Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":546,"type":"x","order":1,"pct":78.45,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.31,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.36,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag 1security advisorybuffer overflowmoderate severity

SUSE: 2022:2673-1 Moderate: python-ujson Buffer Overflow Threat

An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for python-ujson ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2673-1 Rating: moderate References: #1201254 #1201255 Cross-References: CVE-2022-31116 CVE-2022-31117 CVSS scores: CVE-2022-31116 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-31116 (SUSE): 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L CVE-2022-31117 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-31117 (SUSE): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: SUSE Linux Enterprise Desktop 15-SP3 SUSE Linux Enterprise Desktop 15-SP4 SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Development Tools 15-SP3 SUSE Linux Enterprise Module for Development Tools 15-SP4 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Linux Enterprise Storage 7.1 SUSE Manager Proxy 4.2 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.2 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.2 SUSE Manager Server 4.3 openSUSE Leap 15.3 openSUSE Leap15.4 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-ujson fixes the following issues: - CVE-2022-31116: Fixed improper decoding of escaped surrogate characters (bsc#1201255). - CVE-2022-31117: Fixed a double free while reallocating a buffer for string decoding (bsc#1201254). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-2673=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-2673=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-2673=1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3: zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP3-2022-2673=1 - SUSE Linux Enterprise Module for Development Tools 15-SP4: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-2673=1 - SUSE Linux Enterprise Module for Development Tools 15-SP3: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-2673=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): python-ujson-debuginfo-1.35-150100.3.5.1 python-ujson-debugsource-1.35-150100.3.5.1 python3-ujson-1.35-150100.3.5.1 python3-ujson-debuginfo-1.35-150100.3.5.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-ujson-debuginfo-1.35-150100.3.5.1 python-ujson-debugsource-1.35-150100.3.5.1 python2-ujson-1.35-150100.3.5.1 python2-ujson-debuginfo-1.35-150100.3.5.1 python3-ujson-1.35-150100.3.5.1 python3-ujson-debuginfo-1.35-150100.3.5.1 - SUSE Linux Enterprise Module for PackagehubSubpackages 15-SP4 (aarch64 ppc64le s390x x86_64): python-ujson-debuginfo-1.35-150100.3.5.1 python-ujson-debugsource-1.35-150100.3.5.1 python2-ujson-1.35-150100.3.5.1 python2-ujson-debuginfo-1.35-150100.3.5.1 - SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (aarch64 ppc64le s390x x86_64): python-ujson-debuginfo-1.35-150100.3.5.1 python-ujson-debugsource-1.35-150100.3.5.1 python2-ujson-1.35-150100.3.5.1 python2-ujson-debuginfo-1.35-150100.3.5.1 - SUSE Linux Enterprise Module for Development Tools 15-SP4 (aarch64 ppc64le s390x x86_64): python-ujson-debuginfo-1.35-150100.3.5.1 python-ujson-debugsource-1.35-150100.3.5.1 python3-ujson-1.35-150100.3.5.1 python3-ujson-debuginfo-1.35-150100.3.5.1 - SUSE Linux Enterprise Module for Development Tools 15-SP3 (aarch64 ppc64le s390x x86_64): python-ujson-debuginfo-1.35-150100.3.5.1 python-ujson-debugsource-1.35-150100.3.5.1 python3-ujson-1.35-150100.3.5.1 python3-ujson-debuginfo-1.35-150100.3.5.1 References: https://www.suse.com/security/cve/CVE-2022-31116.html https://www.suse.com/security/cve/CVE-2022-31117.html https://bugzilla.suse.com/1201254 https://bugzilla.suse.com/1201255 . SUSE Security Update 2022:2673-1 addresses vulnerabilities in python-ujson that may expose users to moderate security threats, urging swift application of the update. SUSE Update, Python Package Security, Linux Server Fixes. . LinuxSecurity.com Team

Calendar 2 Aug 04, 2022 SuSE
89
Ls Advisories Fedora Esm H240
Price Tag 1security advisorybuffer overflowFedora

Fedora 36: FEDORA-2022-1b2b8d5177 Critical: Python-Ujson Buffer Overflow

Security fix for CVE-2022-31116 and CVE-2022-31117. ## 5.4.0 **Added** - Add support for arbitrary size integers **Fixed** - CVE-2022-31116: Replace `wchar_t` string decoding implementation with a `uint32_t`-based one; fix handling of surrogates on decoding - CVE-2022-31117: Potential double free of buffer during string decoding - Fix memory leak on encoding errors when the. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-1b2b8d5177 2022-07-23 01:59:14.445863 --------------------------------------------------------------------------------Name : python-ujson Product : Fedora 36 Version : 5.4.0 Release : 1.fc36 URL : https://github.com/ultrajson/ultrajson Summary : Ultra fast JSON encoder and decoder written in pure C Description : UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2022-31116 and CVE-2022-31117. ## 5.4.0 **Added** - Add support for arbitrary size integers **Fixed** - CVE-2022-31116: Replace `wchar_t` string decoding implementation with a `uint32_t`-based one; fix handling of surrogates on decoding - CVE-2022-31117: Potential double free of buffer during string decoding - Fix memory leak on encoding errors when the buffer was resized - Integer parsing: always detect overflows - Fix handling of surrogates on encoding --------------------------------------------------------------------------------ChangeLog: * Thu Jul 14 2022 Alfredo Moralejo - 5.4.0-1 - Update to 5.4.0 (closes rhbz#2103379) - Includes fixes for CVE-2022-31117 and CVE-2022-31116 --------------------------------------------------------------------------------References: [ 1 ] Bug #2104739 - CVE-2022-31117 python-ujson: Potential double free of buffer during string decoding https://bugzilla.redhat.com/show_bug.cgi?id=2104739 [ 2 ] Bug #2104740 - CVE-2022-31116 python-ujson: improper decoding of escaped surrogate characters may lead to string corruption, key confusion or value overwriting https://bugzilla.redhat.com/show_bug.cgi?id=2104740 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-1b2b8d5177' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Updates for Fedora 36 addressing vital buffer vulnerabilities and memory management in python-ujson are now available. Discover further details!. Fedora Security Update, Python Ujson Fix, Memory Management Patch. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 22, 2022 •Critical Fedora
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":546,"type":"x","order":1,"pct":78.45,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.31,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.36,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here