Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
100
security advisoryupdatecriticalSUSE: 2023:0065-2 Important: Libvirt Critical Security Update
An update that solves two vulnerabilities and has one errata is now available. . SUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0042-1 Rating: important References: #1192876 #1193981 #1194041 Cross-References: CVE-2021-3975 CVE-2021-4147 CVSS scores: CVE-2021-3975 (SUSE): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVE-2021-4147 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud 9 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server 12-SP4-LTSS ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for libvirt fixes the following issues: - CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041) - CVE-2021-3975: Add missing lock in qemuProcessHandleMonitorEOF. (bsc#1192876) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-42=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-42=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-42=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-42=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): libvirt-4.0.0-8.26.1 libvirt-admin-4.0.0-8.26.1 libvirt-admin-debuginfo-4.0.0-8.26.1 libvirt-client-4.0.0-8.26.1 libvirt-client-debuginfo-4.0.0-8.26.1 libvirt-daemon-4.0.0-8.26.1 libvirt-daemon-config-network-4.0.0-8.26.1 libvirt-daemon-config-nwfilter-4.0.0-8.26.1 libvirt-daemon-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-interface-4.0.0-8.26.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-libxl-4.0.0-8.26.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-lxc-4.0.0-8.26.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-network-4.0.0-8.26.1 libvirt-daemon-driver-network-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-nodedev-4.0.0-8.26.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-nwfilter-4.0.0-8.26.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-qemu-4.0.0-8.26.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-secret-4.0.0-8.26.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-4.0.0-8.26.1 libvirt-daemon-driver-storage-core-4.0.0-8.26.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-disk-4.0.0-8.26.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.26.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-logical-4.0.0-8.26.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.26.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-rbd-4.0.0-8.26.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.26.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-8.26.1 libvirt-daemon-hooks-4.0.0-8.26.1 libvirt-daemon-lxc-4.0.0-8.26.1 libvirt-daemon-qemu-4.0.0-8.26.1 libvirt-daemon-xen-4.0.0-8.26.1 libvirt-debugsource-4.0.0-8.26.1 libvirt-doc-4.0.0-8.26.1 libvirt-libs-4.0.0-8.26.1 libvirt-libs-debuginfo-4.0.0-8.26.1 libvirt-lock-sanlock-4.0.0-8.26.1 libvirt-lock-sanlock-debuginfo-4.0.0-8.26.1 libvirt-nss-4.0.0-8.26.1 libvirt-nss-debuginfo-4.0.0-8.26.1 - SUSE OpenStack Cloud 9 (x86_64): libvirt-4.0.0-8.26.1 libvirt-admin-4.0.0-8.26.1 libvirt-admin-debuginfo-4.0.0-8.26.1 libvirt-client-4.0.0-8.26.1 libvirt-client-debuginfo-4.0.0-8.26.1 libvirt-daemon-4.0.0-8.26.1 libvirt-daemon-config-network-4.0.0-8.26.1 libvirt-daemon-config-nwfilter-4.0.0-8.26.1 libvirt-daemon-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-interface-4.0.0-8.26.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-libxl-4.0.0-8.26.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-lxc-4.0.0-8.26.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-network-4.0.0-8.26.1 libvirt-daemon-driver-network-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-nodedev-4.0.0-8.26.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-nwfilter-4.0.0-8.26.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-qemu-4.0.0-8.26.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-secret-4.0.0-8.26.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-4.0.0-8.26.1 libvirt-daemon-driver-storage-core-4.0.0-8.26.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-disk-4.0.0-8.26.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.26.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-logical-4.0.0-8.26.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.26.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-rbd-4.0.0-8.26.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.26.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-8.26.1 libvirt-daemon-hooks-4.0.0-8.26.1 libvirt-daemon-lxc-4.0.0-8.26.1 libvirt-daemon-qemu-4.0.0-8.26.1 libvirt-daemon-xen-4.0.0-8.26.1 libvirt-debugsource-4.0.0-8.26.1 libvirt-doc-4.0.0-8.26.1 libvirt-libs-4.0.0-8.26.1 libvirt-libs-debuginfo-4.0.0-8.26.1 libvirt-lock-sanlock-4.0.0-8.26.1 libvirt-lock-sanlock-debuginfo-4.0.0-8.26.1 libvirt-nss-4.0.0-8.26.1 libvirt-nss-debuginfo-4.0.0-8.26.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): libvirt-4.0.0-8.26.1 libvirt-admin-4.0.0-8.26.1 libvirt-admin-debuginfo-4.0.0-8.26.1 libvirt-client-4.0.0-8.26.1 libvirt-client-debuginfo-4.0.0-8.26.1 libvirt-daemon-4.0.0-8.26.1 libvirt-daemon-config-network-4.0.0-8.26.1 libvirt-daemon-config-nwfilter-4.0.0-8.26.1 libvirt-daemon-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-interface-4.0.0-8.26.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-lxc-4.0.0-8.26.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-network-4.0.0-8.26.1 libvirt-daemon-driver-network-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-nodedev-4.0.0-8.26.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-nwfilter-4.0.0-8.26.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-qemu-4.0.0-8.26.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-secret-4.0.0-8.26.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-4.0.0-8.26.1 libvirt-daemon-driver-storage-core-4.0.0-8.26.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-disk-4.0.0-8.26.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.26.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-logical-4.0.0-8.26.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.26.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.26.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-8.26.1 libvirt-daemon-hooks-4.0.0-8.26.1 libvirt-daemon-lxc-4.0.0-8.26.1 libvirt-daemon-qemu-4.0.0-8.26.1 libvirt-debugsource-4.0.0-8.26.1 libvirt-doc-4.0.0-8.26.1 libvirt-libs-4.0.0-8.26.1 libvirt-libs-debuginfo-4.0.0-8.26.1 libvirt-lock-sanlock-4.0.0-8.26.1 libvirt-lock-sanlock-debuginfo-4.0.0-8.26.1 libvirt-nss-4.0.0-8.26.1 libvirt-nss-debuginfo-4.0.0-8.26.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64): libvirt-daemon-driver-libxl-4.0.0-8.26.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-rbd-4.0.0-8.26.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-8.26.1 libvirt-daemon-xen-4.0.0-8.26.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): libvirt-4.0.0-8.26.1 libvirt-admin-4.0.0-8.26.1 libvirt-admin-debuginfo-4.0.0-8.26.1 libvirt-client-4.0.0-8.26.1 libvirt-client-debuginfo-4.0.0-8.26.1 libvirt-daemon-4.0.0-8.26.1 libvirt-daemon-config-network-4.0.0-8.26.1 libvirt-daemon-config-nwfilter-4.0.0-8.26.1 libvirt-daemon-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-interface-4.0.0-8.26.1 libvirt-daemon-driver-interface-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-lxc-4.0.0-8.26.1 libvirt-daemon-driver-lxc-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-network-4.0.0-8.26.1 libvirt-daemon-driver-network-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-nodedev-4.0.0-8.26.1 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-nwfilter-4.0.0-8.26.1 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-qemu-4.0.0-8.26.1 libvirt-daemon-driver-qemu-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-secret-4.0.0-8.26.1 libvirt-daemon-driver-secret-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-4.0.0-8.26.1 libvirt-daemon-driver-storage-core-4.0.0-8.26.1 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-disk-4.0.0-8.26.1 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-iscsi-4.0.0-8.26.1 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-logical-4.0.0-8.26.1 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-mpath-4.0.0-8.26.1 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-8.26.1 libvirt-daemon-driver-storage-scsi-4.0.0-8.26.1 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-8.26.1 libvirt-daemon-hooks-4.0.0-8.26.1 libvirt-daemon-lxc-4.0.0-8.26.1 libvirt-daemon-qemu-4.0.0-8.26.1 libvirt-debugsource-4.0.0-8.26.1 libvirt-doc-4.0.0-8.26.1 libvirt-libs-4.0.0-8.26.1 libvirt-libs-debuginfo-4.0.0-8.26.1 libvirt-lock-sanlock-4.0.0-8.26.1 libvirt-lock-sanlock-debuginfo-4.0.0-8.26.1 libvirt-nss-4.0.0-8.26.1 libvirt-nss-debuginfo-4.0.0-8.26.1 - SUSE LinuxEnterprise Server 12-SP4-LTSS (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-4.0.0-8.26.1 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-8.26.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (x86_64): libvirt-daemon-driver-libxl-4.0.0-8.26.1 libvirt-daemon-driver-libxl-debuginfo-4.0.0-8.26.1 libvirt-daemon-xen-4.0.0-8.26.1 References: https://www.suse.com/security/cve/CVE-2021-3975.html https://www.suse.com/security/cve/CVE-2021-4147.html https://bugzilla.suse.com/1192876 https://bugzilla.suse.com/1193981 https://bugzilla.suse.com/1194041 . An update has been issued to address significant libvirt vulnerabilities in SUSE. Please review the suggestions for implementation and the list of impacted products.. libvirt update,SUSE security advisories,libvirt issues,security update. . Severity: Important. LinuxSecurity.com Team
Jan 10, 2022
•Important
SuSE
202
security advisoryupdateimportantopenSUSE Leap 15.3: 2022:0021-1 Important Libvirt Deadlocks Fix
An update that solves one vulnerability and has 5 fixes is now available. . openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0021-1 Rating: important References: #1191668 #1192017 #1193623 #1193719 #1193981 #1194041 Cross-References: CVE-2021-4147 CVSS scores: CVE-2021-4147 (SUSE): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for libvirt fixes the following issues: - CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults. (bsc#1194041) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-21=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): libvirt-7.1.0-6.11.1 libvirt-admin-7.1.0-6.11.1 libvirt-admin-debuginfo-7.1.0-6.11.1 libvirt-client-7.1.0-6.11.1 libvirt-client-debuginfo-7.1.0-6.11.1 libvirt-daemon-7.1.0-6.11.1 libvirt-daemon-config-network-7.1.0-6.11.1 libvirt-daemon-config-nwfilter-7.1.0-6.11.1 libvirt-daemon-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-interface-7.1.0-6.11.1 libvirt-daemon-driver-interface-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-lxc-7.1.0-6.11.1 libvirt-daemon-driver-lxc-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-network-7.1.0-6.11.1 libvirt-daemon-driver-network-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-nodedev-7.1.0-6.11.1 libvirt-daemon-driver-nodedev-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-nwfilter-7.1.0-6.11.1 libvirt-daemon-driver-nwfilter-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-qemu-7.1.0-6.11.1 libvirt-daemon-driver-qemu-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-secret-7.1.0-6.11.1 libvirt-daemon-driver-secret-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-storage-7.1.0-6.11.1 libvirt-daemon-driver-storage-core-7.1.0-6.11.1 libvirt-daemon-driver-storage-core-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-storage-disk-7.1.0-6.11.1 libvirt-daemon-driver-storage-disk-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-storage-gluster-7.1.0-6.11.1 libvirt-daemon-driver-storage-gluster-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-storage-iscsi-7.1.0-6.11.1 libvirt-daemon-driver-storage-iscsi-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-storage-iscsi-direct-7.1.0-6.11.1 libvirt-daemon-driver-storage-iscsi-direct-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-storage-logical-7.1.0-6.11.1 libvirt-daemon-driver-storage-logical-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-storage-mpath-7.1.0-6.11.1 libvirt-daemon-driver-storage-mpath-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-storage-scsi-7.1.0-6.11.1 libvirt-daemon-driver-storage-scsi-debuginfo-7.1.0-6.11.1 libvirt-daemon-hooks-7.1.0-6.11.1 libvirt-daemon-lxc-7.1.0-6.11.1 libvirt-daemon-qemu-7.1.0-6.11.1 libvirt-debugsource-7.1.0-6.11.1 libvirt-devel-7.1.0-6.11.1 libvirt-libs-7.1.0-6.11.1 libvirt-libs-debuginfo-7.1.0-6.11.1 libvirt-lock-sanlock-7.1.0-6.11.1 libvirt-lock-sanlock-debuginfo-7.1.0-6.11.1 libvirt-nss-7.1.0-6.11.1 libvirt-nss-debuginfo-7.1.0-6.11.1 wireshark-plugin-libvirt-7.1.0-6.11.1 wireshark-plugin-libvirt-debuginfo-7.1.0-6.11.1 - openSUSE Leap 15.3 (aarch64 x86_64): libvirt-daemon-driver-storage-rbd-7.1.0-6.11.1 libvirt-daemon-driver-storage-rbd-debuginfo-7.1.0-6.11.1 - openSUSE Leap 15.3 (noarch): libvirt-bash-completion-7.1.0-6.11.1 libvirt-doc-7.1.0-6.11.1 - openSUSE Leap 15.3 (x86_64): libvirt-client-32bit-debuginfo-7.1.0-6.11.1 libvirt-daemon-driver-libxl-7.1.0-6.11.1 libvirt-daemon-driver-libxl-debuginfo-7.1.0-6.11.1 libvirt-daemon-xen-7.1.0-6.11.1 libvirt-devel-32bit-7.1.0-6.11.1 References: https://www.suse.com/security/cve/CVE-2021-4147.html https://bugzilla.suse.com/1191668 https://bugzilla.suse.com/1192017 https://bugzilla.suse.com/1193623 https://bugzilla.suse.com/1193719 https://bugzilla.suse.com/1193981 https://bugzilla.suse.com/1194041 . This Fedora security patch offers vital enhancements for NetworkManager, boosting overall performance and protection.. openSUSE Libvirt Update, Security Fixes, Important Software Patch. . Severity: Important. LinuxSecurity.com Team
Jan 04, 2022
•Important
OpenSUSE
203
security advisorybuffer overflowmageiaMageia 8: MGASA-2021-0513 Moderate: Transfig Input File Security Fix
Correct buffer overflows and segfaults, mainly due to maliciously crafted input files. References: - https://bugs.mageia.org/show_bug.cgi?id=29608 . MGASA-2021-0513 - Updated transfig packages fix security vulnerability Publication date: 18 Nov 2021 URL: https://advisories.mageia.org/MGASA-2021-0513.html Type: security Affected Mageia releases: 8 Correct buffer overflows and segfaults, mainly due to maliciously crafted input files. References: - https://bugs.mageia.org/show_bug.cgi?id=29608 - SRPMS: - 8/core/transfig-3.2.8b-1.mga8 . Fortify your Mageia 8 platform utilizing the transfig patch to address significant input document vulnerabilities as of November 18, 2021.. Mageia Security Update, Transfig Fix, Buffer Overflow, Segfaults, Input File Issues. . LinuxSecurity.com Team
Nov 18, 2021
Mageia
100
security advisoryimportantinteger overflowSUSE: 2019:2971-2 Important: Libjpeg-Turbo Integer Overflow Fix
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libjpeg-turbo ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:2971-2 Rating: important References: #1156402 Cross-References: CVE-2019-2201 Affected Products: SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1 SUSE Linux Enterprise Module for Desktop Applications 15-SP2 SUSE Linux Enterprise Module for Basesystem 15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libjpeg-turbo fixes the following issues: - CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. [bsc#1156402] Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP2-2020-1847=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP1-2020-1847=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-1847=1 - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2020-1847=1 Package List: - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 (aarch64 ppc64le s390x x86_64): libjpeg-turbo-1.5.3-5.12.1 libjpeg-turbo-debuginfo-1.5.3-5.12.1 libjpeg-turbo-debugsource-1.5.3-5.12.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1 (aarch64 ppc64le s390x x86_64): libjpeg-turbo-1.5.3-5.12.1 libjpeg-turbo-debuginfo-1.5.3-5.12.1 libjpeg-turbo-debugsource-1.5.3-5.12.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (x86_64): libjpeg8-32bit-8.1.2-5.12.1 libjpeg8-32bit-debuginfo-8.1.2-5.12.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): libjpeg62-62.2.0-5.12.1 libjpeg62-debuginfo-62.2.0-5.12.1 libjpeg62-devel-62.2.0-5.12.1 libjpeg8-8.1.2-5.12.1 libjpeg8-debuginfo-8.1.2-5.12.1 libjpeg8-devel-8.1.2-5.12.1 libturbojpeg0-8.1.2-5.12.1 libturbojpeg0-debuginfo-8.1.2-5.12.1 References: https://www.suse.com/security/cve/CVE-2019-2201.html https://bugzilla.suse.com/1156402 _______________________________________________ sle-security-updates mailing list
Jul 06, 2020
•Important
SuSE
202
security advisoryupdateimportantopenSUSE Leap 15.1: 2019:2529-1 Important: libjpeg-turbo Segfaults
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for libjpeg-turbo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2529-1 Rating: important References: #1156402 Cross-References: CVE-2019-2201 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libjpeg-turbo fixes the following issues: - CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. [bsc#1156402] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2529=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjpeg-turbo-1.5.3-lp151.6.3.1 libjpeg-turbo-debuginfo-1.5.3-lp151.6.3.1 libjpeg-turbo-debugsource-1.5.3-lp151.6.3.1 libjpeg62-62.2.0-lp151.6.3.1 libjpeg62-debuginfo-62.2.0-lp151.6.3.1 libjpeg62-devel-62.2.0-lp151.6.3.1 libjpeg62-turbo-1.5.3-lp151.6.3.1 libjpeg62-turbo-debugsource-1.5.3-lp151.6.3.1 libjpeg8-8.1.2-lp151.6.3.1 libjpeg8-debuginfo-8.1.2-lp151.6.3.1 libjpeg8-devel-8.1.2-lp151.6.3.1 libturbojpeg0-8.1.2-lp151.6.3.1 libturbojpeg0-debuginfo-8.1.2-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): libjpeg62-32bit-62.2.0-lp151.6.3.1 libjpeg62-32bit-debuginfo-62.2.0-lp151.6.3.1 libjpeg62-devel-32bit-62.2.0-lp151.6.3.1 libjpeg8-32bit-8.1.2-lp151.6.3.1 libjpeg8-32bit-debuginfo-8.1.2-lp151.6.3.1 libjpeg8-devel-32bit-8.1.2-lp151.6.3.1 libturbojpeg0-32bit-8.1.2-lp151.6.3.1 libturbojpeg0-32bit-debuginfo-8.1.2-lp151.6.3.1 References: https://www.suse.com/security/cve/CVE-2019-2201.html https://bugzilla.suse.com/1156402 -- . A critical enhancement for libjpeg-turbo addresses several integer overflow vulnerabilities that result in segmentation faults.. openSUSE Security Update, Integer Overflow, libjpeg-turbo Fixes. . Severity: Important. LinuxSecurity.com Team
Nov 19, 2019
•Important
OpenSUSE
100
security advisoryupdateimportantSUSE: 2019:2971-1 Important: Libjpeg-Turbo Integer Overflow Fix
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for libjpeg-turbo ______________________________________________________________________________ Announcement ID: SUSE-SU-2019:2971-1 Rating: important References: #1156402 Cross-References: CVE-2019-2201 Affected Products: SUSE Linux Enterprise Module for Packagehub Subpackages 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Desktop Applications 15-SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Basesystem 15-SP1 SUSE Linux Enterprise Module for Basesystem 15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libjpeg-turbo fixes the following issues: - CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. [bsc#1156402] Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Packagehub Subpackages 15: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-2019-2971=1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2971=1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2019-2971=1 - SUSE Linux EnterpriseModule for Desktop Applications 15-SP1: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP1-2019-2971=1 - SUSE Linux Enterprise Module for Desktop Applications 15: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-2019-2971=1 - SUSE Linux Enterprise Module for Basesystem 15-SP1: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2019-2971=1 - SUSE Linux Enterprise Module for Basesystem 15: zypper in -t patch SUSE-SLE-Module-Basesystem-15-2019-2971=1 Package List: - SUSE Linux Enterprise Module for Packagehub Subpackages 15 (aarch64 ppc64le s390x x86_64): libjpeg-turbo-1.5.3-5.12.1 libjpeg-turbo-debuginfo-1.5.3-5.12.1 libjpeg-turbo-debugsource-1.5.3-5.12.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (aarch64 ppc64le s390x x86_64): libjpeg-turbo-1.5.3-5.12.1 libjpeg-turbo-debuginfo-1.5.3-5.12.1 libjpeg-turbo-debugsource-1.5.3-5.12.1 libjpeg62-turbo-1.5.3-5.12.1 libjpeg62-turbo-debugsource-1.5.3-5.12.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (x86_64): libjpeg62-32bit-62.2.0-5.12.1 libjpeg62-32bit-debuginfo-62.2.0-5.12.1 libjpeg62-devel-32bit-62.2.0-5.12.1 libjpeg8-devel-32bit-8.1.2-5.12.1 libturbojpeg0-32bit-8.1.2-5.12.1 libturbojpeg0-32bit-debuginfo-8.1.2-5.12.1 - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (aarch64 ppc64le s390x x86_64): libjpeg-turbo-1.5.3-5.12.1 libjpeg-turbo-debuginfo-1.5.3-5.12.1 libjpeg-turbo-debugsource-1.5.3-5.12.1 libjpeg62-turbo-1.5.3-5.12.1 libjpeg62-turbo-debugsource-1.5.3-5.12.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (x86_64): libjpeg8-32bit-8.1.2-5.12.1 libjpeg8-32bit-debuginfo-8.1.2-5.12.1 - SUSE Linux Enterprise Module for Desktop Applications 15 (x86_64): libjpeg8-32bit-8.1.2-5.12.1 libjpeg8-32bit-debuginfo-8.1.2-5.12.1 - SUSELinux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x x86_64): libjpeg62-62.2.0-5.12.1 libjpeg62-debuginfo-62.2.0-5.12.1 libjpeg62-devel-62.2.0-5.12.1 libjpeg8-8.1.2-5.12.1 libjpeg8-debuginfo-8.1.2-5.12.1 libjpeg8-devel-8.1.2-5.12.1 libturbojpeg0-8.1.2-5.12.1 libturbojpeg0-debuginfo-8.1.2-5.12.1 - SUSE Linux Enterprise Module for Basesystem 15 (aarch64 ppc64le s390x x86_64): libjpeg62-62.2.0-5.12.1 libjpeg62-debuginfo-62.2.0-5.12.1 libjpeg62-devel-62.2.0-5.12.1 libjpeg8-8.1.2-5.12.1 libjpeg8-debuginfo-8.1.2-5.12.1 libjpeg8-devel-8.1.2-5.12.1 libturbojpeg0-8.1.2-5.12.1 libturbojpeg0-debuginfo-8.1.2-5.12.1 References: https://www.suse.com/security/cve/CVE-2019-2201.html https://bugzilla.suse.com/1156402 _______________________________________________ sle-security-updates mailing list
Nov 14, 2019
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!