Happy Friday fellow Linux geeks! This week, important updates have been issued for webkit2gtk, Xen and exiv2. Read on to learn about these vulnerabilities and how to secure your system against them. 

Have a question about or comment on one of the vulnerabilities highlighted in today's newsletter? Let's discuss!

Check out the new Remote Access Plus solution from ManageEngine to help admins secure their servers against vulnerabilities like these by automating security patches.

Yours in Open Source,

Brittany Signature 150 Esm W150

webkit2gtk

The Discovery 

Multiple security vulnerabilities were discovered in webkit2gtk (CVE-2022-42799, CVE-2022-42823 and CVE-2022-42824).

Webkitgtk Esm W225

The Impact

These bugs could result in interface spoofing, arbitrary code execution and the disclosure of sensitive information.

The Fix

A webkit2gtk security update that fixes these issues has been released. We recommend that you upgrade your webkit2gtk packages now to protect your sensitive information and secure your systems against attacks and compromise. 

Your Related Advisories:

[distro_list_1]

Xen

The Discovery 

Multiple vulnerabilities have been discovered in the Xen hypervisor. 


Xen Esm W400

The Impact

These issues could result in privilege escalation, denial of service (DoS), or information leaks.

The Fix

A Xen security update mitigates these flaws. We recommend that you upgrade your Xen packages promptly to protect the security, integrity and availability of your systems and the privacy of your sensitive information.

Your Related Advisories:

[distro_list_2]

exiv2

The Discovery

Three security bugs have been found in exiv2 including a reachable assertion on crafted input (CVE-2017-11683), a buffer overflow when handling crafted meta-data of CRW images (CVE-2020-19716), and potential integer overflow in the QuickTime component (CVE-2022-3756).

The Impact

These issues could result in denial of service (DoS) attacks.

Xiv2 Esm W289

The Fix

An exiv2 security update fixes these bugs. We recommend that you upgrade your exiv2 packages as soon as possible to protect against exploits and prevent downtime.

Your Related Advisories:

[distro_list_3]