Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
100

SUSE Linux 12-SP5: SUSE-SU-2022:2915-1 Important: Webkit2gtk3 Update

An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2915-1 Rating: important References: #1201980 Cross-References: CVE-2022-32792 CVE-2022-32816 CVSS scores: CVE-2022-32792 (SUSE): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CVE-2022-32816 (SUSE): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP Applications 12-SP5 SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for webkit2gtk3 fixes the following issues: - Update to version 2.36.5 (bsc#1201980): - Add support for PAC proxy in the WebDriver implementation. - Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix WebKitWebView::context-menu when using GTK4. - Fix LTO builds with GCC. - Fix several crashes and rendering issues. - Security fixes: - CVE-2022-32792: Fixed processing maliciously crafted web content may lead to arbitrary code execution. - CVE-2022-32816: Fixed visiting a website that frames malicious content may lead to UI spoofing. Patch Instructions: To install this SUSE Security Update use the SUSE recommendedinstallation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-2915=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-2915=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2022-2915=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-2915=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2022-2915=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-2915=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-2915=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-2915=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): libjavascriptcoregtk-4_0-18-2.36.5-2.107.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.5-2.107.2 libwebkit2gtk-4_0-37-2.36.5-2.107.2 libwebkit2gtk-4_0-37-debuginfo-2.36.5-2.107.2 typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.5-2.107.2 webkit2gtk3-debugsource-2.36.5-2.107.2 - SUSE OpenStack Cloud Crowbar 9 (noarch): libwebkit2gtk3-lang-2.36.5-2.107.2 - SUSE OpenStack Cloud 9 (noarch): libwebkit2gtk3-lang-2.36.5-2.107.2 - SUSE OpenStack Cloud 9 (x86_64): libjavascriptcoregtk-4_0-18-2.36.5-2.107.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.5-2.107.2 libwebkit2gtk-4_0-37-2.36.5-2.107.2 libwebkit2gtk-4_0-37-debuginfo-2.36.5-2.107.2 typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.5-2.107.2 webkit2gtk3-debugsource-2.36.5-2.107.2 - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2 webkit2gtk3-debugsource-2.36.5-2.107.2 webkit2gtk3-devel-2.36.5-2.107.2 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): libjavascriptcoregtk-4_0-18-2.36.5-2.107.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.5-2.107.2 libwebkit2gtk-4_0-37-2.36.5-2.107.2 libwebkit2gtk-4_0-37-debuginfo-2.36.5-2.107.2 typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.5-2.107.2 webkit2gtk3-debugsource-2.36.5-2.107.2 - SUSE Linux Enterprise Server for SAP 12-SP4 (noarch): libwebkit2gtk3-lang-2.36.5-2.107.2 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.36.5-2.107.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.5-2.107.2 libwebkit2gtk-4_0-37-2.36.5-2.107.2 libwebkit2gtk-4_0-37-debuginfo-2.36.5-2.107.2 typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.5-2.107.2 webkit2gtk3-debugsource-2.36.5-2.107.2 - SUSE Linux Enterprise Server 12-SP5 (noarch): libwebkit2gtk3-lang-2.36.5-2.107.2 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.36.5-2.107.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.5-2.107.2 libwebkit2gtk-4_0-37-2.36.5-2.107.2 libwebkit2gtk-4_0-37-debuginfo-2.36.5-2.107.2 typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.5-2.107.2 webkit2gtk3-debugsource-2.36.5-2.107.2 - SUSE Linux Enterprise Server 12-SP4-LTSS (noarch): libwebkit2gtk3-lang-2.36.5-2.107.2 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): libjavascriptcoregtk-4_0-18-2.36.5-2.107.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.5-2.107.2 libwebkit2gtk-4_0-37-2.36.5-2.107.2 libwebkit2gtk-4_0-37-debuginfo-2.36.5-2.107.2 typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2-4_0-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.5-2.107.2 webkit2gtk3-debugsource-2.36.5-2.107.2 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libjavascriptcoregtk-4_0-18-2.36.5-2.107.2 libjavascriptcoregtk-4_0-18-debuginfo-2.36.5-2.107.2 libwebkit2gtk-4_0-37-2.36.5-2.107.2 libwebkit2gtk-4_0-37-debuginfo-2.36.5-2.107.2 typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2-4_0-2.36.5-2.107.2 typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2 webkit2gtk-4_0-injected-bundles-debuginfo-2.36.5-2.107.2 webkit2gtk3-debugsource-2.36.5-2.107.2 webkit2gtk3-devel-2.36.5-2.107.2 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): libwebkit2gtk3-lang-2.36.5-2.107.2 References: https://www.suse.com/security/cve/CVE-2022-32792.html https://www.suse.com/security/cve/CVE-2022-32816.html https://bugzilla.suse.com/1201980 . SUSE Security Patch for webkit2gtk3 addresses critical vulnerabilities, includingrisks of unauthorized code execution and user interface deception.. SUSE Linux, Security Update, Webkit2gtk3, Software Patch, Code Execution. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Aug 26, 2022 Important SuSE
197

Debian Buster WebKitGTK DLA-3073-1 Critical: Arbitrary Code Execution

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3073-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 17, 2022 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : webkit2gtk Version : 2.36.6-1~deb10u1 CVE ID : CVE-2022-32792 CVE-2022-32816 The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792 Manfred Paul discovered that processing maliciously crafted web content may lead to arbitrary code execution. CVE-2022-32816 Dohyun Lee discovered that visiting a website that frames malicious content may lead to UI spoofing. For Debian 10 buster, these problems have been fixed in version 2.36.6-1~deb10u1. We recommend that you upgrade your webkit2gtk packages. For the detailed security status of webkit2gtk please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/webkit2gtk Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Debian LTS Advisory DLA-3074-1 addresses vulnerabilities in OpenSSL, pertaining to potential denial of service and information leakage concerns.. Debian Security Update, WebKitGTK Patch, Code Execution Risk, UI Spoofing Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 17, 2022 Critical Debian LTS
87

Debian 11 DSA-5211-1 Critical: WPE WebKit Code Execution Threat

The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-32792 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5211-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Alberto Garcia August 16, 2022 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : wpewebkit CVE ID : CVE-2022-32792 CVE-2022-32816 The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-32792 Manfred Paul discovered that processing maliciously crafted web content may lead to arbitrary code execution. CVE-2022-32816 Dohyun Lee discovered that visiting a website that frames malicious content may lead to UI spoofing. For the stable distribution (bullseye), these problems have been fixed in version 2.36.6-1~deb11u1. We recommend that you upgrade your wpewebkit packages. For the detailed security status of wpewebkit please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/wpewebkit Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Boost your web engine's security by upgrading wpewebkit on Debian as per advisory DSA-5211-1. Follow these easy steps to ensure protection against exploits. Debian Security, WebKit Exploit, Code Execution Fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 16, 2022 Critical Debian
87

Debian Bullseye DSA-5210-1 Critical: WebkitGTK UI Spoofing & Code Exec

The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5210-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Alberto Garcia August 16, 2022 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : webkit2gtk CVE ID : CVE-2022-32792 CVE-2022-32816 The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792 Manfred Paul discovered that processing maliciously crafted web content may lead to arbitrary code execution. CVE-2022-32816 Dohyun Lee discovered that visiting a website that frames malicious content may lead to UI spoofing. For the stable distribution (bullseye), these problems have been fixed in version 2.36.6-1~deb11u1. We recommend that you upgrade your webkit2gtk packages. For the detailed security status of webkit2gtk please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/webkit2gtk Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Boost your security by upgrading webkit2gtk on your Debian system. This update fixes two major vulnerabilities, protecting against arbitrary code execution. Stay secure to reduce risks. Debian Security, WebKitGTK Update, Upgrade System. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 16, 2022 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here