Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89

Fedora 42: workrave 2025-85867bd98f moderate: cross site scripting

Unretireing the package.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-85867bd98f 2025-04-17 18:59:47.310248+00:00 -------------------------------------------------------------------------------- Name : workrave Product : Fedora 42 Version : 1.11.0~rc.1 Release : 1.fc42 URL : https://workrave.org/ Summary : Program that assists in the recovery and prevention of RSI Description : Workrave is a program that assists in the recovery and prevention of Repetitive Strain Injury (RSI). The program frequently alerts you to take micro-pauses, rest breaks and restricts you to your daily limit. -------------------------------------------------------------------------------- Update Information: Unretireing the package. -------------------------------------------------------------------------------- ChangeLog: * Tue Apr 8 2025 Łukasz Wojniłowicz - 1.11.0~rc.1-1 - Unretirement import (fedora#2351398). -------------------------------------------------------------------------------- References: [ 1 ] Bug #2322802 - GNOME applet incompatible with GNOME 47 https://bugzilla.redhat.com/show_bug.cgi?id=2322802 [ 2 ] Bug #2328917 - CVE-2023-2142 workrave: Nunjucks autoescape bypass leads to cross site scripting [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2328917 [ 3 ] Bug #2328918 - CVE-2023-2142 workrave: Nunjucks autoescape bypass leads to cross site scripting [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2328918 [ 4 ] Bug #2351398 - Review Request: workrave - Program that assists in the recovery and prevention of RSI https://bugzilla.redhat.com/show_bug.cgi?id=2351398 [ 5 ] Bug #2358210 - F42FailsToInstall: workrave https://bugzilla.redhat.com/show_bug.cgi?id=2358210 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisoryFEDORA-2025-85867bd98f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 42 has released a vital update, bringing back the Workrave package and addressing significant security vulnerabilities with clear user instructions for updates.. workrave update, Fedora package management, software security fixes. . LinuxSecurity.com Team

Calendar 2 Apr 17, 2025 Fedora
87

Debian 4.0: DSA-1537-1 Moderate: xpdf Multiple Issues Threats

Alin Rad Pop (Secunia) discovered a number of vulnerabilities in xpdf, a set of tools for display and conversion of Portable Document Format (PDF) files. The Common Vulnerabilities and Exposures project identifies the following three problems:. - ------------------------------------------------------------------------Debian Security Advisory DSA-1537-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Devin Carraway April 02, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------Package : xpdf Vulnerability : multiple Problem type : local (remote) Debian-specific: no CVE Id(s) : CVE-2007-4352 CVE-2007-5392 CVE-2007-5393 Alin Rad Pop (Secunia) discovered a number of vulnerabilities in xpdf, a set of tools for display and conversion of Portable Document Format (PDF) files. The Common Vulnerabilities and Exposures project identifies the following three problems: CVE-2007-4352 Inadequate DCT stream validation allows an attacker to corrupt memory and potentially execute arbitrary code by supplying a maliciously crafted PDF file. CVE-2007-5392 An integer overflow vulnerability in DCT stream handling could allow an attacker to overflow a heap buffer, enabling the execution of arbitrary code. CVE-2007-5393 A buffer overflow vulnerability in xpdf's CCITT image compression handlers allows overflow on the heap, allowing an attacker to execute arbitrary code by supplying a maliciously crafted CCITTFaxDecode filter. For the stable distribution (etch), these problems have been fixed in version 3.01-9.1+etch2. For the unstable distribution (sid), these problems have been fixed in version 3.02-1.3. We recommend that you upgrade your xpdf packages. Upgrade instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referencedfile. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 4.0 alias etch - -------------------------------Stable updates are available for amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 38819 aab7a1116e3267fad270dda3c77d79ea Size/MD5 checksum: 974 e67bcc829b980bc91168137c5f7c8ff0 Size/MD5 checksum: 599778 e004c69c7dddef165d768b1362b44268 Architecture independent packages: Size/MD5 checksum: 61314 e5390719b5e1ccf8d7693a62ec34acfd Size/MD5 checksum: 1280 b45afbdf7fb24ada4e657dba2a8c8243 amd64 architecture (AMD x86_64 (AMD64)) Size/MD5 checksum: 1456842 fb1b065bf8436387895bcd70327a531a Size/MD5 checksum: 795110 e72df10c4736d9ea929118a7a70dfff3 arm architecture (ARM) Size/MD5 checksum: 788592 8ae5bca1f64769399171301753168f16 Size/MD5 checksum: 1432474 932ab72d7c80440db8cc315f5c8d15db hppa architecture (HP PA RISC) Size/MD5 checksum: 1742282 3da481ccb549c8f8b0e9ccc623c25483 Size/MD5 checksum: 949772 075197f762e662652adafef93707b52a i386 architecture (Intel ia32) Size/MD5 checksum: 783020 a6ddad14ae3173c88b753612060b2b07 Size/MD5 checksum: 1426268 5e84d679b7123dfd002cea841d283979 ia64 architecture (Intel ia64) Size/MD5 checksum: 1197338 43efabc7f076e9c9d9e0bfec5195ea9b Size/MD5 checksum: 2168060 5472b44baa87bae8e1401ba27793f102 mips architecture (MIPS (Big Endian)) Size/MD5 checksum: 1709020 48e6faeb10a55716dd7a0e1063d8a983 Size/MD5 checksum: 944706 9ef45fa29e6b793ffd6ddb4300299d87 mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 932510c737ff8bd1d841f6d35b3d4c89de7e43 Size/MD5 checksum: 1688522 5f9636000a58a2e0935686aa33c51974 powerpc architecture (PowerPC) Size/MD5 checksum: 1522230 ef3d27bfb0bd744eb87ade8a4f7d55a6 Size/MD5 checksum: 834210 a0293d2c13cce4de9f483e678d344581 s390 architecture (IBM S/390) Size/MD5 checksum: 1365510 df6cb0028e22f051dabf649f11b7987d Size/MD5 checksum: 753070 b4fffe635d26e9951bc772f4ee9e44a2 sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 750702 b327ef2ff5e022b473b5d9865adcc27a Size/MD5 checksum: 1364114 d1bab9a2a555a26090a22a1c533abd9f These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu Security Notice USN-4532-1 discloses several vulnerabilities in poppler; upgrade recommended to address potential threats.. xpdf Issues, Debian Advisory, PDF Security Updates, Local Threats, Package Vulnerabilities. . LinuxSecurity.com Team

Calendar 2 Apr 02, 2008 Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here