Alerts This Week
Warning Icon 1 609
Alerts This Week
Warning Icon 1 609

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
197

Debian 7 Wheezy: Critical Security Advisory DLA-967-1 for Gajim Exploit

Gajim implements XEP-0146, an XMPP extension to run commands remotely from another client. However it was found that malicious servers can trigger commands, which could lead to leaking private conversations from encrypted sessions. To solve this, XEP-0146 support has been . Hash: SHA256 Package : gajim Version : 0.15.1-4.1+deb7u3 CVE ID : CVE-2016-10376 Debian Bug : 863445 Gajim implements XEP-0146, an XMPP extension to run commands remotely from another client. However it was found that malicious servers can trigger commands, which could lead to leaking private conversations from encrypted sessions. To solve this, XEP-0146 support has been disabled by default. For Debian 7 "Wheezy", these problems have been fixed in version 0.15.1-4.1+deb7u3. We recommend that you upgrade your gajim packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Gajim patch addresses flaws in command handling that threaten encryption integrity. Update today for improved security.. Gajim Update, Remote Command Exploits, Debian Security, XMPP Security, Encrypted Session Protection. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 30, 2017 Critical Debian LTS
87

Debian 3.0: DSA-260-1 Critical: File Command Buffer Overflow Exploit

A buffer overflow vulnerability in the ELF formatparsing of the "file" command, one which can be used to executearbitrary code with the privileges of the user running the command has been fixed.. ---------------------------------------------------------------------------- Debian Security Advisory DSA-260-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Michael Stone March 13, 2003 Debian -- Debian security FAQ ---------------------------------------------------------------------------- Package: file Vulnerability: buffer overflow Debian-specific: no CVE Id: CAN-2003-0102 iDEFENSE discovered a buffer overflow vulnerability in the ELF format parsing of the "file" command, one which can be used to execute arbitrary code with the privileges of the user running the command. The vulnerability can be exploited by crafting a special ELF binary which is then input to file. This could be accomplished by leaving the binary on the file system and waiting for someone to use file to identify it, or by passing it to a service that uses file to classify input. (For example, some printer filters run file to determine how to process input going to a printer.) Fixed packages are available in version 3.28-1.potato.1 for Debian 2.2 (potato) and version 3.37-3.1.woody.1 for Debian 3.0 (woody). We recommend you upgrade your file package immediately. Upgrade Instructions -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. For not yet released architectures please refer to the appropriate directory . Debian 2.2 (potato) ---------------------- Debian2.2 (potato) was released for alpha, arm, i386, m68k, powerpc and sparc. Source archives: Size/MD5 checksum: 639 85bbfb52d13c084a9029f3552d7e1dfe Size/MD5 checksum: 124529 a6bdc66e9c6af58da6977a57923c02c0 Size/MD5 checksum: 31736 9c23fac99161cc9a5e133be542fe0226 alpha architecture (DEC Alpha) Size/MD5 checksum: 92170 18bdf5775e40243e7e17ebac7dbed730 arm architecture (ARM) Size/MD5 checksum: 88572 c51e09397b04358ab7e42c710dab4ca9 i386 architecture (Intel ia32) Size/MD5 checksum: 88164 9a1945e7449e5bc243fd22af2cfb15a2 m68k architecture (Motorola Mc680x0) Size/MD5 checksum: 87186 1348a858e3715d25c862648c41ac793f powerpc architecture (PowerPC) Size/MD5 checksum: 89346 b7190fd329df08377dc922d014d46195 sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 91412 032448fa4cf7b4bc4d8ce3bbe7470a3f Debian 3.0 (woody) ------------------- Debian 3.0 (woody) was released for alpha, arm, hppa, i386, ia64, m68k, mips, mipsel, powerpc, s390 and sparc. Source archives: Size/MD5 checksum: 47683 5653fa12fb92b465017b7fb847591bc5 Size/MD6 checksum: 678 9e5705581862d737a338471bfa031617 Size/MD5 checksum: 166623 5743b2fc24743b6188504762d40c0b4c alpha architecture (DEC Alpha) Size/MD5 checksum: 180780 814139b8680577450d416fb386737d56 arm architecture (ARM) Size/MD5 checksum: 177040 b49fb60a60641cf5e27dea7b44338938 hppa architecture (HP PA RISC) Size/MD5 checksum: 179412 2388427c4f52ca11e2ac00b0d12e1b42 i386 architecture (Intel ia32) Size/MD5 checksum: 175246 ebac35a75aebe97cad2ebbfffe000f82 ia64 architecture (Intel ia64) Size/MD5 checksum: 184942 934d1a23acd4e343e390ebed66f2101e m68k architecture (Motorola Mc680x0) Size/MD5 checksum: 174058 69c08b32893304e1a821793ecf193393 mipsarchitecture (MIPS (Big Endian)) Size/MD5 checksum: 178576 f913464347dde9972ec2c80b29393f6b mipsel architecture (MIPS (Little Endian)) Size/MD5 checksum: 178460 0ce50ff45b9db314a737c8002e3bcb9c powerpc architecture (PowerPC) Size/MD5 checksum: 177072 f43bc712f83b2cad0e4f3e40b1d491e7 s390 architecture (IBM S/390) Size/MD5 checksum: 177980 305395cc6fed6830697b7f39984d01d3 sparc architecture (Sun SPARC/UltraSPARC) Size/MD5 checksum: 179316 b957e930f657cd1674ef66a38ae2dbb0 ---------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . An issue in the Debian tool referred to as file has been fixed. Instructions on applying updates to mitigate potential risks are available.. Buffer Overflow Exploit, Debian Security Update, File Command Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 13, 2003 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here