Alerts This Week
Warning Icon 1 687
Alerts This Week
Warning Icon 1 687

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -4 articles for you...
89

Fedora 43: imhex Security Advisory for lunasvg CVE Updates 2025-58c0baba42

Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files. Update lunasvg to consume the plutovg version already available in the repositories and to fix various CVEs. Rebuild imhex for the updated lunasvg.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-58c0baba42 2025-12-10 01:33:03.601991+00:00 -------------------------------------------------------------------------------- Name : imhex Product : Fedora 43 Version : 1.37.4 Release : 3.fc43 URL : https://imhex.werwolv.net/ Summary : A hex editor for reverse engineers and programmers Description : ImHex is a Hex Editor, a tool to display, decode and analyze binary data to reverse engineer their format, extract informations or patch values in them. What makes ImHex special is that it has many advanced features that can often only be found in paid applications. Such features are a completely custom binary template and pattern language to decode and highlight structures in the data, a graphical node-based data processor to pre-process values before they're displayed, a disassembler, diffing support, bookmarks and much much more. At the same time ImHex is completely free and open source under the GPLv2 language. -------------------------------------------------------------------------------- Update Information: Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files. Update lunasvg to consume the plutovg version already available in the repositories and to fix various CVEs. Rebuild imhex for the updated lunasvg. -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 1 2025 Simone Caronni - 1.37.4-3 - Rebuild for updated build requirements. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2295891 - lunasvg-3.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2295891 [ 2 ] Bug #2341675 - CVE-2024-57719 CVE-2024-57720 CVE-2024-57721 CVE-2024-57722 CVE-2024-57723 CVE-2024-57724 lunasvg: various flaws [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2341675 [ 3 ] Bug #2343567 - CVE-2024-55456 lunasvg: From CVEorg collector [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2343567 [ 4 ] Bug #2400407 - file conflict between plutovg-devel and lunasvg-devel https://bugzilla.redhat.com/show_bug.cgi?id=2400407 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-58c0baba42' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . This advisory covers updates to imhex and lunasvg for Fedora 43 addressing CVEs to enhance system security.. Fedora 43 update,lunasvg security,imhex hex editor,CVE fixes,software patching. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Dec 10, 2025 Important Fedora
172

Ubuntu 22.10 Moderate: X.Org X Server Denial of Service Threat

Several security issues were fixed in X.Org X Server.. =========================================================================Ubuntu Security Notice USN-5740-1 November 23, 2022 xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04, xwayland vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 ESM - Ubuntu 14.04 ESM Summary: Several security issues were fixed in X.Org X Server. Software Description: - xorg-server: X.Org X11 server - xwayland: X server for running X clients under Wayland - xorg-server-hwe-18.04: X.Org X11 server - xorg-server-hwe-16.04: X.Org X11 server Details: It was discovered that X.Org X Server incorrectly handled certain inputs. An attacker could use these issues to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: xserver-xorg-core 2:21.1.4-2ubuntu1.1 xwayland 2:22.1.3-2ubuntu0.1 Ubuntu 22.04 LTS: xserver-xorg-core 2:21.1.3-2ubuntu2.3 xwayland 2:22.1.1-1ubuntu0.3 Ubuntu 20.04 LTS: xserver-xorg-core 2:1.20.13-1ubuntu1~20.04.4 xwayland 2:1.20.13-1ubuntu1~20.04.4 Ubuntu 18.04 LTS: xserver-xorg-core 2:1.19.6-1ubuntu4.12 xserver-xorg-core-hwe-18.04 2:1.20.8-2ubuntu2.2~18.04.8 xwayland 2:1.19.6-1ubuntu4.12 Ubuntu 16.04 ESM: xserver-xorg-core 2:1.18.4-0ubuntu0.12+esm4 xserver-xorg-core-hwe-16.04 2:1.19.6-1ubuntu4.1~16.04.6+esm3 xwayland 2:1.18.4-0ubuntu0.12+esm4 Ubuntu 14.04 ESM: xserver-xorg-core 2:1.15.1-0ubuntu2.11+esm6 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5740-1 CVE-2022-3550, CVE-2022-3551 Package Information: https://launchpad.net/ubuntu/+source/xorg-server/2:21.1.4-2ubuntu1.1 https://launchpad.net/ubuntu/+source/xwayland/2:22.1.3-2ubuntu0.1 https://launchpad.net/ubuntu/+source/xorg-server/2:21.1.3-2ubuntu2.3 https://launchpad.net/ubuntu/+source/xwayland/2:22.1.1-1ubuntu0.3 https://launchpad.net/ubuntu/+source/xorg-server/2:1.20.13-1ubuntu1~20.04.4 https://launchpad.net/ubuntu/+source/xorg-server/2:1.19.6-1ubuntu4.12 https://launchpad.net/ubuntu/+source/xorg-server-hwe-18.04/2:1.20.8-2ubuntu2.2~18.04.8 . Several vulnerabilities in the X.Org X Server have been resolved, leading to update advisories for impacted Ubuntu releases.. X.Org X Server Security, Ubuntu Patch, Denial of Service, Code Execution. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Nov 23, 2022 Important Ubuntu
91

Gentoo: GLSA-202003-06 Moderate: Ruby Remote Code Execution Risk

Multiple vulnerabilities have been found in Ruby, the worst of which could lead to the remote execution of arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202003-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Ruby: Multiple vulnerabilities Date: March 13, 2020 Bugs: #696004 ID: 202003-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in Ruby, the worst of which could lead to the remote execution of arbitrary code. Background ========= Ruby is an interpreted object-oriented programming language. The elaborate standard library includes an HTTP server ("WEBRick") and a class for XML parsing ("REXML"). Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-lang/ruby < 2.4.9:2.4 > = 2.4.9:2.4 < 2.5.7:2.5 > = 2.5.7:2.5 Description ========== Multiple vulnerabilities have been discovered in Ruby. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker could execute arbitrary code, have unauthorized access by bypassing intended path matching or cause a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All Ruby 2.4.x users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-lang/ruby-2.4.9:2.4" All Ruby 2.5.x users should upgrade to the latest version: # emerge --sync # emerge --ask--oneshot --verbose "> =dev-lang/ruby-2.5.7:2.5" References ========= [ 1 ] CVE-2019-15845 https://nvd.nist.gov/vuln/detail/CVE-2019-15845 [ 2 ] CVE-2019-16201 https://nvd.nist.gov/vuln/detail/CVE-2019-16201 [ 3 ] CVE-2019-16254 https://nvd.nist.gov/vuln/detail/CVE-2019-16254 [ 4 ] CVE-2019-16255 https://nvd.nist.gov/vuln/detail/CVE-2019-16255 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202003-06 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org. License ====== Copyright 2020 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5/ . Various security flaws in Ruby have been identified, potentially enabling remote code execution. It is essential for users to swiftly update to the patched versions for their safety.. Ruby Security Issues,Gentoo Advisory,Code Execution Risk,Update Recommendations. . LinuxSecurity.com Team

Calendar 2 Mar 12, 2020 Gentoo
87

Debian: DSA-2695-1 Critical: Chromium Browser Remote Issues

Several vulnerabilities have been discovered in the chromium web browser. Multiple use-after-free, out-of-bounds read, memory safety, and cross-site scripting issues were discovered and corrected. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2695-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Michael Gilbert May 29, 2013 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : chromium-browser Vulnerability : several issues Problem type : remote Debian-specific: no CVE ID : CVE-2013-2837 CVE-2013-2838 CVE-2013-2839 CVE-2013-2840 CVE-2013-2841 CVE-2013-2842 CVE-2013-2843 CVE-2013-2844 CVE-2013-2845 CVE-2013-2846 CVE-2013-2847 CVE-2013-2848 CVE-2013-2849 Several vulnerabilities have been discovered in the chromium web browser. Multiple use-after-free, out-of-bounds read, memory safety, and cross-site scripting issues were discovered and corrected. CVE-2013-2837 Use-after-free vulnerability in the SVG implementation allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. CVE-2013-2838 Google V8, as used in Chromium before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. CVE-2013-2839 Chromium before 27.0.1453.93 does not properly perform a cast of an unspecified variable during handling of clipboard data, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors. CVE-2013-2840 Use-after-free vulnerability in the media loader in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2846. CVE-2013-2841 Use-after-free vulnerability in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of Pepper resources. CVE-2013-2842 Use-after-free vulnerability in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets. CVE-2013-2843 Use-after-free vulnerability in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of speech data. CVE-2013-2844 Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Chromium before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style resolution. CVE-2013-2845 The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. CVE-2013-2846 Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840. CVE-2013-2847 Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via unknown vectors. CVE-2013-2848 The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors. CVE-2013-2849 Multiple cross-sitescripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation. For the oldstable distribution (squeeze), the security support window for chromium has ended. Users of chromium on oldstable are very highly encouraged to upgrade to the current stable Debian release (wheezy). Chromium security support for wheezy will last until the next stable release (jessie), which is expected to happen sometime in 2015. For the stable distribution (wheezy), these problems have been fixed in version 27.0.1453.93-1~deb7u1. For the testing distribution (jessie), these problems will be fixed soon. For the unstable distribution (sid), these problems have been fixed in version 27.0.1453.93-1. We recommend that you upgrade your chromium-browser packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Fedora recommends updating Firefox due to multiple critical vulnerabilities and possible attack vectors.. Chromium Browser Update, Security Advisory, Remote Exploitation. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 29, 2013 Critical Debian
87

Debian: DSA 1083-1 Critical: Buffer Overflow In Motor Package

Updated package.. - --------------------------------------------------------------------------Debian Security Advisory DSA 1083-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze May 31st, 2006 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : motor Vulnerability : buffer overflow Problem type : local Debian-specific: no CVE ID : CVE-2005-3863 Debian Bug : 368400 Mehdi Oudad and Kevin Fernandez discovered a buffer overflow in the ktools library which is used in motor, an integrated development environment for C, C++ and Java, which may lead local attackers to execute arbitrary code. For the old stable distribution (woody) this problem has been fixed in version 3.2.2-2woody1. For the stable distribution (sarge) this problem has been fixed in version 3.4.0-2sarge1. For the unstable distribution (sid) this problem has been fixed in version 3.4.0-6. We recommend that you upgrade your motor package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given at the end of this advisory: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 636 932fa3ce87130b09e516ca4419cdd0da Size/MD5 checksum: 3462 babba5e4b1c2e695836582ce15954812 Size/MD5 checksum: 454423 2ba1c22fb3c76209be185b4cbb7a2bfb Alpha architecture: Size/MD5 checksum: 738572 19d012b605af9df5be7920c2d1c14c2b ARMarchitecture: Size/MD5 checksum: 653042 d3d0f37780f1fdf1e9a01b0cd804829e Intel IA-32 architecture: Size/MD5 checksum: 549282 522c5ac389fad6cc3fb6b350022b3446 Intel IA-64 architecture: Size/MD5 checksum: 795334 5a7504789d50cdf37581d068df336955 HP Precision architecture: Size/MD5 checksum: 662582 7d53430905f547c2634186a462ce415a Motorola 680x0 architecture: Size/MD5 checksum: 517012 5c91f1cd222e656baf4310d42144feb9 Big endian MIPS architecture: Size/MD5 checksum: 529124 d9a7e82738c9ed4eab95de37e7359316 Little endian MIPS architecture: Size/MD5 checksum: 521888 8de2e1c0ccbf511f67b337344e9348c8 PowerPC architecture: Size/MD5 checksum: 543442 61e434e789e18e8b239fa982812e8ad1 IBM S/390 architecture: Size/MD5 checksum: 465874 d08b495f50fb4edfdfd8ea84c3c35ee9 Sun Sparc architecture: Size/MD5 checksum: 527592 aaf50e919624329bc2c7f53fdb37bb30 Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: Size/MD5 checksum: 815 5d26d9fb0c432aa7ea49a22558ee41b4 Size/MD5 checksum: 20178 3edb3f737d0d6c9d29ff6bfc8bebf8ae Size/MD5 checksum: 572571 c9ff6aade7105a90df11ccfd51592bec Architecture independent components: Size/MD5 checksum: 180060 e10533391309045ebc5c8c6240a66390 Alpha architecture: Size/MD5 checksum: 400350 1e1cb43ff88df11ab331db1ec2064da6 Size/MD5 checksum: 400456 f2083703d009a1c55b3de99a3a67a0cd AMD64 architecture: Size/MD5 checksum: 324104 79cf88f5d9132b2ec4d028e49781c12b Size/MD5 checksum: 324110 ee02473a890ff964499e6f3a571be44b ARM architecture: Size/MD5 checksum: 515546 c0077e0bf48ce9d4ace9f0b955a37bf1 Size/MD5 checksum: 515532 f85e4041f81fd88f7c8406b59be1f7f1 Intel IA-32 architecture: Size/MD5 checksum: 329436 bba002e6bd072e2cc8bd216402a46d86 Size/MD5 checksum: 329462 e32f51cbfb70a26c91758d3e9efaf11d Intel IA-64 architecture: Size/MD5 checksum: 467542 e1f4f43dc7d2bc708467c28c929d51ac Size/MD5 checksum: 467576 c8aa0f65f1663d3b9cda661af9ab8003 HP Precision architecture: Size/MD5 checksum: 428216 3cbafe2c74ed5f812148cddaf6afb93c Size/MD5 checksum: 428292 ced41374caa59da300affe46746bba81 Motorola 680x0 architecture: Size/MD5 checksum: 341358 47547f8004245481b2cb0c77d7ac5dc0 Size/MD5 checksum: 341424 2b0b093297255a2617a9e67001a42320 Big endian MIPS architecture: Size/MD5 checksum: 371424 2394101cfd5b979bf76f24dd0c33ff3a Size/MD5 checksum: 371468 eacd6bde371442bd12a91849a2163158 Little endian MIPS architecture: Size/MD5 checksum: 369150 53856f0d1135e9a71e638691976fe76a Size/MD5 checksum: 369194 824398e12fae38644112d7b07f54f97a PowerPC architecture: Size/MD5 checksum: 344178 dad299ed53a42adad6f8df1902342fe3 Size/MD5 checksum: 344240 64883e84f2407aa464dfb68558cd2fb4 IBM S/390 architecture: Size/MD5 checksum: 298896 51043d25447ba66eeb15c45f8fe8ceb0 Size/MD5 checksum: 298904 8b1c71ba4a96d828bd7c04763f31f3a0 Sun Sparc architecture: Size/MD5 checksum: 324868 f38dcee356c6d8c5b7c453ca549ff1a7 Size/MD5 checksum: 324890 666ad1b0f33565dfbc60e9bd6ae95745 These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest Debian Security Advisory DSA 1084-1 addresses a critical vulnerability in the ssh-agent, which can be exploited for unauthorized remote access.Immediate patching is recommended.. Debian Security Advisory, Motor Package Update, Buffer Overflow, Local Code Execution, Update Instructions. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 31, 2006 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here