Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
203

Mageia 7, 8: 2021-0313 Moderate: Live555 Streaming Issues

Updated live packages fix security vulnerabilities: Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska . MGASA-2021-0313 - Updated live packages fix security vulnerabilities Publication date: 04 Jul 2021 URL: https://advisories.mageia.org/MGASA-2021-0313.html Type: security Affected Mageia releases: 7, 8 CVE: CVE-2019-15232, CVE-2021-28899 Updated live packages fix security vulnerabilities: Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors (CVE-2019-15232). Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16 (CVE-2021-28899). The mplayer package has been rebuilt against the updated live package. References: - https://bugs.mageia.org/show_bug.cgi?id=29175 - http://lists.live555.com/pipermail/live-devel/2021-March/021891.html - - - https://www.cve.org/CVERecord?id=CVE-2019-15232 - https://www.cve.org/CVERecord?id=CVE-2021-28899 SRPMS: - 7/tainted/mplayer-1.4-1.1.mga7.tainted - 7/core/live-2021.06.25-1.mga7 - 7/core/mplayer-1.4-1.1.mga7 - 8/tainted/mplayer-1.4-9.3.mga8.tainted - 8/core/live-2021.06.25-1.mga8 - 8/core/mplayer-1.4-9.3.mga8 . Revamped installations from Mageia tackle safety concerns like Use-After-Free flaws impacting Live555.. Mageia Live555 Security Update, Use-After-Free Fix, Media Streaming Vulnerabilities. . LinuxSecurity.com Team

Calendar 2 Jul 04, 2021 Mageia
89

Fedora 25: 2017-216f4b9f9d Critical: mingw-gstreamer Memory Issues

Security fix for CVE-2017-5848, CVE-2017-5843 - Downgrade to 1.10.3 as it is the latest stable release. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-216f4b9f9d 2017-02-20 15:20:58.381002 -------------------------------------------------------------------------------- Name : mingw-gstreamer1-plugins-bad-free Product : Fedora 25 Version : 1.10.3 Release : 1.fc25 URL : https://gstreamer.freedesktop.org/ Summary : Cross compiled GStreamer1 plug-ins "bad" Description : GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-5848, CVE-2017-5843 - Downgrade to 1.10.3 as it is the latest stable release -------------------------------------------------------------------------------- References: [ 1 ] Bug #1419583 - CVE-2017-5848 gstreamer-plugins-bad-free: Invalid memory read in gst_ps_demux_parse_psm https://bugzilla.redhat.com/show_bug.cgi?id=1419583 [ 2 ] Bug #1419592 - CVE-2017-5843 gstreamer-plugins-bad-free: Use after free in gst_mini_object_unref / gst_tag_list_unref / gst_mxf_demux_update_essence_tracks https://bugzilla.redhat.com/show_bug.cgi?id=1419592 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade mingw-gstreamer1-plugins-bad-free' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Essential updates for mingw-gstreamer plugins in Fedora 25 to resolve invalid memory access and use-after-free vulnerabilities.. Fedora Security Update,mousetrap security fix,mingw-gstreamer plugins,streaming media framework,media data protection. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 20, 2017 Critical Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here