Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":556,"type":"x","order":1,"pct":78.75,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.25,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.18,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
200

Scientific Linux 3: CVE-2007-5269 Moderate: Libpng Application Crash

Moderate: libpng security update. Date: Fri, 26 Oct 2007 16:33:38 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for libpng on SL3,x i386/x86_64 Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. Synopsis: Moderate: libpng security update Issue date: 2007-10-23 CVE Names: CVE-2007-5269 Several flaws were discovered in the way libpng handled various PNG image chunks. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was manipulated. (CVE-2007-5269) SL 3.0.x SRPMS: libpng10-1.0.13-18.src.rpm i386: libpng10-1.0.13-18.i386.rpm libpng10-devel-1.0.13-18.i386.rpm libpng-1.2.2-28.i386.rpm libpng-devel-1.2.2-28.i386.rpm x86_64: libpng10-1.0.13-18.i386.rpm libpng10-1.0.13-18.x86_64.rpm libpng10-devel-1.0.13-18.x86_64.rpm libpng-1.2.2-28.i386.rpm libpng-1.2.2-28.x86_64.rpm libpng-devel-1.2.2-28.x86_64.rpm -Connie Sieh -Troy Dawson . An essential patch for OpenSSL impacting Ubuntu, tackling significant vulnerabilities. Tap for insights on resolutions.. Libpng Security Update, Scientific Linux Errata, Application Crash Fix. . LinuxSecurity.com Team

Calendar%202 Oct 26, 2007 Scientific Linux
91

Gentoo: GLSA-200600-10 Moderate: libjpeg Buffer Overflow Vulnerability

A bug in the libpng library can be abused to crash programs making use of that library to decode PNG images.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200405-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: libpng denial of service vulnerability Date: May 14, 2004 Bugs: #49887 ID: 200405-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A bug in the libpng library can be abused to crash programs making use of that library to decode PNG images. Background ========= libpng is a standard library used to process PNG (Portable Network Graphics) images. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/libpng = 1.2.5-r5 Description ========== libpng provides two functions (png_chunk_error and png_chunk_warning) for default error and warning messages handling. These functions do not perform proper bounds checking on the provided message, which is limited to 64 bytes. Programs linked against this library may crash when handling a malicious PNG image. Impact ===== This vulnerability could be used to crash various programs using the libpng library, potentially resulting in a denial of service attack on vulnerable daemon processes. Workaround ========= There is no known workaround at this time. All users are advised to upgrade to the latest available version of libpng. Resolution ========= All users of libpng should upgrade to the latest stable version: # emerge sync # emerge -pv"> =media-libs/libpng-1.2.5-r5" # emerge "> =media-libs/libpng-1.2.5-r5" You should also run revdep-rebuild to rebuild any packages that depend on older versions of libpng : # revdep-rebuild References ========= [ 1 ] CAN-2004-0421 https://www.cve.org/CVERecord?id=CAN-2004-0421 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200405-06 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2004 Gentoo Technologies, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/1.0/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - iD8DBQFApSi3vcL1obalX08RAkIkAKCp2IIUHRycJ6IgSGuXl7drtGu+fgCfWb49 l/eaSvZlK4R5nm+OtlnM4ys=KFv5 -----END PGP SIGNATURE----- . A medium severity flaw in Fedora's libjpeg library may result in application crashes when processing JPEG files, leading to potential service disruptions.. libpng denial of service,gentoo advisory,security vulnerability. . LinuxSecurity.com Team

Calendar%202 May 14, 2004 Gentoo
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":556,"type":"x","order":1,"pct":78.75,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.25,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.18,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here