Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
197

Debian 11: DLA-3901-1 critical: ruby-loofah issues addressed

Multiple vulnerabilities have been fixed in ruby-loofah, a Ruby library for manipulating and transforming HTML/XML documents and fragments. CVE-2022-23514 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3901-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Adrian Bunk September 28, 2024 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : ruby-loofah Version : 2.7.0+dfsg-1+deb11u1 CVE ID : CVE-2022-23514 CVE-2022-23515 CVE-2022-23516 Debian Bug : 1026083 Multiple vulnerabilities have been fixed in ruby-loofah, a Ruby library for manipulating and transforming HTML/XML documents and fragments. CVE-2022-23514 slow regex attribute check with crass parser CVE-2022-23515 XSS with "image/svg+xml" in data URIs CVE-2022-23516 Uncontrolled CDATA recursion For Debian 11 bullseye, these problems have been fixed in version 2.7.0+dfsg-1+deb11u1. We recommend that you upgrade your ruby-loofah packages. For the detailed security status of ruby-loofah please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/ruby-loofah Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Essential enhancements to the ruby-loofah package address various vulnerabilities. It is advisable to update for Debian 11 users.. Debian LTS, ruby-loofah, security advisory, HTML library, update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Sep 28, 2024 Critical Debian LTS
89

Fedora 22: 2016-5a9313e4b4 moderate: perl regexp matching issue

This release fixes CVE-2015-8853 (regexp matching hangs indefinitely on illegal UTF-8 input).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-5a9313e4b4 2016-05-06 14:23:31.381970 -------------------------------------------------------------------------------- Name : perl Product : Fedora 22 Version : 5.20.3 Release : 330.fc22 URL : https://www.perl.org/ Summary : Practical Extraction and Report Language Description : Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common applications are system administration utilities and web programming. A large proportion of the CGI scripts on the web are written in Perl. You need the perl package installed on your system so that your system can handle Perl scripts. Install this package if you want to program in Perl or enable your system to handle Perl scripts. -------------------------------------------------------------------------------- Update Information: This release fixes CVE-2015-8853 (regexp matching hangs indefinitely on illegal UTF-8 input). -------------------------------------------------------------------------------- References: [ 1 ] Bug #1329106 - CVE-2015-8853 perl: regexp matching hangs indefinitely on illegal UTF-8 input https://bugzilla.redhat.com/show_bug.cgi?id=1329106 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update perl' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Python security patch for Ubuntu 20.04 addresses CVE-2021-22918, resolving infinite loops during string processing of invalid Unicode data.. Perl Security Update,Fedora 22 Update,Regexp Handling Fix. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 06, 2016 Important Fedora
89

Fedora 22: FEDORA-2015-16314 Critical: ICU Font Parsing and Regexp Issues

Security fix for CVE-2014-6585 CVE-2014-6591 CVE-2014-7923 CVE-2014-7926 CVE-2014-9654. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-16314 2015-10-13 12:51:16.882949 -------------------------------------------------------------------------------- Name : icu Product : Fedora 22 Version : 54.1 Release : 4.fc22 URL : https://icu-project.org/ Summary : International Components for Unicode Description : Tools and utilities for developing with icu. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2014-6585 CVE-2014-6591 CVE-2014-7923 CVE-2014-7926 CVE-2014-9654 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1183645 - CVE-2014-6585 ICU: font parsing OOB read (OpenJDK 2D, 8055489) https://bugzilla.redhat.com/show_bug.cgi?id=1183645 [ 2 ] Bug #1183646 - CVE-2014-6591 ICU: font parsing OOB read (OpenJDK 2D, 8056276) https://bugzilla.redhat.com/show_bug.cgi?id=1183646 [ 3 ] Bug #1185202 - CVE-2014-7923 ICU: regexp engine missing look-behind expression range check https://bugzilla.redhat.com/show_bug.cgi?id=1185202 [ 4 ] Bug #1185205 - CVE-2014-7926 ICU: regexp engine incorrect handling of a zero length quantifier https://bugzilla.redhat.com/show_bug.cgi?id=1185205 [ 5 ] Bug #1190129 - CVE-2014-9654 icu: insufficient size limit checks in regular expression compiler https://bugzilla.redhat.com/show_bug.cgi?id=1190129 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update icu' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Update addressing security vulnerabilities in icu related to font handling and regex parsing on Fedora 22.. Security Fix, Fedora, ICU Update, Font Parsing, Critical Issues. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 13, 2015 Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":552,"type":"x","order":1,"pct":78.63,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.27,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.84,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.25,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here