Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":547,"type":"x","order":1,"pct":78.48,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.88,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.34,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
172

Ubuntu 7353-1: PlantUML Security Advisory Updates

PlantUML could be made to crash or run programs as your login if it opened a specially crafted UML file.. ========================================================================== Ubuntu Security Notice USN-7353-1 March 17, 2025 plantuml vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: PlantUML could be made to crash or run programs as your login if it opened a specially crafted UML file. Software Description: - plantuml: text-to-UML converter Details: Tobias S. Fink discovered that PlantUML was susceptible to cross-site scripting attacks (XSS) in instances where SVG images were rendered. An attacker could possibly use this issue to cause PlantUML to crash, resulting in a denial of service, or the execution of arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 plantuml 1:1.2020.2+ds-5ubuntu0.1 Ubuntu 24.04 LTS plantuml 1:1.2020.2+ds-3ubuntu1.1 Ubuntu 22.04 LTS plantuml 1:1.2020.2+ds-1ubuntu0.1 Ubuntu 20.04 LTS plantuml 1:1.2018.13+ds-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS plantuml 1:1.2017.15-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS plantuml 8024-2ubuntu0.1~esm1 Available with Ubuntu Pro Ingeneral, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7353-1 CVE-2022-1231 Package Information: https://launchpad.net/ubuntu/+source/plantuml/1:1.2020.2+ds-5ubuntu0.1 https://launchpad.net/ubuntu/+source/plantuml/1:1.2020.2+ds-3ubuntu1.1 https://launchpad.net/ubuntu/+source/plantuml/1:1.2020.2+ds-1ubuntu0.1 . PlantUML is vulnerable to XSS attacks, possibly causing DoS or code execution. Update Ubuntu systems for security.. plantuml, crash, programs, login, opened, specially, crafted. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Mar 18, 2025 Important Ubuntu
89

Fedora 40: 2024-129d8ca6fc High: PlantUML Type Confusion Fixes

Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-129d8ca6fc 2024-03-07 22:24:39.963937 -------------------------------------------------------------------------------- Name : plantuml Product : Fedora 40 Version : 1.2024.3 Release : 3.fc40 URL : https://plantuml.com/ Summary : Program to generate UML diagram from a text description Description : PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case diagram - class diagram - activity diagram - component diagram - state diagram -------------------------------------------------------------------------------- Update Information: Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639 -------------------------------------------------------------------------------- ChangeLog: * Sat Mar 2 2024 Jiri - 1:1.2024.3-3 - Rebuilt for java-21-openjdk as system jdk -------------------------------------------------------------------------------- References: [ 1 ] Bug #2123726 - consoleImageViewer crashes at start https://bugzilla.redhat.com/show_bug.cgi?id=2123726 [ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40 https://bugzilla.redhat.com/show_bug.cgi?id=2261062 [ 3 ] Bug #2266639 - directory-maven-plugin fails to build withjava-21-openjdk https://bugzilla.redhat.com/show_bug.cgi?id=2266639 [ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266934 [ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266937 [ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta https://bugzilla.redhat.com/show_bug.cgi?id=2267486 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Crucial Fedora revision enhancing PlantUML compatibility alongside vital security enhancements targeting Type Confusion vulnerabilities in V8.. PlantUML Security,Fedora Update,Java Change,Type Confusion Fixes,Software Update. . LinuxSecurity.com Team

Calendar 2 Mar 07, 2024 Fedora
89

Fedora 39: FEDORA-2023-731133ab8e Moderate: PlantUML Local Access

Update plantuml to the latest version v1.2023.11. This update also includes fixes for CVE-2023-3431 and CVE-2023-3432.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-731133ab8e 2023-10-01 03:37:03.210259 -------------------------------------------------------------------------------- Name : plantuml Product : Fedora 39 Version : 1.2023.11 Release : 1.fc39 URL : https://plantuml.com/ Summary : Program to generate UML diagram from a text description Description : PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case diagram - class diagram - activity diagram - component diagram - state diagram -------------------------------------------------------------------------------- Update Information: Update plantuml to the latest version v1.2023.11. This update also includes fixes for CVE-2023-3431 and CVE-2023-3432. -------------------------------------------------------------------------------- ChangeLog: * Sat Sep 23 2023 blinxen - 1:1.2023.11-1 - Update to version 1.2023.11 (rhbz#2232105) * Fri Sep 22 2023 blinxen - 1:1.2023.7-4 - Migrate license specification to SPDX -------------------------------------------------------------------------------- References: [ 1 ] Bug #2218063 - CVE-2023-3432 plantuml: URL Restriction Bypass in plantuml/plantuml https://bugzilla.redhat.com/show_bug.cgi?id=2218063 [ 2 ] Bug #2218066 - CVE-2023-3431 plantuml: Local file read through %load_json in plantuml/plantuml https://bugzilla.redhat.com/show_bug.cgi?id=2218066 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program.Use su -c 'dnf upgrade --advisory FEDORA-2023-731133ab8e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . PlantUML has been upgraded to version 1.2023.11 in Fedora 39, resolving significant security vulnerabilities and improving overall user experience.. PlantUMl,Fedora 39,Software Updates. . LinuxSecurity.com Team

Calendar 2 Oct 01, 2023 Fedora
89

Fedora 36: FEDORA-2022-e6c09a89eb Critical PlantUML URL Bypass

Security fix for CVE-2022-1379. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-e6c09a89eb 2022-05-25 01:03:47.532320 --------------------------------------------------------------------------------Name : plantuml Product : Fedora 36 Version : 1.2022.5 Release : 1.fc36 URL : https://plantuml.com/ Summary : Program to generate UML diagram from a text description Description : PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case diagram - class diagram - activity diagram - component diagram - state diagram --------------------------------------------------------------------------------Update Information: Security fix for CVE-2022-1379 --------------------------------------------------------------------------------ChangeLog: * Mon May 16 2022 Sandipan Roy - 1:1.2022.5-1 - Updated version to 1.2022.5 - Added fix for rhbz#2086392 --------------------------------------------------------------------------------References: [ 1 ] Bug #2086391 - CVE-2022-1379 plantuml: URL Restriction Bypass https://bugzilla.redhat.com/show_bug.cgi?id=2086391 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-e6c09a89eb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . An essential security update for Fedora 36 concerning plantuml tackles CVE-2022-1379 to improve software protection.. PlantUML, Fedora Update, Security Fix, UML Diagram Tool, CVE-2022-1379. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 24, 2022 Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":547,"type":"x","order":1,"pct":78.48,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.88,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.34,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here