Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisorysoftware updateFedoraFedora 41: FEDORA-2025-e911f71d99 moderate: python3.13 segfault fix
Update to 3.13.2 Statically build the _datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while running.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-e911f71d99 2025-02-09 01:17:00.288850+00:00 -------------------------------------------------------------------------------- Name : python3.13 Product : Fedora 41 Version : 3.13.2 Release : 1.fc41 URL : https://www.python.org/ Summary : Version 3.13 of the Python interpreter Description : Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. -------------------------------------------------------------------------------- Update Information: Update to 3.13.2 Statically build the _datetime module into libpython. This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while running. -------------------------------------------------------------------------------- ChangeLog: * Tue Feb 4 2025 Charalampos Stratakis - 3.13.2-1 - Update to 3.13.2 - Security fix for CVE-2025-0938 - Fixes: rhbz#2343274 * Wed Jan 29 2025 Miro HronÄok - 3.13.1-4 - On Fedora 41 or older, statically build the _datetime module into libpython - This fixes a segfault when importing it from Python 3.13.0 updated to 3.13.1+ while running - Fixes: rhbz#2333852 * Sat Jan 18 2025 Fedora Release Engineering - 3.13.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2333852 - python 3.13.0 segfaults when importing modules (e.g. _datetime) after update to 3.13.1 https://bugzilla.redhat.com/show_bug.cgi?id=2333852 [ 2 ] Bug #2343274 - CVE-2025-0938 python3.13: URL parser allowed square bracketsin domain names [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2343274 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-e911f71d99' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Upgrade to python3.13.2 on Fedora; addresses segmentation fault issues associated with the _datetime module. Crucial security advisory included.. Fedora Python Security, Python 3.13 update, software maintenance. . Severity: Important. LinuxSecurity.com Team
Feb 09, 2025
•Important
Fedora
202
security advisorysystem updatethreat mitigationopenSUSE: 2023:0257-1 Moderate: Modsecurity Segfault Issue
An update that fixes four vulnerabilities is now available. . openSUSE Security Update: Security update for modsecurity ______________________________________________________________________________ Announcement ID: openSUSE-SU-2023:0257-1 Rating: moderate References: #1210993 #1213702 Cross-References: CVE-2020-15598 CVE-2021-42717 CVE-2023-28882 CVE-2023-38285 CVSS scores: CVE-2020-15598 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-42717 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-42717 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-28882 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2023-28882 (SUSE): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-38285 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for modsecurity fixes the following issues: Update to version 3.0.10: * Security impacting issue (fix boo#1213702, CVE-2023-38285) - Fix: worst-case time in implementation of four transformations - Additional information on this issue is available at s-vulnerability-in-four-transformations-cve-2023-38285/ * Enhancements and bug fixes - Add TX synonym for MSC_PCRE_LIMITS_EXCEEDED - Make MULTIPART_PART_HEADERS accessible to lua - Fix: Lua scripts cannot read whole collection at once - Fix: quoted Include config with wildcard - Support isolated PCRE match limits - Fix: meta actions not applied if multiMatch in first rule of chain - Fix: audit log may omit tags when multiMatch - Exclude CRLF from MULTIPART_PART_HEADER value - Configure:use AS_ECHO_N instead echo -n - Adjust position of memset from 2890 Update to version 3.0.9: * Add some member variable inits in Transaction class (possible segfault) * Fix: possible segfault on reload if duplicate ip+CIDR in ip match list * Resolve memory leak on reload (bison-generated variable) * Support equals sign in XPath expressions * Encode two special chars in error.log output * Add JIT support for PCRE2 * Support comments in ipMatchFromFile file via '#' token * Use name package name libmaxminddb with pkg-config * Fix: FILES_TMP_CONTENT collection key should use part name * Use AS_HELP_STRING instead of obsolete AC_HELP_STRING macro * During configure, do not check for pcre if pcre2 specified * Use pkg-config to find libxml2 first * Fix two rule-reload memory leak issues * Correct whitespace handling for Include directive - Fix CVE-2023-28882, a segfault and a resultant crash of a worker process in some configurations with certain inputs, boo#1210993 Update to version 3.0.8 * Adjust parser activation rules in modsecurity.conf-recommended [#2796] * Multipart parsing fixes and new MULTIPART_PART_HEADERS collection [#2795] * Prevent LMDB related segfault [#2755, #2761] * Fix msc_transaction_cleanup function comment typo [#2788] * Fix: MULTIPART_INVALID_PART connected to wrong internal variable [#2785] * Restore Unique_id to include random portion after timestamp [#2752, #2758] Update to version 3.0.7 * Support PCRE2 * Support SecRequestBodyNoFilesLimit * Add ctl:auditEngine action support * Move PCRE2 match block from member variable * Add SecArgumentsLimit, 200007 to modsecurity.conf-recommended * Fix memory leak when concurrent log includes REMOTE_USER * Fix LMDB initialization issues * Fix initcol error message wording * Tolerate other parameters after boundary in multipart C-T * Add DebugLog message for bad pattern in rx operator * Fix misuses of LMDB API * Fix duplicationtypo in code comment * Fix multiMatch msg, etc, population in audit log * Fix some name handling for ARGS_*NAMES: regex SecRuleUpdateTargetById, etc. * Adjust confusing variable name in setRequestBody method * Multipart names/filenames may include single quote if double-quote enclosed * Add SecRequestBodyJsonDepthLimit to modsecurity.conf-recommended Update to version 3.0.6 * Security issue: Support configurable limit on depth of JSON parsing, possible DoS issue. CVE-2021-42717 Update to version 3.0.5 * New: Having ARGS_NAMES, variables proxied * Fix: FILES variable does not use multipart part name for key * GeoIP: switch to GEOIP_MEMORY_CACHE from GEOIP_INDEX_CACHE * Support configurable limit on number of arguments processed * Adds support to lua 5.4 * Add support for new operator rxGlobal * Fix: Replaces put with setenv in SetEnv action * Fix: Regex key selection should not be case-sensitive * Fix: Only delete Multipart tmp files after rules have run * Fixed MatchedVar on chained rules * Fix IP address logging in Section A * Fix: rx: exit after full match (remove /g emulation); ensure capture groups occuring after unused groups still populate TX vars * Fix rule-update-target for non-regex * Fix Security Impacting Issues: * Handle URI received with uri-fragment, CVE-2020-15598 update to 3.0.4: * Fix: audit log data omitted when nolog,auditlog * Fix: ModSecurity 3.x inspectFile operator does not pass * XML: Remove error messages from stderr * Filter comment or blank line for pmFromFile operator * Additional adjustment to Cookie header parsing * Restore chained rule part H logging to be more like 2.9 behaviour * Small fixes in log messages to help debugging the file upload * Fix Cookie header parsing issues * Fix rules with nolog are logging to part H * Fix argument key-value pair parsing cases * Fix: audit log part for response body for JSON format to be E * Make surem_rulesMessages is filled after successfull match * Fix @pm lookup for possible matches on offset zero. * Regex lookup on the key name instead of COLLECTION:key * Missing throw in Operator::instantiate * Making block action execution dependent of the SecEngine status * Making block action execution dependent of the SecEngine status * Having body limits to respect the rule engine state * Fix SecRuleUpdateTargetById does not match regular expressions * Adds missing check for runtime ctl:ruleRemoveByTag * Adds a new operator verifySVNR that checks for Austrian social security numbers. * Fix variables output in debug logs * Correct typo validade in log output * fix/minor: Error encoding hexa decimal. * Limit more log variables to 200 characters. * parser: fix parsed file names * Allow empty anchored variable * Fixed FILES_NAMES collection after the end of multipart parsing * Fixed validateByteRange parsing method * Removes a memory leak on the JSON parser * Enables LMDB on the regression tests. * Fix: Extra whitespace in some configuration directives causing error * Refactoring on Regex and SMatch classes. * Fixed buffer overflow in Utils::Md5::hexdigest() * Implemented merge() method for ConfigInt, ConfigDouble, ConfigString * Adds initially support to the drop action. * Complete merging of particular rule properties * Replaces AC_CHECK_FILE with 'test -f' * Fix inet addr handling on 64 bit big endian systems * Fix tests on FreeBSD * Changes ENV test case to read the default MODSECURTIY env var * Regression: Sets MODSECURITY env var during the tests execution * Fix setenv action to strdup key=variable * Allow 0 length JSON requests. * Fix "make dist" target to include default configuration * Replaced log locking using mutex with fcntl lock * Correct the usage of modsecurity::Phases::NUMBER_OF_PHASES * Adds support to multiple ranges in ctl:ruleRemoveById * Rule variable interpolation broken * Makethe boundary check less strict as per RFC2046 * Fix buffer size for utf8toUnicode transformation * Fix double macros bug * Override the default status code if not suitable to redirect action * parser: Fix the support for CRLF configuration files * Organizes the server logs * m_lineNumber in Rule not mapping with the correct line number in file * Using shared_ptr instead of unique_ptr on rules exceptions * Changes debuglogs schema to avoid unecessary str allocation * Fix the SecUnicodeMapFile and SecUnicodeCodePage * Changes the timing to save the rule message * Fix crash in msc_rules_add_file() when using disruptive action in chain * Fix memory leak in AuditLog::init() * Fix RulesProperties::appendRules() * Fix RULE lookup in chained rules * @ipMatch "Could not add entry" on slash/32 notation in 2.9.0 * Using values after transformation at MATCHED_VARS * Adds support to UpdateActionById. * Add correct C function prototypes for msc_init and msc_create_rule_set * Allow LuaJIT 2.1 to be used * Match m_id JSON log with RuleMessage and v2 format * Adds support to setenv action. * Adds new transaction constructor that accepts the transaction id as parameter. * Adds request IDs and URIs to the debug log * Treating variables exception on load-time instead of run time. * Fix: function m.setvar in Lua scripts and add testcases * Fix SecResponseBodyAccess and ctl:requestBodyAccess directives * Fix OpenBSD build * Fix parser to support GeoLookup with MaxMind * parser: Fix simple quote setvar in the end of the line * Fix pc file * modsec_rules_check: uses the gnu `.la' instead of `.a' file * good practices: Initialize variables before use it * Fix utf-8 character encoding conversion * Adds support for ctl:requestBodyProcessor=URLENCODED * Add LUA compatibility for CentOS and try to use LuaJIT first if available * Allow LuaJIT to be used * Implement support for Lua 5.1 * Variable names must match fully, notpartially. Match should be case insensitive. * Improves the performance while loading the rules * Allow empty strings to be evaluated by regex::searchAll * Adds basic pkg-config info * Fixed LMDB collection errors * Fixed false positive MULTIPART_UNMATCHED_BOUNDARY errors * Fix ip tree lookup on netmask content * Changes the behavior of the default sec actions * Refactoring on {global,ip,resources,session,tx,user} collections * Fix race condition in UniqueId::uniqueId() * Fix memory leak in error message for msc_rules_merge C APIs * Return false in SharedFiles::open() when an error happens * Use rvalue reference in ModSecurity::serverLog * Build System: Fix when multiple lines for curl version. * Checks if response body inspection is enabled before process it * Fix setvar parsing of quoted data * Adds time stamp back to the audit logs * Disables skip counter if debug log is disabled * Cosmetics: Represents amount of skipped rules without decimal * Add missing escapeSeqDecode, urlEncode and trimLeft/Right tfns to parser * Fix STATUS var parsing and accept STATUS_LINE var for v2 backward comp. * Fix memory leak in modsecurity::utils::expandEnv() * Initialize m_dtd member in ValidateDTD class as NULL * Fix broken @detectxss operator regression test case * Fix utils::string::ssplit() to handle delimiter in the end of string * Fix variable FILES_TMPNAMES * Fix memory leak in Collections * Fix lib version information while generating the .so file * Adds support for ctl:ruleRemoveByTag * Fix SecUploadDir configuration merge * Include all prerequisites for "make check" into dist archive * Fix: Reverse logic of checking output in @inspectFile * Adds support to libMaxMind * Adds capture action to detectXSS * Temporarily accept invalid MULTIPART_SEMICOLON_MISSING operator * Adds capture action to detectSQLi * Adds capture action to rbl * Adds capture action to verifyCC * Adds capture action to verifySSN * Adds capture action to verifyCPF * Prettier error messages for unsupported configurations (UX) * Add missing verify*** transformation statements to parser * Fix a set of compilation warnings * Check for disruptive action on SecDefaultAction. * Fix block-block infinite loop. * Correction remove_by_tag and remove_by_msg logic. * Fix LMDB compile error * Fix msc_who_am_i() to return pointer to a valid C string * Added some cosmetics to autoconf related code * Fix "make dist" target to include necessary headers for Lua * Fix "include /foo/*.conf" for single matched object in directory * Add missing Base64 transformation statements to parser * Fixed resource load on ip match from file * Fixed examples compilation while using disable-shared * Fixed compilation issue while xml is disabled * Having LDADD and LDFLAGS organized on Makefile.am * Checking std::deque size before use it * perf improvement: Added the concept of RunTimeString and removed all run time parser. * perf improvement: Checks debuglog level before format debug msg * perf. improvement/rx: Only compute dynamic regex in case of macro * Fix uri on the benchmark utility * disable Lua on systems with liblua5.1 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2023-257=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): libmodsecurity3-3.0.10-bp155.3.3.1 modsecurity-3.0.10-bp155.3.3.1 modsecurity-devel-3.0.10-bp155.3.3.1 - openSUSE Backports SLE-15-SP5 (aarch64_ilp32): libmodsecurity3-64bit-3.0.10-bp155.3.3.1 - openSUSE Backports SLE-15-SP5 (x86_64): libmodsecurity3-32bit-3.0.10-bp155.3.3.1 References: https://www.suse.com/security/cve/CVE-2020-15598.html https://www.suse.com/security/cve/CVE-2021-42717.html https://www.suse.com/security/cve/CVE-2023-28882.html https://www.suse.com/security/cve/CVE-2023-38285.html https://bugzilla.suse.com/1210993 https://bugzilla.suse.com/1213702 . The latest patch for modsecurity on openSUSE resolves segmentation faults and improves security protocols in system modules.. Modsecurity Update, OpenSUSE Segfault Fix, Security Enhancements, Thre at Mitigation. . LinuxSecurity.com Team
Sep 25, 2023
OpenSUSE
100
security advisorysystem patchSUSE LinuxSUSE: 2021:1943-1 Critical Update: Caribou Segfault Issue Resolved
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for caribou ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1943-1 Rating: important References: #1186617 Cross-References: CVE-2021-3567 CVSS scores: CVE-2021-3567 (SUSE): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud 8 SUSE Linux Enterprise Workstation Extension 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP2-BCL HPE Helion Openstack 8 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for caribou fixes the following issues: Security issue fixed: - CVE-2021-3567: Fixed a segfault when attempting to use shifted characters (bsc#1186617). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2021-1943=1 - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-1943=1 - SUSE OpenStackCloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2021-1943=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2021-1943=1 - SUSE Linux Enterprise Workstation Extension 12-SP5: zypper in -t patch SUSE-SLE-WE-12-SP5-2021-1943=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-1943=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2021-1943=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-1943=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-1943=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2021-1943=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-1943=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-1943=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2021-1943=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2021-1943=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE OpenStack Cloud Crowbar 8 (x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE OpenStack Cloud 9 (x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE OpenStack Cloud 8 (x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE Linux Enterprise Workstation Extension 12-SP5 (x86_64): caribou-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 caribou-gtk-module-common-0.4.21-8.3.1 caribou-gtk2-module-0.4.21-8.3.1 caribou-gtk2-module-debuginfo-0.4.21-8.3.1 caribou-gtk3-module-0.4.21-8.3.1 caribou-gtk3-module-debuginfo-0.4.21-8.3.1 - SUSE Linux Enterprise Workstation Extension 12-SP5 (noarch): caribou-lang-0.4.21-8.3.1 - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 caribou-devel-0.4.21-8.3.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 - HPE Helion Openstack 8 (x86_64): caribou-common-0.4.21-8.3.1 caribou-debuginfo-0.4.21-8.3.1 caribou-debugsource-0.4.21-8.3.1 libcaribou0-0.4.21-8.3.1 libcaribou0-debuginfo-0.4.21-8.3.1 typelib-1_0-Caribou-1_0-0.4.21-8.3.1 References: https://www.suse.com/security/cve/CVE-2021-3567.html https://bugzilla.suse.com/1186617 . Fedora Security Patch strengthens platform stability through vital memory leak repairs for gnome-shell, responding to community feedback.. SUSE Linux Security Updates, Caribou Segfault, System Integrity Fixes. . Severity: Important. LinuxSecurity.com Team
Jun 10, 2021
•Important
SuSE
89
security advisorypackage updateFedora Core 4Fedora Core 4 Update: 2005-507 Moderate Netpbm Segfault Resolution
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-507 2005-07-01 ---------------------------------------------------------------------Product : Fedora Core 4 Name : netpbm Version : 10.27 Release : 4.FC4.2 Summary : A library for handling different graphics file formats. Description : The netpbm package contains a library of functions which support programs for handling various graphics file formats, including .pbm (portable bitmaps), .pgm (portable graymaps), .pnm (portable anymaps), .ppm (portable pixmaps) and others. ---------------------------------------------------------------------* Mon Jun 27 2005 Jindrich Novy 10.27-4.FC4.2 - create correct symlink pnmtopnm -> pamtopnm (#161436) * Wed Jun 22 2005 Jindrich Novy 10.27-4.FC4.1 - fix segfault in pbmtolj caused by unchecked assertions caused by definition of NDEBUG (#160429) - drop hunk from .security patch causing dual inclusion of string.h in pbmtolj.c * Tue May 31 2005 Jindrich Novy 10.27-4 - fix segfault in pnmcolormap what makes latex2html/ppmquant unusable (#158665, #139111) ---------------------------------------------------------------------This update can be downloaded from: ac77f448defe05b0a9c7818a8c8ccfc6 SRPMS/netpbm-10.27-4.FC4.2.src.rpm d0f9379b547626f7b717522dbce9327b ppc/netpbm-10.27-4.FC4.2.ppc.rpm fb79dfc7c19dc11f09e970bddd20f053 ppc/netpbm-devel-10.27-4.FC4.2.ppc.rpm 352f6dcc16178083cc4c5693c97b4d85 ppc/netpbm-progs-10.27-4.FC4.2.ppc.rpm 868ea5e7289fd9051f70ebeffc6179bf ppc/debug/netpbm-debuginfo-10.27-4.FC4.2.ppc.rpm c7bedf6b6848713ec55ef603499ceafe ppc/netpbm-10.27-4.FC4.2.ppc64.rpm 3d1ef78eb104fef5c6a8b25a830d1d16 x86_64/netpbm-10.27-4.FC4.2.x86_64.rpm 4bc092aaf4929c5fe9bcfea9ef620968 x86_64/netpbm-devel-10.27-4.FC4.2.x86_64.rpm a8a45dc0809b2ad5c157cc7db9ff560f x86_64/netpbm-progs-10.27-4.FC4.2.x86_64.rpm 13f77ef69c58bb0e638cf1d9628c8b6f x86_64/debug/netpbm-debuginfo-10.27-4.FC4.2.x86_64.rpm f5c899fd2de633828c1ead8f0a086af7 x86_64/netpbm-10.27-4.FC4.2.i386.rpm f5c899fd2de633828c1ead8f0a086af7 i386/netpbm-10.27-4.FC4.2.i386.rpm d2b52a53a0871b30c1cefdec117f994d i386/netpbm-devel-10.27-4.FC4.2.i386.rpm d229a99e5b6ee1ce61e4582dff692e8e i386/netpbm-progs-10.27-4.FC4.2.i386.rpm 965a06b2fdb004a4caa919d0271b19be i386/debug/netpbm-debuginfo-10.27-4.FC4.2.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Jul 01, 2005
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!