Happy Friday fellow Linux geeks! This week, an update for the Linux kernel that fixes multiple vulnerabilities that threaten the security and availability of your systems and the privacy of your sensitive information has been released. We encourage users to update immediately. A high-severity vulnerability in LibreOffice that could lead to arbitrary script execution without warning has also been fixed.

Read on to learn about how you can update your systems to obtain these fixes for your distribution.

Have you customized your LinuxSecurity advisories based on the distro(s) you use? If not, we encourage you to do so now!

Yours in Open Source,

Brittany Signature 150 Esm W150

Linux Kernel

The Discovery 

Several important vulnerabilities have been discovered in the Linux kernel.

LinuxKernel Esm W206

The Impact

These bugs could result in remote code execution (RCE), denial of service (DoS), buffer overflow attacks, privilege escalation attacks and information leakage.

The Fix

An update that fixes these issues is now available for the Linux kernel. We recommend that you update now to protect the security, integrity and availability of your systems.

Your Related Advisories:

Register to Customize Your Advisories

LibreOffice

The Discovery 

A high-severity vulnerability has been found in LibreOffice (CVE-2022-3140). It was discovered that LibreOffice links using the vnd.libreoffice.command scheme could be constructed to call internal macros with arbitrary arguments. 
Libreoffice Esm W300

The Impact

This issue could result in arbitrary script execution without warning.

The Fix

This bug has been fixed in the latest version of LibreOffice. All LibreOffice users should upgrade to the latest version to protect against attacks leading to compromise.

Your Related Advisories:

Register to Customize Your Advisories

Chromium

The Discovery

Five important use-after-free vulnerabilities have been identified in Chromium.

The Impact

These high-severity flaws could allow a remote attacker to potentially exploit heap corruption.

Chromium Esm W225

The Fix

An update for Chromium that mitigates these issues has been released. We recommend that you update immediately to prevent potential exploits.

Your Related Advisories:

Register to Customize Your Advisories