Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

Debian Wheezy DLA-1039-1 Moderate: Rkhunter URL Checks Security Update

debian lts
Calendar Grey July 25, 2017
Dist Debian Esm H88
Enhance the security of your Debian Wheezy system against CVE-2017-7480 by upgrading rkhunter with simple terminal commands and configuration steps
CVE-2017-7480 The original patch introduces new regex to better check for allowed download URLs

Summary

CVE-2017-7480
The original patch introduces new regex to better check for
allowed download URLs.
Other versions of the package in Jessie, Stretch and Sid don't
apply that patch but just disable the download of everything by
default via rkhunter.conf.
In order to make this version consistent with all the other
distributions and don't break existing installations, this will
be done in Wheezy as well.


For Debian 7 "Wheezy", these problems have been fixed in version
1.4.0-1+deb7u1.

We recommend that you upgrade your rkhunter packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Package: rkhunter
Version: 1.4.0-1+deb7u1
CVE ID: CVE-2017-7480

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here