.10.5-9.el7.i686.rpm okular-libs-4.10.5-9.el7.x86_64.rpm okular-part-4.10.5-9.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: okular-4.10.5-9.el7.src.rpm x86_64: okular-4.10.5-9.el7.x86_64.rpm okular-debuginfo-4.10.5-9.el7.i686.rpm okular-debuginfo-4.10.5-9.el7.x86_64.rpm okular-devel-4.10.5-9.el7.i686.rpm okular-devel-4.10.5-9.el7.x86_64.rpm okular-libs-4.10.5-9.el7.i686.rpm okular-libs-4.10.5-9.el7.x86_64.rpm okular-part-4.10.5-9.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2020-9359 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX3OgeNzjgjWX9erEAQg88A//RVUXNMbVYSAOxgp1nM8YzzqUmMXM8C4P SKCEgpsw8nYhUKYJKLySZkfSAApk2IXf6tA7b7UkO6CzDvwjhU9OEoXneJo2GXO3 /QPpBCcLfKJ2Mz01PhY7m/ZDOcl7h+Nz3N89k5Ys+KXnUfB0B/cCye5OdhHZk+bM gxDbfew2fOG5QTMUMvSwF0DNhkHhukboqlUjvKE6YTkJSqv7EgccfQyI9kaTjeWp GQUGTkv6nwAx43AtiYI/dMfpJX0lQaEbsicpKTsbmahpyXYIXkbeZWd7bsQJcG/d ttEN1T5i+++uUJv/nCaUux6TBsiKuqOigIMyPdsj2IQeT6PmDl+Ir+PAPpRhOFkh roO9XRUHI71DUJCz9oU4ANlKI9CxzlJgy5ekH7ufHCSWbkGqC7torD6rLBah3NqQ AWKx+0Y7NlFVZ8+7v2XplxpYZ7pEE5psBo3erv5+MS15mvL7rq37Q4M40rV7qPAA 2P04p7yoT9FIP5pPZSUhywDaRxKMoJhVRWaEeUz6BhewuDGvi9murSwa3JzeqzRh GLEp2pnhaetVCg2IqhhbW1UWqnoQMOPvx1JMNMMkdOoVF9oOqWJacAWaQhALyM13 4pEyd3GAmlyixqUI1duHBU5rhAAlgiNFpJnCiI3MZpBmlLSP1yGQpML9EaI6Jq6+ RXEXr6QrRzo=Ck++ -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . A new security patch for Okular on Red Hat Enterprise Linux tackles moderate threats stemming from specially crafted PDF documents. Discover additional details!. Red Hat Security, Okular Update, Document Viewer Security, Linux Security Update. . LinuxSecurity.com Team

Calendar%202 Sep 29, 2020 Red Hat
Banner 3 1028x280 1708121785 1771599793
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorymoderatedirectory traversal

SciLinux SL7: SLSA-2020-1173-1 Moderate: okular Directory Traversal

okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp SL7 x86_64 okular-part-4.10.5-8.el7.x86_64.rpm okular-devel-4.10.5-8.el7.i686.rpm okular-libs-4.10.5-8.el7.x86_64.rpm okular-libs-4.10.5-8.el7.i686.rpm okular-devel-4.10.5-8.el7.x86_64.rpm okular-4.10.5-8.el7.x86_64.rpm okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debugin [More...]. Synopsis: Moderate: okular security update Advisory ID: SLSA-2020:1173-1 Issue Date: 2020-04-07 CVE Numbers: CVE-2018-1000801 -- * okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp -- SL7 x86_64 okular-part-4.10.5-8.el7.x86_64.rpm okular-devel-4.10.5-8.el7.i686.rpm okular-libs-4.10.5-8.el7.x86_64.rpm okular-libs-4.10.5-8.el7.i686.rpm okular-devel-4.10.5-8.el7.x86_64.rpm okular-4.10.5-8.el7.x86_64.rpm okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm - Scientific Linux Development Team . Notification regarding Okular resolving medium risk path traversal vulnerability. Installation necessary for protection.. okular security, directory traversal, SL7 updates, Linux security, software vulnerabilities. . LinuxSecurity.com Team

Calendar%202 Apr 20, 2020 Scientific Linux
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderatesecurity update

Red Hat Enterprise Linux 7: RHSA-2020:1173-01 Moderate: Okular Security Fix

An update for okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: okular security update Advisory ID: RHSA-2020:1173-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:1173 Issue date: 2020-03-31 CVE Names: CVE-2018-1000801 ==================================================================== 1. Summary: An update for okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Client (v. 7) - x86_64 Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64le, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF, Postscript, DjVu, CHM, XPS, ePub and others. Security Fix(es): * okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp (CVE-2018-1000801) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes linked from the Referencessection. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1626265 - CVE-2018-1000801 okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp 6. Package List: Red Hat Enterprise Linux Client (v. 7): Source: okular-4.10.5-8.el7.src.rpm x86_64: okular-4.10.5-8.el7.x86_64.rpm okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm okular-libs-4.10.5-8.el7.i686.rpm okular-libs-4.10.5-8.el7.x86_64.rpm okular-part-4.10.5-8.el7.x86_64.rpm Red Hat Enterprise Linux Client Optional (v. 7): x86_64: okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm okular-devel-4.10.5-8.el7.i686.rpm okular-devel-4.10.5-8.el7.x86_64.rpm Red Hat Enterprise Linux Server (v. 7): Source: okular-4.10.5-8.el7.src.rpm ppc64le: okular-4.10.5-8.el7.ppc64le.rpm okular-debuginfo-4.10.5-8.el7.ppc64le.rpm okular-devel-4.10.5-8.el7.ppc64le.rpm okular-libs-4.10.5-8.el7.ppc64le.rpm okular-part-4.10.5-8.el7.ppc64le.rpm x86_64: okular-4.10.5-8.el7.x86_64.rpm okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm okular-devel-4.10.5-8.el7.i686.rpm okular-devel-4.10.5-8.el7.x86_64.rpm okular-libs-4.10.5-8.el7.i686.rpm okular-libs-4.10.5-8.el7.x86_64.rpm okular-part-4.10.5-8.el7.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 7): Source: okular-4.10.5-8.el7.src.rpm x86_64: okular-4.10.5-8.el7.x86_64.rpm okular-debuginfo-4.10.5-8.el7.i686.rpm okular-debuginfo-4.10.5-8.el7.x86_64.rpm okular-devel-4.10.5-8.el7.i686.rpm okular-devel-4.10.5-8.el7.x86_64.rpm okular-libs-4.10.5-8.el7.i686.rpm okular-libs-4.10.5-8.el7.x86_64.rpm okular-part-4.10.5-8.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2018-1000801 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/7.8_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXoOcgNzjgjWX9erEAQjoAQ//du1ZkuKyr3fPdqg1TevacRXEcfdXEQ5T Z3wm+blxkNcDb1+jZ7xIXASwMwWZm7rtXGI01YVuTZObzRYc9zCHFytG7Ij/F7C4 M/K4EwDCvoPFxQVuoRzuRB5rwJ+nYwiM2UAFfEd0/jYE44iWadaOn4zYToiH9PqW /JgS2tQZl8ssBP/sG7E4pcmmFOK3084HMerb3bFr5SsqrfnYlXgCdKDecozBpP7S dOqGPC0wthQk/j0cY5+WJOWiwIpBozQt9pZStvl912ZU3Uq4Md464P80IHHP42uh pF4/M6C7wegAJ9ipncnZfAdGC/Jn0vE2X8SlpisyjjVvzLugq9tJBt2yiuFq36eK YEhBT+qSMahs+IZg5GNF+qe1J3C+nuwQVZciIX2E/5QTE+bCN6Y9uFqoZ2X+7WkN dzu8Qm5tSmPuEzo2czGfNhSgX3tudjcW8sQkXTGiGGQHTOmBPy/3G7CCVSkbM7hu ERbHxkA8LYbt8z/sTYkqAKBi5gjfKCmSdQUQ/u/IdDQI69Ij7e+rB5sX7ZKMtVYR U+5QfR0GyBsNSYCdbJ5hd2+1f9OYzdR5BcvMd97Lh61VGu1pL9md70umowYnBUTY IEwJqIBpCen5sL3y17ascfXq/ViahZsaOknai2N4WZfnL8h5aNgK8YtRVv3z5+z2 XskXuDj8u+k=69H3 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://access.redhat.com/security/updates/advisory . Red Hat Security Advisory has issued a significant patch for Okular on RHEL 7, targeting vulnerabilities in the document viewer that could compromise system integrity.. Red Hat Enterprise Linux, Okular Security Update, Moderate Update, Document Viewer Security. . LinuxSecurity.com Team

Calendar%202 Mar 31, 2020 Red Hat
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryupdatecritical

Fedora 30: FEDORA-2020-E35573F7DF Critical Okular Execution Risk

Security fix for CVE-2020-9359. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-e35573f7df 2020-03-31 01:23:26.927492 --------------------------------------------------------------------------------Name : okular Product : Fedora 30 Version : 19.12.3 Release : 2.fc30 URL : https://apps.kde.org//graphics/okular/ Summary : A document viewer Description : A document viewer. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2020-9359 --------------------------------------------------------------------------------ChangeLog: * Sun Mar 22 2020 Rex Dieter - 19.12.3-2 - Security fix for CVE-2020-9359 (#1815651,1815652) * Fri Mar 6 2020 Rex Dieter - 19.12.3-1 - 19.12.3 * Tue Feb 4 2020 Rex Dieter - 19.12.2-1 - 19.12.2 * Thu Jan 30 2020 Rex Dieter - 19.12.1-1 - 19.12.1 * Wed Jan 29 2020 Fedora Release Engineering - 19.08.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jan 17 2020 Marek Kasik - 19.08.3-2 - Rebuild for poppler-0.84.0 * Tue Nov 12 2019 Rex Dieter - 19.08.3-1 - 19.08.3 * Thu Oct 17 2019 Rex Dieter - 19.08.2-1 - 19.08.2 * Mon Sep 30 2019 Rex Dieter - 19.08.1-1 - 19.08.1 * Thu Jul 25 2019 Fedora Release Engineering - 19.04.3-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Fri Jul 12 2019 Rex Dieter - 19.04.3-1 - 19.04.3 * Tue Jun 4 2019 Rex Dieter - 19.04.2-1 - 19.04.2 * Fri Mar 8 2019 Rex Dieter - 18.12.3-1 - 18.12.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #1815651 - CVE-2020-9359 okular: local binary execution via specially crafted PDF files https://bugzilla.redhat.com/show_bug.cgi?id=1815651 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program.Use su -c 'dnf upgrade --advisory FEDORA-2020-e35573f7df' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Important patch released for Fedora's okular to rectify CVE-2020-9359, eliminating risks of unauthorized binary execution.. Fedora Security, Okular Update, PDF Execution Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 30, 2020 •Critical Fedora
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorysoftware updatecode execution

Debian 8: DLA-2159-1 Critical Advisory for Okular Code Execution Risk

Mickael Karatekin from Sysdream Labs discovered that the Okular document viewer allows code execution via an action link in a PDF document. . Package : okular Version : 4:4.14.2-2+deb8u2 CVE ID : CVE-2020-9359 Debian Bug : 954891 Mickael Karatekin from Sysdream Labs discovered that the Okular document viewer allows code execution via an action link in a PDF document. For Debian 8 "Jessie", this problem has been fixed in version 4:4.14.2-2+deb8u2. We recommend that you upgrade your okular packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance Okular to address a vulnerability in code execution flagged by Mickael Karatekin in Debian 8.. Debian LTS, Okular Update, Security Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 25, 2020 •Critical Debian LTS
Banner 3 1028x280 1708121785 1771599793
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorycriticalFedora

Fedora 31: FEDORA-2020-7036f54316 Critical: Okular Local Exec Flaw

Security fix for CVE-2020-9359. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-7036f54316 2020-03-24 01:48:02.704940 --------------------------------------------------------------------------------Name : okular Product : Fedora 31 Version : 19.12.3 Release : 2.fc31 URL : https://apps.kde.org//graphics/okular/ Summary : A document viewer Description : A document viewer. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2020-9359 --------------------------------------------------------------------------------ChangeLog: * Sun Mar 22 2020 Rex Dieter - 19.12.3-2 - Security fix for CVE-2020-9359 (#1815651,1815652) * Fri Mar 6 2020 Rex Dieter - 19.12.3-1 - 19.12.3 * Tue Feb 4 2020 Rex Dieter - 19.12.2-1 - 19.12.2 * Thu Jan 30 2020 Rex Dieter - 19.12.1-1 - 19.12.1 * Wed Jan 29 2020 Fedora Release Engineering - 19.08.3-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild * Fri Jan 17 2020 Marek Kasik - 19.08.3-2 - Rebuild for poppler-0.84.0 --------------------------------------------------------------------------------References: [ 1 ] Bug #1815651 - CVE-2020-9359 okular: local binary execution via specially crafted PDF files https://bugzilla.redhat.com/show_bug.cgi?id=1815651 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-7036f54316' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . A patch addressing CVE-2020-9359 has been released for the Okular document viewer on Fedora 31. Important update specifications included.. Fedora Update, Okular Security, Local Execution Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 23, 2020 •Critical Fedora
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorysecurity issuepackage update

Mageia 7: MGASA-2020-0145 Critical: Okular Local Binary Execution

Updated okular packages fix security vulnerability: Okular can be tricked into executing local binaries via specially crafted PDF files. This binary execution can require almost no user interaction. No parameters can be passed to those local binaries (CVE-2020-9359). . MGASA-2020-0145 - Updated okular packages fix security vulnerability Publication date: 18 Mar 2020 URL: https://advisories.mageia.org/MGASA-2020-0145.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-9359 Updated okular packages fix security vulnerability: Okular can be tricked into executing local binaries via specially crafted PDF files. This binary execution can require almost no user interaction. No parameters can be passed to those local binaries (CVE-2020-9359). References: - https://bugs.mageia.org/show_bug.cgi?id=26342 - https://kde.org/info/security/advisory-20200312-1.txt - https://www.cve.org/CVERecord?id=CVE-2020-9359 SRPMS: - 7/core/okular-19.04.0-1.1.mga7 . Revised Okular distributions address a vulnerability related to local binary execution via specially crafted PDF documents requiring only slight user interaction.. Okular Security Update, Mageia Security Advisory, Local Binary Execution. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 18, 2020 •Critical Mageia
Banner 3 1028x280 1708121785 1771599793
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics