Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora 26: FEDORA-2017-3cc284bc4d High: Nginx Path Traversal Vulnerability

fedora
Calendar Grey February 18, 2017
Scroller Fedora
Important zoneminder patch for Fedora 25 tackling file exposure vulnerability, boosting protection for surveillance systems.
Security fix for CVE-2017-5595

Summary

ZoneMinder is a set of applications which is intended to provide a complete

solution allowing you to capture, analyse, record and monitor any cameras you

have attached to a Linux based machine. It is designed to run on kernels which

support the Video For Linux (V4L) interface and has been tested with cameras

attached to BTTV cards, various USB cameras and IP network cameras. It is

designed to support as many cameras as you can attach to your computer without

too much degradation of performance.

Update Information:

Security fix for CVE-2017-5595

Topics%20covered

Topics Covered

security advisory fedora critical security fix file disclosure zoneminder

Change Log

References


[ 1 ] Bug #1419507 - CVE-2017-5595 zoneminder: File disclosure due to unfiltered user-input https://bugzilla.redhat.com/show_bug.cgi?id=1419507

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade zoneminder' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: zoneminder
Product: Fedora 25
Version: 1.28.1
Release: 8.fc25
URL: https://zoneminder.com/
Summary: A camera monitoring and analysis tool

Topics%20covered

Topics Covered

security advisory fedora critical security fix file disclosure zoneminder

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.