Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisoryfedoracriticalFedora 44 perl-CryptX High Stack Overflow Resolution 2026-2158c96917
Fixes CVE-2026-41565. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-2158c96917 2026-06-07 00:55:32.282457+00:00 -------------------------------------------------------------------------------- Name : perl-CryptX Product : Fedora 44 Version : 0.089 Release : 1.fc44 URL : https://metacpan.org/release/CryptX Summary : Cryptographic toolkit Description : This Perl library provides a cryptography based on LibTomCrypt library. -------------------------------------------------------------------------------- Update Information: Fixes CVE-2026-41565 -------------------------------------------------------------------------------- ChangeLog: * Sun May 10 2026 Xavier Bachelot - 0.089-1 - Update to 0.089 (RHBZ#2468592) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2482788 - CVE-2026-41565 perl-CryptX: perl-CryptX: Stack buffer overflow allows arbitrary code execution via a crafted authentication tag. [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2482788 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2158c96917' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 07, 2026
•Critical
Fedora
100
security advisorySuSEimportantSUSE Linux Micro 6.1 Important FreeIPMI Memory Issue 2026-21446-1
An update that solves one vulnerability can now be installed.. # Security update for freeipmi Announcement ID: SUSE-SU-2026:21446-1 Release Date: 2026-04-27T12:27:43Z Rating: important References: * bsc#1260414 Cross-References: * CVE-2026-33554 CVSS scores: * CVE-2026-33554 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-33554 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H * CVE-2026-33554 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for freeipmi fixes the following issue: * CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses (bsc#1260414). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-512=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 x86_64) * libfreeipmi17-1.6.14-slfo.1.1_2.1 * libfreeipmi17-debuginfo-1.6.14-slfo.1.1_2.1 * freeipmi-debugsource-1.6.14-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33554.html * https://bugzilla.suse.com/show_bug.cgi?id=1260414 . An important update for SUSE freeipmi addresses a memory handling issue with potential system risks.. freeipmi important update, SUSE Linux Micro, memory handling issue, security fix, stack buffer overflow. . Severity: Important. LinuxSecurity.com Team
May 04, 2026
•Important
SuSE
100
security advisorydenial of serviceSuSESUSE ImageMagick Memory Leak Remote Flaw SUSE-SU-2028-31561-2
An update that solves 18 vulnerabilities can now be installed.. # Security update for ImageMagick Announcement ID: SUSE-SU-2026:20917-1 Release Date: 2026-03-20T09:31:54Z Rating: important References: * bsc#1258790 * bsc#1259446 * bsc#1259447 * bsc#1259448 * bsc#1259450 * bsc#1259451 * bsc#1259452 * bsc#1259455 * bsc#1259456 * bsc#1259457 * bsc#1259463 * bsc#1259464 * bsc#1259466 * bsc#1259467 * bsc#1259468 * bsc#1259469 * bsc#1259497 * bsc#1259528 Cross-References: * CVE-2026-24484 * CVE-2026-28493 * CVE-2026-28494 * CVE-2026-28686 * CVE-2026-28687 * CVE-2026-28688 * CVE-2026-28689 * CVE-2026-28690 * CVE-2026-28691 * CVE-2026-28692 * CVE-2026-28693 * CVE-2026-30883 * CVE-2026-30929 * CVE-2026-30931 * CVE-2026-30935 * CVE-2026-30936 * CVE-2026-30937 * CVE-2026-31853 CVSS scores: * CVE-2026-24484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-24484 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24484 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-28493 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-28493 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-28493 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-28494 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-28494 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-28494 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-28686 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-28686 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-28686 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-28687 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-28687 ( SUSE ): 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-28687 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-28688 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-28688 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-28688 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-28688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-28689 ( SUSE ): 7.2 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-28689 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-28689 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-28690 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-28690 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-28690 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H * CVE-2026-28690 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-28691 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-28691 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-28691 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-28692 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-28692 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-28692 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-28693 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-28693 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-28693 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-30883 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-30883 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-30883 ( NVD ): 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-30883 ( NVD ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-30929 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-30929 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-30929 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-30929 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-30931 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-30931 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-30931 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-30931 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-30935 ( SUSE ): 4.8 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-30935 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-30935 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-30936 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-30936 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-30936 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-30937 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-30937 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-30937 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-30937 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-31853 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-31853 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-31853 ( NVD ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-31853 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server -BCI 16.0 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). * CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446). * CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow (bsc#1259447). * CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow (bsc#1259448). * CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450). * CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451). * CVE-2026-28689: `domain="path"` authorization is checked before final file open/use and allows for read/write bypass via symlink swaps (bsc#1259452). * CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456). * CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455). * CVE-2026-28692: 32-bit integer overflow in MAT decoder can lead to a heap buffer over-read (bsc#1259457). * CVE-2026-28693: integer overflow in the DIB coder can lead to an out-of- bounds read or write (bsc#1259466). * CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap buffer over-write (bsc#1259467). * CVE-2026-30929: improper use of fixed-size stack buffer in `MagnifyImage`can lead to a stack buffer overflow (bsc#1259468). * CVE-2026-30931: value truncation in the UHDR encoder can lead to a heap buffer overflow (bsc#1259469). * CVE-2026-30935: heap-based buffer over-read in BilateralBlurImage (bsc#1259497). * CVE-2026-30936: heap Buffer Overflow in WaveletDenoiseImage (bsc#1259464). *CVE-2026-30937: heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (bsc#1259463). * CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images (bsc#1259528). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server - BCI 16.0 zypper in -t patch SUSE-SLES-16.0-419=1 ## Package List: * SUSE Linux Enterprise Server - BCI 16.0 (aarch64 ppc64le s390x x86_64) * libMagick++-devel-7.1.2.0-160000.7.1 * perl-PerlMagick-7.1.2.0-160000.7.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.2.0-160000.7.1 * ImageMagick-extra-7.1.2.0-160000.7.1 * ImageMagick-debugsource-7.1.2.0-160000.7.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.2.0-160000.7.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.2.0-160000.7.1 * libMagickWand-7_Q16HDRI10-7.1.2.0-160000.7.1 * perl-PerlMagick-debuginfo-7.1.2.0-160000.7.1 * ImageMagick-extra-debuginfo-7.1.2.0-160000.7.1 * libMagickCore-7_Q16HDRI10-7.1.2.0-160000.7.1 * libMagick++-7_Q16HDRI5-7.1.2.0-160000.7.1 * ImageMagick-7.1.2.0-160000.7.1 * ImageMagick-devel-7.1.2.0-160000.7.1 * ImageMagick-debuginfo-7.1.2.0-160000.7.1 * SUSE Linux Enterprise Server - BCI 16.0 (noarch) * ImageMagick-config-7-upstream-open-7.1.2.0-160000.7.1 * ImageMagick-config-7-upstream-limited-7.1.2.0-160000.7.1 * ImageMagick-config-7-upstream-secure-7.1.2.0-160000.7.1 * ImageMagick-config-7-upstream-websafe-7.1.2.0-160000.7.1 * ImageMagick-config-7-SUSE-7.1.2.0-160000.7.1 * ImageMagick-doc-7.1.2.0-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-24484.html * https://www.suse.com/security/cve/CVE-2026-28493.html * https://www.suse.com/security/cve/CVE-2026-28494.html * https://www.suse.com/security/cve/CVE-2026-28686.html *https://www.suse.com/security/cve/CVE-2026-28687.html * https://www.suse.com/security/cve/CVE-2026-28688.html * https://www.suse.com/security/cve/CVE-2026-28689.html * https://www.suse.com/security/cve/CVE-2026-28690.html * https://www.suse.com/security/cve/CVE-2026-28691.html * https://www.suse.com/security/cve/CVE-2026-28692.html * https://www.suse.com/security/cve/CVE-2026-28693.html * https://www.suse.com/security/cve/CVE-2026-30883.html * https://www.suse.com/security/cve/CVE-2026-30929.html * https://www.suse.com/security/cve/CVE-2026-30931.html * https://www.suse.com/security/cve/CVE-2026-30935.html * https://www.suse.com/security/cve/CVE-2026-30936.html * https://www.suse.com/security/cve/CVE-2026-30937.html * https://www.suse.com/security/cve/CVE-2026-31853.html * https://bugzilla.suse.com/show_bug.cgi?id=1258790 * https://bugzilla.suse.com/show_bug.cgi?id=1259446 * https://bugzilla.suse.com/show_bug.cgi?id=1259447 * https://bugzilla.suse.com/show_bug.cgi?id=1259448 * https://bugzilla.suse.com/show_bug.cgi?id=1259450 * https://bugzilla.suse.com/show_bug.cgi?id=1259451 * https://bugzilla.suse.com/show_bug.cgi?id=1259452 * https://bugzilla.suse.com/show_bug.cgi?id=1259455 * https://bugzilla.suse.com/show_bug.cgi?id=1259456 * https://bugzilla.suse.com/show_bug.cgi?id=1259457 * https://bugzilla.suse.com/show_bug.cgi?id=1259463 * https://bugzilla.suse.com/show_bug.cgi?id=1259464 * https://bugzilla.suse.com/show_bug.cgi?id=1259466 * https://bugzilla.suse.com/show_bug.cgi?id=1259467 * https://bugzilla.suse.com/show_bug.cgi?id=1259468 * https://bugzilla.suse.com/show_bug.cgi?id=1259469 * https://bugzilla.suse.com/show_bug.cgi?id=1259497 * https://bugzilla.suse.com/show_bug.cgi?id=1259528 . An update for ImageMagick on SUSE fixes 18 important bugs, mitigating stack overflow and DoS issues.. SUSE ImageMagick security patch important vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Apr 01, 2026
•Important
SuSE
89
security advisorysecurity updatefedoraFedora 39: FEDORA-2024-deddae25dd Critical: EditorConfig Stack Overflow Fix
Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-deddae25dd 2024-04-19 01:17:18.086513 -------------------------------------------------------------------------------- Name : editorconfig Product : Fedora 39 Version : 0.12.7 Release : 1.fc39 URL : https://github.com/editorconfig/editorconfig-core-c Summary : Parser for EditorConfig files written in C Description : EditorConfig makes it easy to maintain the correct coding style when switching between different text editors and between different projects. The EditorConfig project maintains a file format and plugins for various text editors which allow this file format to be read and used by those editors. -------------------------------------------------------------------------------- Update Information: Update to 0.12.7: fix pointer overflow in STRING_CAT; fix a few more stack buffer overflows. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 3 2024 Benjamin A. Beasley - 0.12.7-1 - Update to 0.12.7 (close RHBZ#2272370) * Fri Mar 8 2024 Yaakov Selkowitz - 0.12.6-5 - Use bundled uthash in RHEL builds * Wed Jan 24 2024 Fedora Release Engineering - 0.12.6-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Fri Jan 19 2024 Fedora Release Engineering - 0.12.6-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2272370 - editorconfig-0.12.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2272370 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-deddae25dd' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 19, 2024
•Critical
Fedora
100
security advisorybuffer overflowimportantSUSE: 2022:2654-1 Important: u-boot Buffer Overflow Risk
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for u-boot ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2654-1 Rating: important References: #1201214 Cross-References: CVE-2022-34835 CVSS scores: CVE-2022-34835 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-34835 (SUSE): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for u-boot fixes the following issues: - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2654=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2654=1 - SUSE Manager Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-2654=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patchSUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-2654=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-2654=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-2654=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-2654=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-2654=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-2654=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-2654=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-2654=1 Package List: - openSUSE Leap 15.4 (aarch64): u-boot-xilinxzynqmpgeneric-2020.01-150200.10.15.1 u-boot-xilinxzynqmpgeneric-doc-2020.01-150200.10.15.1 - openSUSE Leap 15.3 (aarch64): u-boot-xilinxzynqmpgeneric-2020.01-150200.10.15.1 u-boot-xilinxzynqmpgeneric-doc-2020.01-150200.10.15.1 - SUSE Manager Server 4.1 (ppc64le s390x x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Manager Proxy 4.1 (x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise Server 15-SP2-LTSS(aarch64): u-boot-rpiarm64-2020.01-150200.10.15.1 u-boot-rpiarm64-doc-2020.01-150200.10.15.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64): u-boot-rpiarm64-2020.01-150200.10.15.1 u-boot-rpiarm64-doc-2020.01-150200.10.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64): u-boot-rpiarm64-2020.01-150200.10.15.1 u-boot-rpiarm64-doc-2020.01-150200.10.15.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): u-boot-tools-2020.01-150200.10.15.1 u-boot-tools-debuginfo-2020.01-150200.10.15.1 - SUSE Enterprise Storage 7 (aarch64): u-boot-rpiarm64-2020.01-150200.10.15.1 u-boot-rpiarm64-doc-2020.01-150200.10.15.1 References: https://www.suse.com/security/cve/CVE-2022-34835.html https://bugzilla.suse.com/1201214 . This release tackles a significant buffer overflow issue in the kernel, enhancing the reliability of Ubuntu installations throughout various services.. SUSE Update, U-Boot Fix, Buffer Overflow Patch. . Severity: Important. LinuxSecurity.com Team
Aug 03, 2022
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!