Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
203

Mageia 9: MGASA-2025-0082 critical: libcap configuration error

pam_cap: Fix potential configuration parsing error. (CVE-2025-1390) References: - https://bugs.mageia.org/show_bug.cgi?id=34048 - https://ubuntu.com/security/notices/USN-7287-1 . MGASA-2025-0082 - Updated libcap packages fix security vulnerability Publication date: 26 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0082.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-1390 pam_cap: Fix potential configuration parsing error. (CVE-2025-1390) References: - https://bugs.mageia.org/show_bug.cgi?id=34048 - https://ubuntu.com/security/notices/USN-7287-1 - https://www.cve.org/CVERecord?id=CVE-2025-1390 SRPMS: - 9/core/libcap-2.52-5.1.mga9 . Newly released libcap updates address vulnerabilities linked to configuration parsing. Ensure your system's safety with the latest Mageia updates.. libcap security,mageia advisory,configuration parsing fix,security patch,updated packages. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 26, 2025 Critical Mageia
100

SUSE: 2004:011 Moderate: Live CD Remote Root Access Threat

The freshly released SUSE LINUX 9.1 comes in two variants:* SUSE LINUX 9.1 Professional (5 CD-ROMs, 2 double sided DVDs, printed manuals, for Intel i386 32Bit platform and 1 DVD for the AMD 64Bit platform) * SUSE LINUX 9.1 Personal (2 CD-ROMs: 1 installable CD-ROM, 1 Live CD-ROM for running SUSE LINUX on your PC without actually installing the system.)This SUSE Security Announcement targets the [More...]. -----BEGIN PGP SIGNED MESSAGE-----______________________________________________________________________________ SuSE Security Announcement Package: Live CD 9.1 Announcement-ID: SuSE-SA:2004:011 Date: Thursday, May 6th 2004 22:30 MEST Affected products: SUSE LINUX 9.1 Personal Edition Live CD Vulnerability Type: remote root access Severity (1-10): 8 SuSE default package: yes Other affected systems: none Content of this advisory: 1) security vulnerability resolved: Live CD 9.1 problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The freshly released SUSE LINUX 9.1 comes in two variants: * SUSE LINUX 9.1 Professional (5 CD-ROMs, 2 double sided DVDs, printed manuals, for Intel i386 32Bit platform and 1 DVD for the AMD 64Bit platform) * SUSE LINUX 9.1 Personal (2 CD-ROMs: 1 installable CD-ROM, 1 Live CD-ROM for running SUSE LINUX on your PC without actually installing the system.) This SUSE Security Announcement targets the Live CD that comes with the SUSE LINUX 9.1 Personal edition. The Live CD can boot and run on any PC that has a CD-ROM drive, offering a convenient opportunity forusers who want to try out SUSE Linux without any modification to the system that is installed on the computer. Similar CD-ROM iso images have been available for download from our ftp server with each release of the SUSE LINUX home user product for years. Upon boot, the Live CD will automatically configure a network card if one has been detected. It requires user interaction for dialup network access. A configuration error on the Live CD allows for a passwordless, remote root login to the system via ssh, if the computer has booted from the Live CD and if it is connected to a network. Since the CD-ROM is a read-only medium by definition, there is no solution for this error that would be persistent over a reboot from the Live CD. Manually killing all running instances of the secure shell daemon ("killall sshd" as root) after each boot cures the problem, while still exposing the vulnerability in the time window between startup and the killing of the sshd process. It is a policy for a fresh install of SUSE LINUX products to enable the user to log on to the system using secure shell (ssh). During the installation of the system, the user is prompted for a root password. The Live CD does not install any system on a medium and therefore does not ask for a root password. By consequence, passwordless logins should be denied on the system, regardless of whether the account in question is the super user account or not. The Live CD 9.1 suffers from this misconfiguration. Our permanent fix for the vulnerability is to download the iso image of the fixed Live CD 9.1 from the URL as listed below and to burn it on a CD-R using a CD-burner and the software that comes with the SUSE LINUX 9.1 Personal or Professional (cdrecord, k3b). The new image still runs a secure shell daemon for remote login, but it does not allow remote logins on a zero-length passwordaccount, and it denies remote root login attempts, independently from the password. We thank Patrick Kranefeld and Fabian Franz who have reported the configuration neglectfulness on the SUSE LINUX 9.1 Live CD to SUSE Security. Image authenticity verification: The file LiveCD-9.1-01.iso has a length of 706349056 bytes. If you run the command "md5sum LiveCD-9.1-01.iso" after you have downloaded the file, the md5sum command should print the following md5sum: 9f4ed1bc6b3ee582bf593fde75d5db43 This md5 sum is also contained in the file MD5SUMS in the same directory as the LiveCD-9.1-01.iso file. Its signature (by This email address is being protected from spambots. You need JavaScript enabled to view it.) is contained in the file MD5SUMS.sig. The download location: 9f4ed1bc6b3ee582bf593fde75d5db43 A note: Please use a mirror for downloading the SUSE LINUX 9.1 Live CD. Mirrors close to you can be found at https://www.suse.com/ ______________________________________________________________________________ 2) Pending vulnerabilities in SuSE Distributions and Workarounds: - canna New canna packages are available on our ftp servers, fixing tmp race conditions. - xchat A buffer overflow in the SOCKS5 code of the XChat program has been fixed. New packages are available on our ftp servers. - tcpdump The tcpdump program contained a remote DoS condition in its ISAKMP packet handling (CAN-2004-0183 and CAN-2004-0184). Fixed packages are available on our ftp servers. - lha A buffer overflow in the header parsing routines of lha has been fixed. Additionally lha did not properly handle pathnames within archives (CAN-2004-0234 and CAN-2004-0235). Fixed packages are available on our ftp servers. ______________________________________________________________________________ 3) standard appendix: authenticity verification, additional information - Package authenticity verification: SuSE update packages are available on many mirror ftp servers all over the world. While this service is being considered valuable and important to the free and open source software community, many users wish to be sure about the origin of the package and its content before installing the package. There are two verification methods that can be used independently from each other to prove the authenticity of a downloaded file or rpm package: 1) md5sums as provided in the (cryptographically signed) announcement. 2) using the internal gpg signatures of the rpm package. 1) execute the command md5sum after you downloaded the file from a SuSE ftp server or its mirrors. Then, compare the resulting md5sum with the one that is listed in the announcement. Since the announcement containing the checksums is cryptographically signed (usually using the key This email address is being protected from spambots. You need JavaScript enabled to view it.), the checksums show proof of the authenticity of the package. We disrecommend to subscribe to security lists which cause the email message containing the announcement to be modified so that the signature does not match after transport through the mailing list software. Downsides: You must be able to verify the authenticity of the announcement in the first place. If RPM packages are being rebuilt and a new version of a package is published on the ftp server, all md5 sums for the files are useless. 2) rpm package signatures provide an easy way to verify the authenticity of an rpm package. Use the command rpm -v --checksig to verify the signature of the package, where is the filename of the rpm package that you have downloaded. Of course, package authenticity verification can only target an uninstalled rpm package file. Prerequisites: a) gpg is installed b) The package is signed using a certain key. Thepublic part of this key must be installed by the gpg program in the directory ~/.gnupg/ under the user's home directory who performs the signature verification (usually root). You can import the key that is used by SuSE in rpm packages for SuSE Linux by saving this announcement to a file ("announcement.txt") and running the command (do "su -" to be root): gpg --batch; gpg < announcement.txt | gpg --import SuSE Linux distributions version 7.1 and thereafter install the key "This email address is being protected from spambots. You need JavaScript enabled to view it." upon installation or upgrade, provided that the package gpg is installed. The file containing the public key is placed at the toplevel directory of the first CD (pubring.gpg) and at ftp://ftp.suse.com/pub/suse/pubring.gpg-build.suse.de . - SuSE runs two security mailing lists to which any interested party may subscribe: This email address is being protected from spambots. You need JavaScript enabled to view it. - general/linux/SuSE security discussion. All SuSE security announcements are sent to this list. To subscribe, send an email to . This email address is being protected from spambots. You need JavaScript enabled to view it. - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to . For general information or the frequently asked questions (faq) send mail to: or respectively. ==================================================================== SuSE's security contact is or . The public key is listed below. ==================================================================== . The SUSE LINUX 9.1 Live CD security advisory addresses a significant vulnerability related to remote access. Full information provided.. SUSE Linux Live CD, security updates, remote access flaws. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 06, 2004 Important SuSE
87

Debian 2.2: DSA-032-1 Critical Proftpd Root Issue And Symlink Concern

There are two problems with the version of proftpd that is in Debian 2.2 (potato).. ------------------------------------------------------------------------ Debian Security Advisory DSA-032-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Wichert Akkerman March 7, 2001 ------------------------------------------------------------------------ Package: proftpd Vulnerability: proftpd running as root, /var symlink removal Debian-specific: yes The following problems have been reported for the version of proftpd in Debian 2.2 (potato): 1. There is a configuration error in the postinst script, when the user enters 'yes', when asked if anonymous access should be enabled. The postinst script wrongly leaves the 'run as uid/gid root' configuration option in /etc/proftpd.conf, and adds a 'run as uid/gid nobody' option that has no effect. 2. There is a bug that comes up when /var is a symlink, and proftpd is restarted. When stopping proftpd, the /var symlink is removed; when it's started again a file named /var is created. The above problems have been corrected in proftpd-1.2.0pre10-2.0potato1. We recommend you upgrade your proftpd package immediately. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 2.2 alias potato ------------------------------------- Potato was released for the alpha, arm, i386, m68k, powerpc and sparc architectures. Source archives: MD5 checksum: d75281d5332b005efd94ad0ff5ac3f63 MD5 checksum: 8ff4de189c0b986ab4496ef7ae6467f4 MD5 checksum: a1c25e59bb4281e2f83000796dc52388 Alpha architecture: MD5 checksum: 2e3d924a93692fc546f76fadf6e35cf7 ARM architecture: MD5 checksum: 2e2e9a921f45c6c73f0c0a1ba2c7fb13 Intel ia32 architecture: MD5 checksum: 9c0ff3c87e4802316081775fcf80c5d2 Motorola 680x0 architecture: MD5 checksum: 615709bf8777da7939217cf316c529b7 PowerPC architecture: eb MD5 checksum: 5a384113e857ba4a0b6bdcfce62ca880 Sun Sparc architecture: MD5 checksum: c99f335bca49f98867b1a9c473c97edc These files will be moved into soon. For not yet released architectures please refer to the appropriate directory . -- ---------------------------------------------------------------------------- apt-get: deb Debian -- Security Information stable/updates main dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Ensure secure fix for proftpd vulnerabilities on Debian 2.2 with the recommended software upgrade process for safety.. proftpd update,security advisory,debian proftpd,root configuration fix,symlink vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 06, 2001 Critical Debian
100

SuSE: 2000-09-07 Moderate: Apache Remote File Access Problem

The configuration file for apache contains two security relevant errors.. -----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: apache Date: Thursday, September 7th, 2000 20:00 MEST Affected SuSE versions: 6.1, 6.2, 6.3, 6.4, 7.0 Vulnerability Type: remote file viewing Severity (1-10): 2 SuSE default package: yes Other affected systems: none, as of the release date of this advisory Content of this advisory: 1) security vulnerability resolved: apache problem description, discussion, solution and upgrade information 2) credits: @stake 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The default package selection in SuSE distributions includes apache. The configuration file that comes with the package contains two security relevant errors: a) Starting in SuSE-6.0, a section in apache's configuration file /etc/httpd/httpd.conf reads Alias /cgi-bin-sdb/ /usr/local/httpd/cgi-bin/ This allows remote users to read the cgi script sources of the server, located in /usr/local/httpd/cgi-bin/. b) Starting with SuSE-6.3, the distribution comes with the apache module WebDAV. It is contained in a seperate package, named mod_dav, and it is installed if selected by hand or if a network server configuration has been selected in the installation process. mod_dav is not contained in the default package selection. WebDAV stands for "Web-based Distributed Authoring and Versioning" and allows users to collaboratively edit and manage files on remote web servers (see WebDAV Resources for further details!). If WebDAV is installed, apache willautomatically run with the module activated. Opposing the recommendations on the WebDAV homepage under mod_dav: a DAV module for Apache there is no access control or authentification activated. This should most definitely be considered a security problem. The overall policy wrt activating an installed package will adopt to this conclusion in future releases of the SuSE Linux distribution. Problem a) and b) can be easily solved by changing the relevant parts of apache's configuration file /etc/httpd/httpd.conf: a) Change "Alias /cgi-bin-sdb/ /usr/local/httpd/cgi-bin/" to read: "ScriptAlias /cgi-bin-sdb/ /usr/local/httpd/cgi-bin/" Then, restart apache: `/sbin/init.d/apache restart' b) Change "DAV On" to read: "DAV Off". This removes the problem, regardless of the package being installed or not. Alternatively, you may wish to remove the mod_dav package using the command `rpm -e mod_dav'. Then, restart apache: `/sbin/init.d/apache restart' SuSE strongly recommends to have these changes applied as soon as possible. In addition, SuSE provides an update for the vulnerable misconfigured packages for the case that the admin of a SuSE Linux machine did not change the configuration file yet. Download the update package from locations desribed below and install the package with the command `rpm -Fhv file.rpm'. The md5sum for each file is in the line below. You can verify the integrity of the rpm files using the command `rpm --checksig --nogpg file.rpm', independently from the md5 signatures below. i386 Intel Platform: SuSE-7.0 65bac933de7676ad3d8f63b32c608dad source rpm: 5b0f9ce9b5e2c3a45356fcd9cdff07ba SuSE-6.4 a4bea77974c9d300ac13698e6f9812eb source rpm: 39cf311c44bc760159c711c7ec97685f SuSE-6.3 87d7a6426857e6f3afcf991c273fc1a5 source rpm: ab81b76d0c4e6c765b77a69fd4143620 SuSE-6.2 d7c513bb4aad15a9f3dfb11ff1302405 source rpm: bdabbdf7df648c3b4b8c5fd031e65cfc SuSE-6.1 db40e37d1931fb4e5830358b37acee5e source rpm: 8ad785cb5f16456b8540982f1175b0b0 SuSE-6.0 Please use the update packages from the 6.1 directory for SuSE-6.0! Sparc Platform: SuSE-7.0 66f87cb2100960ee72ae1110fa077424 source rpm: fff4bd1d37a7e9d430e8a60898865567 AXP Alpha Platform: SuSE-6.4 The update packages will be available soon at the usual location . Until then, please correct the configuration file by hand as described above. SuSE-6.3 The update packages will be available soon at the usual location . Until then, please correct the configuration file by hand as described above. SuSE-6.1 eaca8f06c54c669d60f6a06fbe7301dc source rpm: 2227de2e6d5faf268413cd474175d126 PPC Power PC Platform: SuSE-6.4 0c830d4d33f2bac33d6a44ab0efc34e7 source rpm: f5fd7575d67e369f87fb2e5c47b61eaf SuSE-6.3 The update packages will be available soon at the usual location . Until then, please correct the configuration file by hand as described above. ______________________________________________________________________________ 2) Credits: SuSE would like to express its sincere appreciation for the efforts and the working style of the Cerberus Security Team/@Stake Inc., in particular to mnemonix (David Litchfield ) and to weld . Have a look at their website at for further information. ______________________________________________________________________________ 3) standard appendix: SuSE runs two security mailing lists to which any interested party may subscribe: This email address is being protected from spambots. You need JavaScript enabled to view it. - general/linux/SuSE security discussion. All SuSE security announcements are sent to this list. To subscribe, send an email to . This email address is being protected from spambots. You need JavaScript enabled to view it. - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to . For general information or the frequently asked questions (faq) send mail to: or respectively. ============================================== SuSE's security contact is . ============================================== Regards, Roman Drahtmüller. - - -- - - | Roman Drahtmüller // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - - ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. SuSE GmbH makes no warranties of any kind whatsoever with respect to the information contained in this security advisory. Type Bits/KeyID Date User ID pub 2048/3D25D3D9 1999/03/06 SuSE Security Team - -----BEGIN PGP PUBLIC KEY BLOCK----- Version:2.6.3i mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12Cg==pIeS - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBObfXOHey5gA9JdPZAQHhzwf+KIt1AysU1WAwQXlQTssfVFEM0nh6fT2O FRqoAF+2FpC3FaTZBmTqYTuNtegSG0cndg/NzWy2Q2CTFxbEzm7aJqOxtS/R6Am2 GPKV6k51gW0lmL7Pl9j15s9kngW/U9fRnMX/SCw4CiHnuMTD+AuERFYEQOAVFaQy Qvw03BYRJnr36DOl3PUovir5TyIrBQloPr6IxfJPvL/mbHz63h8ISBgLjfITpAY0 7FJtUN4SM86pXcuO7LGyOTQciAzvIChSqelaZnqGEUVhmGBcTzTsaoMrwf43w2NP KQ61Ez34EwNN1AA/jhY9ARdenNUKCTXcWC6hFcXibMKTdqgJJq6waA==x36R -----END PGP SIGNATURE----- . Addressing critical weaknesses in Apache configurations on SuSE platforms to enhance server security.. apache configuration, suse security, remote access issue, mod_dav fix, security protocols. . LinuxSecurity.com Team

Calendar 2 Sep 07, 2000 SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here