Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
89
security advisoryFedoraprivilege escalationFedora 28: FEDORA-2018-e4732930df Critical: Beep Privilege Escalation
Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. ---- Security fix for CVE-2018-1000532 and a few smaller fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-e4732930df 2019-01-11 00:16:18.759264 --------------------------------------------------------------------------------Name : beep Product : Fedora 28 Version : 1.3 Release : 26.fc28 URL : Summary : Beep the PC speaker any number of ways Description : Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of course, it has no notion of what's interesting, but it's real good at that notifying part. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. ---- Security fix for CVE-2018-1000532 and a few smaller fixes --------------------------------------------------------------------------------ChangeLog: * Sat Dec 29 2018 Hans Ulrich Niedermann - 1.3-26 - Stop shipping old sudo related config files - Refuse to run when run via sudo - Set up group 'beep' for write access to evdev device with new udev rule - Update README.fedora to reflect new group permission setup on evdev device * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-25 - guard against directory traversal in /dev/input/ check -refuse to run if setuid or setgid root - make the evdev device the first device to look for (does not require root) * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-24 - Actually apply the patches - Update COPYING with new FSF address - Fix Patch9 to work as non-git patch (do the rest with shell) - Proper naming of Patch14 - Exit beep when error accessing API * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-23 - Fix CVE-2018-1000532 and mitigate against related issues (#1595592) - Fix a number of potential integer overflows * Thu Jul 12 2018 Fedora Release Engineering - 1.3-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Apr 3 2018 Hans Ulrich Niedermann - 1.3-21 - Add CVE-2018-0492 fix. - Behaviour of multiple -f parameters matches documentation now. --------------------------------------------------------------------------------References: [ 1 ] Bug #1595591 - CVE-2018-1000532 beep: External control of file name or path via --device option https://bugzilla.redhat.com/show_bug.cgi?id=1595591 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-e4732930df' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 11, 2019
•Critical
Fedora
89
security advisorymoderateFedoraFedora 28: 2019-01-11 Moderate Beep Privilege Escalation Security Advisory
Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. ---- Security fix for CVE-2018-1000532 and a few smaller fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-e4732930df 2019-01-11 00:16:18.759264 --------------------------------------------------------------------------------Name : beep Product : Fedora 28 Version : 1.3 Release : 26.fc28 URL : Summary : Beep the PC speaker any number of ways Description : Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of course, it has no notion of what's interesting, but it's real good at that notifying part. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. ---- Security fix for CVE-2018-1000532 and a few smaller fixes --------------------------------------------------------------------------------ChangeLog: * Sat Dec 29 2018 Hans Ulrich Niedermann - 1.3-26 - Stop shipping old sudo related config files - Refuse to run when run via sudo - Set up group 'beep' for write access to evdev device with new udev rule - Update README.fedora to reflect new group permission setup on evdev device * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-25 - guard against directory traversal in /dev/input/ check -refuse to run if setuid or setgid root - make the evdev device the first device to look for (does not require root) * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-24 - Actually apply the patches - Update COPYING with new FSF address - Fix Patch9 to work as non-git patch (do the rest with shell) - Proper naming of Patch14 - Exit beep when error accessing API * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-23 - Fix CVE-2018-1000532 and mitigate against related issues (#1595592) - Fix a number of potential integer overflows * Thu Jul 12 2018 Fedora Release Engineering - 1.3-22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Tue Apr 3 2018 Hans Ulrich Niedermann - 1.3-21 - Add CVE-2018-0492 fix. - Behaviour of multiple -f parameters matches documentation now. --------------------------------------------------------------------------------References: [ 1 ] Bug #1595591 - CVE-2018-1000532 beep: External control of file name or path via --device option https://bugzilla.redhat.com/show_bug.cgi?id=1595591 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-e4732930df' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 11, 2019
•Important
Fedora
89
security advisoryFedoraprivilege escalationFedora 29: FEDORA-2018-92eff16e03 Moderate: Beep Privilege Escalation
Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. ---- Security fix for CVE-2018-1000532 and a few smaller fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-92eff16e03 2019-01-10 08:21:16.701743 --------------------------------------------------------------------------------Name : beep Product : Fedora 29 Version : 1.3 Release : 26.fc29 URL : Summary : Beep the PC speaker any number of ways Description : Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of course, it has no notion of what's interesting, but it's real good at that notifying part. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. ---- Security fix for CVE-2018-1000532 and a few smaller fixes --------------------------------------------------------------------------------ChangeLog: * Sat Dec 29 2018 Hans Ulrich Niedermann - 1.3-26 - Stop shipping old sudo related config files - Refuse to run when run via sudo - Set up group 'beep' for write access to evdev device with new udev rule - Update README.fedora to reflect new group permission setup on evdev device * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-25 - guard against directory traversal in /dev/input/ check -refuse to run if setuid or setgid root - make the evdev device the first device to look for (does not require root) * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-24 - Actually apply the patches - Update COPYING with new FSF address - Fix Patch9 to work as non-git patch (do the rest with shell) - Proper naming of Patch14 - Exit beep when error accessing API * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-23 - Fix CVE-2018-1000532 and mitigate against related issues (#1595592) - Fix a number of potential integer overflows --------------------------------------------------------------------------------References: [ 1 ] Bug #1595591 - CVE-2018-1000532 beep: External control of file name or path via --device option https://bugzilla.redhat.com/show_bug.cgi?id=1595591 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-92eff16e03' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 10, 2019
Fedora
89
security advisoryFedoraprivilege escalationFedora 29: 2018-92eff16e03 Critical: Privilege Escalation in Beep
Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. ---- Security fix for CVE-2018-1000532 and a few smaller fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-92eff16e03 2019-01-10 08:21:16.701743 --------------------------------------------------------------------------------Name : beep Product : Fedora 29 Version : 1.3 Release : 26.fc29 URL : Summary : Beep the PC speaker any number of ways Description : Beep allows the user to control the PC speaker with precision, allowing different sounds to indicate different events. While it can be run quite happily on the command line, its intended place of residence is within shell/Perl scripts, notifying the user when something interesting occurs. Of course, it has no notion of what's interesting, but it's real good at that notifying part. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2018-1000532, new non-root permissions and a few smaller fixes. Fix a directory traversal issue introduced with the fix for CVE-2018-1000532, and refuses to run as setuid root or via sudo to avoid any more priviledge escalation issue. ---- Security fix for CVE-2018-1000532 and a few smaller fixes --------------------------------------------------------------------------------ChangeLog: * Sat Dec 29 2018 Hans Ulrich Niedermann - 1.3-26 - Stop shipping old sudo related config files - Refuse to run when run via sudo - Set up group 'beep' for write access to evdev device with new udev rule - Update README.fedora to reflect new group permission setup on evdev device * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-25 - guard against directory traversal in /dev/input/ check -refuse to run if setuid or setgid root - make the evdev device the first device to look for (does not require root) * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-24 - Actually apply the patches - Update COPYING with new FSF address - Fix Patch9 to work as non-git patch (do the rest with shell) - Proper naming of Patch14 - Exit beep when error accessing API * Fri Dec 28 2018 Hans Ulrich Niedermann - 1.3-23 - Fix CVE-2018-1000532 and mitigate against related issues (#1595592) - Fix a number of potential integer overflows --------------------------------------------------------------------------------References: [ 1 ] Bug #1595591 - CVE-2018-1000532 beep: External control of file name or path via --device option https://bugzilla.redhat.com/show_bug.cgi?id=1595591 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-92eff16e03' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 10, 2019
•Critical
Fedora
197
security advisorysecurity issuedebianDebian 7 Wheezy DLA-1338-1 Critical: Beep Local Escalation
It was discovered that there was a local privilege escalation vulnerability in beep, an "advanced PC speaker beeper". For Debian 7 "Wheezy", this issue has been fixed in beep version . Package : beep Version : 1.3-3+deb7u1 CVE ID : CVE-2018-0492 Debian Bug : #894667 It was discovered that there was a local privilege escalation vulnerability in beep, an "advanced PC speaker beeper". For Debian 7 "Wheezy", this issue has been fixed in beep version 1.3-3+deb7u1. We recommend that you upgrade your beep packages. Regards, - -- ,'`. : :' : Chris Lamb `. `'`
Apr 03, 2018
•Critical
Debian LTS
87
security advisoryDebianlocal escalationDebian: DSA-4163-1 Moderate: Beep Local Escalation Issue
It was discovered that a race condition in beep (if configured as setuid via debconf) allows local privilege escalation. For the oldstable distribution (jessie), this problem has been fixed . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4163-1
Apr 02, 2018
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!