pam_cap: Fix potential configuration parsing error. (CVE-2025-1390) References: - https://bugs.mageia.org/show_bug.cgi?id=34048 - https://ubuntu.com/security/notices/USN-7287-1 . MGASA-2025-0082 - Updated libcap packages fix security vulnerability Publication date: 26 Feb 2025 URL: https://advisories.mageia.org/MGASA-2025-0082.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-1390 pam_cap: Fix potential configuration parsing error. (CVE-2025-1390) References: - https://bugs.mageia.org/show_bug.cgi?id=34048 - https://ubuntu.com/security/notices/USN-7287-1 - https://www.cve.org/CVERecord?id=CVE-2025-1390 SRPMS: - 9/core/libcap-2.52-5.1.mga9 . Newly released libcap updates address vulnerabilities linked to configuration parsing. Ensure your system's safety with the latest Mageia updates.. libcap security,mageia advisory,configuration parsing fix,security patch,updated packages. . Severity: Critical. LinuxSecurity.com Team
The freshly released SUSE LINUX 9.1 comes in two variants:* SUSE LINUX 9.1 Professional (5 CD-ROMs, 2 double sided DVDs, printed manuals, for Intel i386 32Bit platform and 1 DVD for the AMD 64Bit platform) * SUSE LINUX 9.1 Personal (2 CD-ROMs: 1 installable CD-ROM, 1 Live CD-ROM for running SUSE LINUX on your PC without actually installing the system.)This SUSE Security Announcement targets the [More...]. -----BEGIN PGP SIGNED MESSAGE-----______________________________________________________________________________ SuSE Security Announcement Package: Live CD 9.1 Announcement-ID: SuSE-SA:2004:011 Date: Thursday, May 6th 2004 22:30 MEST Affected products: SUSE LINUX 9.1 Personal Edition Live CD Vulnerability Type: remote root access Severity (1-10): 8 SuSE default package: yes Other affected systems: none Content of this advisory: 1) security vulnerability resolved: Live CD 9.1 problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The freshly released SUSE LINUX 9.1 comes in two variants: * SUSE LINUX 9.1 Professional (5 CD-ROMs, 2 double sided DVDs, printed manuals, for Intel i386 32Bit platform and 1 DVD for the AMD 64Bit platform) * SUSE LINUX 9.1 Personal (2 CD-ROMs: 1 installable CD-ROM, 1 Live CD-ROM for running SUSE LINUX on your PC without actually installing the system.) This SUSE Security Announcement targets the Live CD that comes with the SUSE LINUX 9.1 Personal edition. The Live CD can boot and run on any PC that has a CD-ROM drive, offering a convenient opportunity forusers who want to try out SUSE Linux without any modification to the system that is installed on the computer. Similar CD-ROM iso images have been available for download from our ftp server with each release of the SUSE LINUX home user product for years. Upon boot, the Live CD will automatically configure a network card if one has been detected. It requires user interaction for dialup network access. A configuration error on the Live CD allows for a passwordless, remote root login to the system via ssh, if the computer has booted from the Live CD and if it is connected to a network. Since the CD-ROM is a read-only medium by definition, there is no solution for this error that would be persistent over a reboot from the Live CD. Manually killing all running instances of the secure shell daemon ("killall sshd" as root) after each boot cures the problem, while still exposing the vulnerability in the time window between startup and the killing of the sshd process. It is a policy for a fresh install of SUSE LINUX products to enable the user to log on to the system using secure shell (ssh). During the installation of the system, the user is prompted for a root password. The Live CD does not install any system on a medium and therefore does not ask for a root password. By consequence, passwordless logins should be denied on the system, regardless of whether the account in question is the super user account or not. The Live CD 9.1 suffers from this misconfiguration. Our permanent fix for the vulnerability is to download the iso image of the fixed Live CD 9.1 from the URL as listed below and to burn it on a CD-R using a CD-burner and the software that comes with the SUSE LINUX 9.1 Personal or Professional (cdrecord, k3b). The new image still runs a secure shell daemon for remote login, but it does not allow remote logins on a zero-length passwordaccount, and it denies remote root login attempts, independently from the password. We thank Patrick Kranefeld and Fabian Franz who have reported the configuration neglectfulness on the SUSE LINUX 9.1 Live CD to SUSE Security. Image authenticity verification: The file LiveCD-9.1-01.iso has a length of 706349056 bytes. If you run the command "md5sum LiveCD-9.1-01.iso" after you have downloaded the file, the md5sum command should print the following md5sum: 9f4ed1bc6b3ee582bf593fde75d5db43 This md5 sum is also contained in the file MD5SUMS in the same directory as the LiveCD-9.1-01.iso file. Its signature (by
There are two problems with the version of proftpd that is in Debian 2.2 (potato).. ------------------------------------------------------------------------ Debian Security Advisory DSA-032-1
The configuration file for apache contains two security relevant errors.. -----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: apache Date: Thursday, September 7th, 2000 20:00 MEST Affected SuSE versions: 6.1, 6.2, 6.3, 6.4, 7.0 Vulnerability Type: remote file viewing Severity (1-10): 2 SuSE default package: yes Other affected systems: none, as of the release date of this advisory Content of this advisory: 1) security vulnerability resolved: apache problem description, discussion, solution and upgrade information 2) credits: @stake 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The default package selection in SuSE distributions includes apache. The configuration file that comes with the package contains two security relevant errors: a) Starting in SuSE-6.0, a section in apache's configuration file /etc/httpd/httpd.conf reads Alias /cgi-bin-sdb/ /usr/local/httpd/cgi-bin/ This allows remote users to read the cgi script sources of the server, located in /usr/local/httpd/cgi-bin/. b) Starting with SuSE-6.3, the distribution comes with the apache module WebDAV. It is contained in a seperate package, named mod_dav, and it is installed if selected by hand or if a network server configuration has been selected in the installation process. mod_dav is not contained in the default package selection. WebDAV stands for "Web-based Distributed Authoring and Versioning" and allows users to collaboratively edit and manage files on remote web servers (see WebDAV Resources for further details!). If WebDAV is installed, apache willautomatically run with the module activated. Opposing the recommendations on the WebDAV homepage under mod_dav: a DAV module for Apache there is no access control or authentification activated. This should most definitely be considered a security problem. The overall policy wrt activating an installed package will adopt to this conclusion in future releases of the SuSE Linux distribution. Problem a) and b) can be easily solved by changing the relevant parts of apache's configuration file /etc/httpd/httpd.conf: a) Change "Alias /cgi-bin-sdb/ /usr/local/httpd/cgi-bin/" to read: "ScriptAlias /cgi-bin-sdb/ /usr/local/httpd/cgi-bin/" Then, restart apache: `/sbin/init.d/apache restart' b) Change "DAV On" to read: "DAV Off". This removes the problem, regardless of the package being installed or not. Alternatively, you may wish to remove the mod_dav package using the command `rpm -e mod_dav'. Then, restart apache: `/sbin/init.d/apache restart' SuSE strongly recommends to have these changes applied as soon as possible. In addition, SuSE provides an update for the vulnerable misconfigured packages for the case that the admin of a SuSE Linux machine did not change the configuration file yet. Download the update package from locations desribed below and install the package with the command `rpm -Fhv file.rpm'. The md5sum for each file is in the line below. You can verify the integrity of the rpm files using the command `rpm --checksig --nogpg file.rpm', independently from the md5 signatures below. i386 Intel Platform: SuSE-7.0 65bac933de7676ad3d8f63b32c608dad source rpm: 5b0f9ce9b5e2c3a45356fcd9cdff07ba SuSE-6.4 a4bea77974c9d300ac13698e6f9812eb source rpm: 39cf311c44bc760159c711c7ec97685f SuSE-6.3 87d7a6426857e6f3afcf991c273fc1a5 source rpm: ab81b76d0c4e6c765b77a69fd4143620 SuSE-6.2 d7c513bb4aad15a9f3dfb11ff1302405 source rpm: bdabbdf7df648c3b4b8c5fd031e65cfc SuSE-6.1 db40e37d1931fb4e5830358b37acee5e source rpm: 8ad785cb5f16456b8540982f1175b0b0 SuSE-6.0 Please use the update packages from the 6.1 directory for SuSE-6.0! Sparc Platform: SuSE-7.0 66f87cb2100960ee72ae1110fa077424 source rpm: fff4bd1d37a7e9d430e8a60898865567 AXP Alpha Platform: SuSE-6.4 The update packages will be available soon at the usual location . Until then, please correct the configuration file by hand as described above. SuSE-6.3 The update packages will be available soon at the usual location . Until then, please correct the configuration file by hand as described above. SuSE-6.1 eaca8f06c54c669d60f6a06fbe7301dc source rpm: 2227de2e6d5faf268413cd474175d126 PPC Power PC Platform: SuSE-6.4 0c830d4d33f2bac33d6a44ab0efc34e7 source rpm: f5fd7575d67e369f87fb2e5c47b61eaf SuSE-6.3 The update packages will be available soon at the usual location . Until then, please correct the configuration file by hand as described above. ______________________________________________________________________________ 2) Credits: SuSE would like to express its sincere appreciation for the efforts and the working style of the Cerberus Security Team/@Stake Inc., in particular to mnemonix (David Litchfield ) and to weld . Have a look at their website at for further information. ______________________________________________________________________________ 3) standard appendix: SuSE runs two security mailing lists to which any interested party may subscribe:
Get the latest Linux and open source security news straight to your inbox.