Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora 24 Update: 2017-d5fb74cd2e Critical File Disclosure in Zoneminder

fedora
Calendar Grey February 18, 2017
Scroller Fedora
Urgent security update for Information Exposure in ZoneMinder on Fedora 24 related to CVE-2017-5595. Please update immediately!
Security fix for CVE-2017-5595

Summary

ZoneMinder is a set of applications which is intended to provide a complete

solution allowing you to capture, analyse, record and monitor any cameras you

have attached to a Linux based machine. It is designed to run on kernels which

support the Video For Linux (V4L) interface and has been tested with cameras

attached to BTTV cards, various USB cameras and IP network cameras. It is

designed to support as many cameras as you can attach to your computer without

too much degradation of performance.

Update Information:

Security fix for CVE-2017-5595

Topics%20covered

Topics Covered

security advisory Fedora critical update file disclosure zoneminder

Change Log

References


[ 1 ] Bug #1419507 - CVE-2017-5595 zoneminder: File disclosure due to unfiltered user-input https://bugzilla.redhat.com/show_bug.cgi?id=1419507

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade zoneminder' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: zoneminder
Product: Fedora 24
Version: 1.28.1
Release: 8.fc24
URL: https://zoneminder.com/
Summary: A camera monitoring and analysis tool

Topics%20covered

Topics Covered

security advisory Fedora critical update file disclosure zoneminder

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.