Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
89
security advisoryfedoraimportantFedora 41: gum 2025-abcd1234efg critical: address CVE-2025-22873
Update to version 0.16.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-f8047140f4 2025-06-29 01:22:44.380080+00:00 -------------------------------------------------------------------------------- Name : gum Product : Fedora 41 Version : 0.16.1 Release : 1.fc41 URL : https://github.com/charmbracelet/gum Summary : Tool for glamorous shell scripts Description : A tool for glamorous shell scripts. Leverage the power of Bubbles and Lip Gloss in your scripts and aliases without writing any Go code! -------------------------------------------------------------------------------- Update Information: Update to version 0.16.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html. -------------------------------------------------------------------------------- ChangeLog: * Wed Jun 18 2025 Carl George - 0.16.1-1 - Update to version 0.16.1 rhbz#2369461 * Fri Apr 18 2025 Carl George - 0.16.0-1 - Update to version 0.16.0 rhbz#2351450 * Tue Feb 11 2025 Carl George - 0.15.2-1 - Update to version 0.15.2 rhbz#2337426 * Fri Jan 17 2025 Fedora Release Engineering - 0.14.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2360604 - CVE-2025-22872 gum: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2360604 [ 2 ] Bug #2369461 - gum-0.16.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2369461 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-f8047140f4' at thecommand line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 29, 2025
•Critical
Fedora
172
security advisorydenial of serviceremote attackUbuntu 22.04 LTS USN-5642-1 Moderate: WebKitGTK Remote Exploitation
Several security issues were fixed in WebKitGTK.. =========================================================================Ubuntu Security Notice USN-5642-1 September 26, 2022 webkit2gtk vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in WebKitGTK. Software Description: - webkit2gtk: Web content engine library for GTK+ Details: Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: libjavascriptcoregtk-4.0-18 2.36.8-0ubuntu0.22.04.1 libjavascriptcoregtk-4.1-0 2.36.8-0ubuntu0.22.04.1 libwebkit2gtk-4.0-37 2.36.8-0ubuntu0.22.04.1 libwebkit2gtk-4.1-0 2.36.8-0ubuntu0.22.04.1 Ubuntu 20.04 LTS: libjavascriptcoregtk-4.0-18 2.36.8-0ubuntu0.20.04.1 libwebkit2gtk-4.0-37 2.36.8-0ubuntu0.20.04.1 This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK, such as Epiphany, to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5642-1 CVE-2022-32886 Package Information: https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.8-0ubuntu0.22.04.1 https://launchpad.net/ubuntu/+source/webkit2gtk/2.36.8-0ubuntu0.20.04.1 . Ubuntu Security Announcement USN-5642-1 highlights vulnerabilities in WebKitGTK, which may allow remote exploitation across various versions.. WebKitGTK Issues, RemoteAttacks, DoS Threats. . LinuxSecurity.com Team
Sep 26, 2022
Ubuntu
203
security advisorycriticalsoftware updateMageia 6 - MGASA-2019-0198: Firefox Critical Update for Type Confusion
The updated firefox packages fix a security vulnerability that's being exploited in the wild: Type confusion in Array.pop. (CVE-2019-11707) . MGASA-2019-0198 - Updated firefox packages fix security vulnerability Publication date: 21 Jun 2019 URL: https://advisories.mageia.org/MGASA-2019-0198.html Type: security Affected Mageia releases: 6 CVE: CVE-2019-11707 The updated firefox packages fix a security vulnerability that's being exploited in the wild: Type confusion in Array.pop. (CVE-2019-11707) References: - https://bugs.mageia.org/show_bug.cgi?id=24976 - https://www.firefox.com/en-US/firefox/60.7.1/releasenotes/?redirect_source=mozilla-org - https://www.mozilla.org/en-US/security/advisories/mfsa2019-18/ - https://www.cve.org/CVERecord?id=CVE-2019-11707 SRPMS: - 6/core/firefox-60.7.1-1.mga6 - 6/core/firefox-l10n-60.7.1-1.mga6 . MGASA-2019-0198 - Updated firefox packages fix security vulnerability Publication date: 21 Jun 2019 . updated, firefox, packages, security, vulnerability, that's, being, exploited. . Severity: Critical. LinuxSecurity.com Team
Jun 20, 2019
•Critical
Mageia
203
security advisorybuffer overflowmemory corruptionMageia: 2018-0483 Moderate: Firefox Buffer Overflow and Use-After-Free
A buffer overflow and out-of-bounds read can occur in TextureStorage11 within the ANGLE graphics library, used for WebGL content. This results in a potentially exploitable crash (CVE-2018-17466). A use-after-free vulnerability can occur after deleting a selection . MGASA-2018-0483 - Updated firefox packages fix security vulnerabilities Publication date: 15 Dec 2018 URL: https://advisories.mageia.org/MGASA-2018-0483.html Type: security Affected Mageia releases: 6 CVE: CVE-2018-12405, CVE-2018-17466, CVE-2018-18492, CVE-2018-18493, CVE-2018-18494, CVE-2018-18498 A buffer overflow and out-of-bounds read can occur in TextureStorage11 within the ANGLE graphics library, used for WebGL content. This results in a potentially exploitable crash (CVE-2018-17466). A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash (CVE-2018-18492). A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash (CVE-2018-18493). A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This is a same-origin policy violation and could allow for data theft (CVE-2018-19494). A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write (CVE-2018-18498). Memory safety bugs present in Firefox ESR 60.3, some of which showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code (CVE-2018-12405). References: -https://bugs.mageia.org/show_bug.cgi?id=23991 - https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/ - https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/ - https://www.cve.org/CVERecord?id=CVE-2018-12405 - https://www.cve.org/CVERecord?id=CVE-2018-17466 - https://www.cve.org/CVERecord?id=CVE-2018-18492 - https://www.cve.org/CVERecord?id=CVE-2018-18493 - https://www.cve.org/CVERecord?id=CVE-2018-18494 - https://www.cve.org/CVERecord?id=CVE-2018-18498 SRPMS: - 6/core/firefox-60.4.0-1.mga6 - 6/core/firefox-l10n-60.4.0-1.mga6 . Enhanced Chromium packages address vulnerabilities related to memory corruption and race conditions in Debian.. Mageia Security Update, Firefox Vulnerability Fix, Buffer Overflow, Use-After-Free, Memory Safety. . LinuxSecurity.com Team
Dec 15, 2018
Mageia
98
security advisorysecurity updatered hatRed Hat 6: RHSA-2017-0860-01 Critical Chromium-Browser Security Update
An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Critical: chromium-browser security update Advisory ID: RHSA-2017:0860-01 Product: Red Hat Enterprise Linux Supplementary Advisory URL: https://access.redhat.com/errata/RHSA-2017:0860 Issue date: 2017-03-31 CVE Names: CVE-2017-5052 CVE-2017-5053 CVE-2017-5054 CVE-2017-5055 CVE-2017-5056 ==================================================================== 1. Summary: An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64 3. Description: Chromium is an open-source web browser, powered by WebKit (Blink). This update upgrades Chromium to version 57.0.2987.133. Security Fix(es): * Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information when visited by the victim. (CVE-2017-5055, CVE-2017-5052, CVE-2017-5053, CVE-2017-5054, CVE-2017-5056) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory,refer to: https://access.redhat.com/articles/11258 After installing the update, Chromium must be restarted for the changes to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1437348 - CVE-2017-5055 chromium-browser: use after free in printing 1437350 - CVE-2017-5054 chromium-browser: heap buffer overflow in v8 1437351 - CVE-2017-5052 chromium-browser: bad cast in blink 1437352 - CVE-2017-5056 chromium-browser: use after free in blink 1437353 - CVE-2017-5053 chromium-browser: out of bounds memory access in v8 6. Package List: Red Hat Enterprise Linux Desktop Supplementary (v. 6): i386: chromium-browser-57.0.2987.133-1.el6_9.i686.rpm chromium-browser-debuginfo-57.0.2987.133-1.el6_9.i686.rpm x86_64: chromium-browser-57.0.2987.133-1.el6_9.x86_64.rpm chromium-browser-debuginfo-57.0.2987.133-1.el6_9.x86_64.rpm Red Hat Enterprise Linux Server Supplementary (v. 6): i386: chromium-browser-57.0.2987.133-1.el6_9.i686.rpm chromium-browser-debuginfo-57.0.2987.133-1.el6_9.i686.rpm x86_64: chromium-browser-57.0.2987.133-1.el6_9.x86_64.rpm chromium-browser-debuginfo-57.0.2987.133-1.el6_9.x86_64.rpm Red Hat Enterprise Linux Workstation Supplementary (v. 6): i386: chromium-browser-57.0.2987.133-1.el6_9.i686.rpm chromium-browser-debuginfo-57.0.2987.133-1.el6_9.i686.rpm x86_64: chromium-browser-57.0.2987.133-1.el6_9.x86_64.rpm chromium-browser-debuginfo-57.0.2987.133-1.el6_9.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2017-5052 https://access.redhat.com/security/cve/CVE-2017-5053 https://access.redhat.com/security/cve/CVE-2017-5054 https://access.redhat.com/security/cve/CVE-2017-5055 https://access.redhat.com/security/cve/CVE-2017-5056 https://access.redhat.com/security/updates/classification/#critical https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html 8. Contact: The RedHat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2017 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFY3jBmXlSAg2UNWIIRAqx8AKCwU72uHgmJfIhJCYFdsUb8bXRVawCglJru xTtkj1O9HKUJ+VDadY8qRGM=QWt/ -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Mar 31, 2017
•Critical
Red Hat
87
security advisoryremote code executionDebianDebian 5.0 DSA-1950 Critical: WebKit Remote Code Execution Issues
Several vulnerabilities have been discovered in webkit, a Web content engine library for Gtk+. The Common Vulnerabilities and Exposures project identifies the following problems: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1950
Dec 12, 2009
•Critical
Debian
172
security advisorydenial of servicecriticalUbuntu 8.10, 9.04: USN-836-1 Critical: WebKit Code Execution
It was discovered that WebKit did not properly handle certain SVGPathList data structures. If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-0945) [More...]. ==========================================================Ubuntu Security Notice USN-836-1 September 23, 2009 webkit vulnerabilities CVE-2009-0945, CVE-2009-1687, CVE-2009-1690, CVE-2009-1698, CVE-2009-1711, CVE-2009-1712, CVE-2009-1725 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.10: libwebkit-1.0-1 1.0.1-2ubuntu0.2 libwebkit-1.0-1-dbg 1.0.1-2ubuntu0.2 libwebkit-dev 1.0.1-2ubuntu0.2 Ubuntu 9.04: libwebkit-1.0-1 1.0.1-4ubuntu0.1 libwebkit-1.0-1-dbg 1.0.1-4ubuntu0.1 libwebkit-dev 1.0.1-4ubuntu0.1 After a standard system upgrade you need to restart any applications that use WebKit, such as Epiphany-webkit and Midori, to effect the necessary changes. Details follow: It was discovered that WebKit did not properly handle certain SVGPathList data structures. If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-0945) Several flaws were discovered in the WebKit browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-1687, CVE-2009-1690, CVE-2009-1698, CVE-2009-1711, CVE-2009-1725) It wasdiscovered that WebKit did not prevent the loading of local Java applets. If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-1712) Updated packages for Ubuntu 8.10: Source archives: Size/MD5: 25401 ca58f621eec09ea60847fb7eeb18ef2a Size/MD5: 1538 ebdb32117beca5fff473ca0c1b065b42 Size/MD5: 13418752 4de68a5773998bea14e8939aa341c466 Architecture independent packages: Size/MD5: 34590 acb9cdfb9608c5f4146ea88eef384e75 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 62592212 df3152f6a40e538e3a267908d83783c0 Size/MD5: 3501472 e68f67894e53eb2faa48191ea3953732 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 62206938 b7d1dde62360865cbc814122b93d4005 Size/MD5: 3014500 73a5a3e9985f6d165120c5c3cca6d06b lpia architecture (Low Power Intel Architecture): Size/MD5: 62284322 75ff8aefee1fdea994f660dab5f6554f Size/MD5: 2966170 1c52f1920282c659a0a81a3be44dde7f Updated packages for Ubuntu 9.04: Source archives: Size/MD5: 30900 0ea9f48f994b9bd759446a939ff5dca3 Size/MD5: 1538 31502504b765f1161825ccdb82f71788 Size/MD5: 13418752 4de68a5773998bea14e8939aa341c466 Architecture independent packages: Size/MD5: 34678 5042c01c01e9d128a13d1457c56b0cbd amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 62772554 3026ef7b332447cae68ed4f72b35ddb2 Size/MD5: 3502830 0fcd75b07524e2d70f8770ccd5bdc0c3 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 62357024 777eb37c5384472cf9b4adac21f0d116 Size/MD5: 3014688 100fd9406ea649edd954f4d154ab4d30 lpia architecture (Low Power Intel Architecture): Size/MD5: 62441454 18aa72b5c443a86153906e5ba4a87e55 Size/MD5: 29680409651199f95dfee6252e2aacde99ebbbf . Security vulnerabilities in WebKit on Ubuntu could permit unauthorized code execution and lead to service interruptions. Ensure your system is updated for protection.. WebKitExploit, UbuntuSecurityNotice, CodeExecutionRisk, DenialOfService, SVGPathListIssue. . Severity: Critical. LinuxSecurity.com Team
Sep 23, 2009
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!