Happy Friday fellow Linux geeks! This week, important updates have been issued for VLC, Mailman and Chromium. Read on to learn about these vulnerabilities and how to secure your system against them. 

Now you can personalize your LinuxSecurity.com User Profile to include the latest advisories for the distros you select, making it easier than ever to keep your system up-to-date and secure.

Have a question about or comment on one of the vulnerabilities highlighted in today's newsletter? Let's discuss!

Yours in Open Source,

Brittany Signature 150 Esm W150

VLC

The Discovery 

Multiple vulnerabilities have been discovered in the free and open-source VLC media player.

Vlc Esm W211

The Impact

These flaws could result in heap-based buffer overflow attacks, the execution of arbitrary code or denial of service (DoS) if a malformed media file is opened.

The Fix

A VLC security update that fixes these issues has been released. We recommend that you update as soon as possible to protect the security, integrity and availability of your systems.

Your Related Advisories:

[distro_list_1]

Mailman

The Discovery 

Several vulnerabilities were found in Mailman, a web-based mailing list manager (CVE-2021-43331, CVE-2021-43332 and CVE-2021-44227).


Mailman Esm W244

The Impact

These bugs could result in cross-site scripting (XSS) attacks and brute-force attacks, among other threats.

The Fix

A Mailman security update mitigates these issues. Update now to protect against attacks and compromise!

Your Related Advisories:

[distro_list_2]

Chromium

The Discovery

Multiple security issues were discovered in Chromium (CVE-2022-2007, CVE-2022-2008, CVE-2022-2010 and CVE-2022-2011).

The ImpactChromium Esm W225

These vulnerabilities could lead to the execution of arbitrary code, denial of service (DoS), or information disclosure.

The Fix

A Chromium security update fixes these flaws. We recommend that you update promptly to secure your systems and your sensitive information.

Your Related Advisories:

[distro_list_3]