Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
89

Fedora 30: 2019-676e120269 Moderate: Cronie Remote Denial of Service Fix

Minor security and bugfix update to version 1.5.4.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-676e120269 2019-03-29 19:07:28.734058 --------------------------------------------------------------------------------Name : cronie Product : Fedora 30 Version : 1.5.4 Release : 1.fc30 URL : https://github.com/cronie-crond/cronie Summary : Cron daemon for executing programs at set times Description : Cronie contains the standard UNIX daemon crond that runs specified programs at scheduled times and related tools. It is a fork of the original vixie-cron and has security and configuration enhancements like the ability to use pam and SELinux. --------------------------------------------------------------------------------Update Information: Minor security and bugfix update to version 1.5.4. --------------------------------------------------------------------------------References: [ 1 ] Bug #1687688 - CVE-2019-9704 vixie-cron: calloc return value resulting in remote dos https://bugzilla.redhat.com/show_bug.cgi?id=1687688 [ 2 ] Bug #1687694 - CVE-2019-9705 vixie-cron: dos(memory consumption) via a large crontab file https://bugzilla.redhat.com/show_bug.cgi?id=1687694 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-676e120269' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. Tounsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . This small patch addresses vulnerabilities linked to cron jobs, delivering improvements for enhanced efficiency and reliability.. cronie security update, Fedora 30, remote DoS fix, system daemon, cron job management. . LinuxSecurity.com Team

Calendar%202 Mar 29, 2019 Fedora
89

Fedora Core 3: MODERATE - Vixie-Cron Update for Enhanced Security

Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-174 2005-02-25 ---------------------------------------------------------------------Product : Fedora Core 3 Name : vixie-cron Version : 4.1 Release : 24_FC3 Summary : The Vixie cron daemon for executing specified programs at set times. Description : The vixie-cron package contains the Vixie version of cron. Cron is a standard UNIX daemon that runs specified programs at scheduled times. Vixie cron adds better security and more powerful configuration options to the standard version of cron. ---------------------------------------------------------------------* Fri Feb 25 2005 Jason Vas Dias - 4.1-24_FC3 - Add an /etc/sysconfig/crond file for containing CRONDARGS and - settings like CRON_VALIDATE_MAILRCPTS . * Fri Feb 25 2005 Jason Vas Dias - 4.1-24_FC3 - Fix bug 147636 - disable silly mail recipient name checking - (do_command.c's safe_p()) by default . Can be enabled by - presence of CRON_VALIDATE_MAILRCPTS variable in crond's - environment - also '_'s in MAILTOs are allowed. * Tue Jan 25 2005 Jason Vas Dias - 4.1-21_FC3 - Fix bug 146073 - allow the 'pam_access' module to be used with - cron - set 'PAM_TTY' item to 'cron' . * Mon Dec 20 2004 Jason Vas Dias - 4.1-20_FC3 - fix bug 142953 : allow read-only crontabs + provide -p - 'permit all crontabs' option to disable mode checking. - bug 135845 fix required 'ch' to be initialized in crontab.c line 322 - (bug 141760) * Mon Dec 20 2004 Jason Vas Dias - 4.1-20_FC3 - fixed all uninitialized variable warnings * Fri Oct 15 2004 Jason Vas Dias - 4.1-19 - crontab -e should only strip NHEADER_LINES comments - (NHEADER_LINES==0), not at least one header comment line. - (bug 135845) * Sat Oct 9 2004 Florian La Roche - 4.1-18 - no need to make user installed crontabs readable * Thu Sep 30 2004 JasonVas Dias - 4.1-17 - Users not allowed to use 'crontab mycrontab', while - 'crontab < mycrontab' allowed; this is because misc.c's - swap_uids_back() was not using save_euid / save_egid . - Thanks to Mads Martin Joergensen for pointing this out. * Wed Sep 29 2004 Jason Vas Dias - 4.1-16 - Just found out in testing that if neither /etc/cron.{deny,allow} - exist, root is unable to use crontab - I'm sure root could before, - but is in any case meant to be able to. Allowing root to use crontab. * Wed Sep 29 2004 Jason Vas Dias - 4.1-14 - Fix for bug 130102 got dropped somehow from latest CVS. - This is now restored - in %post, if neither /etc/cron.{deny,allow} - exist, touch /etc/cron.deny, to allow all users to use crontab, - as was previous default vixie-cron behaviour. * Fri Sep 17 2004 Jason Vas Dias - 4.1-12 - Merged Dan's patch with vixie-cron-4.1-11 which was not - latest version according to new CVS ?!?! * Fri Sep 17 2004 Dan Walsh - 4.1-12 - Updated SELinux patch to use checkPasswdAccess * Tue Aug 31 2004 Jason Vas Dias - 4.1-11 - Fixed SIGSEGV in free_user when !is_selinux_enabled() and crontab - has no valid jobs (bug 131390). * Wed Aug 18 2004 Jason Vas Dias - 4.1.10 - Fixed bug 130102: Restored default behaviour if neither - /etc/cron.deny nor /etc/cron.allow exist - 'touch /etc/cron.deny' - in %post * Wed Aug 11 2004 Jason Vas Dias - 4.1.9 - Removed 0600 mode enforcement as per Florian La Roche's request * Tue Aug 10 2004 Jason Vas Dias - 4.1.8 - Allowed editors such as 'gedit' which do not modify original - file, but which rename(2) a temp file to original, to be used - by crontab -e (bug 129170). * Tue Aug 10 2004 Jason Vas Dias - 4.1.8 - Added '-i' option to crontab to prompt the user before deleting - crontab with '-r'. * Tue Aug 10 2004 Jason Vas Dias - 4.1.8 - Added documentation for '@' nicknames to crontab.5 - (bugs 107542, 89899). Also removed 'second when' (bug 59802). * Sun Aug 1 2004 Jason Vas Dias - 4.1.7 - fixed bug 128924: 'cron' log facility not being used * Fri Jul 30 2004 Jason Vas Dias - 4.1.6 - Added PAM 'auth sufficient pam_rootok.so' to /etc/pam.d/crond - (fixes bug 128843) - on dwalsh's advice. * Thu Jul 29 2004 Jason Vas Dias - 4.1-5 - Added Buildrequires: pam-devel * Wed Jul 28 2004 Dan Walsh - 4.1-4 - Fix crontab to do SELinux checkaccess * Wed Jul 28 2004 Jason Vas Dias - 4.1-3 - Fixed bug 128701: cron fails to parse user 6th field in - system crontabs (patch15) * Tue Jul 27 2004 Jason Vas Dias - 4.1-2 - Changed 'Requires' dependency from 'pam-devel' to 'pam'. * Mon Jul 26 2004 Jason Vas Dias - 4.1-1 - Added PAM access control support. * Thu Jul 22 2004 Jason Vas Dias - 4.1-1 - Changed post-install to change mode of existing crontabs to - 0600 to allow run by new ISC cron 4.1 * Thu Jul 22 2004 Jason Vas Dias - 4.1-1 - Upgraded to ISC cron 4.1 * Thu Jul 1 2004 Jens Petersen - 3.0.1-94 - add vixie-cron-3.0.1-cron-descriptors-125110.patch to close std descriptors when forking (Bernd Schmidt, 121280) - add vixie-cron-3.0.1-no-crontab-header-89809.patch to not prepend header to crontab files (Damian Menscher, 103899) - fix use of RETVAL in init.d script (Enrico Scholz, 97784) - add safer malloc call to vixie-cron-3.0.1-sprintf.patch - add cron-3.0.1-crontab-syntax-error-114386.patch to fix looping on crontab syntax error (Miloslav Trmac, 89937) * Fri Jun 25 2004 Dan Walsh - 3.0.1-93 - Add fixes from NSA * Tue Jun 22 2004 Dan Walsh - 3.0.1-92 - Add fixes from NSA * Tue Jun 15 2004 Dan Walsh - 3.0.1-91 - Change patch to check SElinux properly, go back to using fname instead of uname * Tue Jun 15 2004 Elliot Lee - rebuilt * Fri Jun 4 2004 Dan Walsh - 3.0.1-89 - Fix patch * Fri Jun 4 2004 Dan Walsh - 3.0.1-88 - Add patch to allow it to run in permissive mode. * Fri Feb 13 2004 Elliot Lee - rebuilt * Wed Feb 4 2004Dan Walsh - 3.0.1-86 - Add security_getenforce check. * Mon Jan 26 2004 Dan Walsh - 3.0.1-85 - Fix call to is_selinux_enabled() * Mon Dec 8 2003 Dan Walsh - 3.0.1-84 - change daemon flag to 1 * Wed Dec 3 2003 Dan Walsh - 3.0.1-83 - Add daemon to make sure child is clean * Fri Nov 7 2003 Jens Petersen - 3.0.1-82 - add vixie-cron-3.0.1-pie.patch to build crond as pie (#108414) [Ulrich Drepper] - require libselinux and buildrequire libselinux-devel * Thu Oct 30 2003 Dan Walsh - 3.0.1-81.sel - turn on selinux * Tue Sep 30 2003 Jens Petersen - 3.0.1-80 - add vixie-cron-3.0.1-vfork-105616.patch to use fork instead of vfork (#105616) [report and patch from This email address is being protected from spambots. You need JavaScript enabled to view it.] - update vixie-cron-3.0.1-redhat.patch not to change DESTMAN redundantly (it is overrriden in the spec file anyway) * Fri Sep 5 2003 Dan Walsh - 3.0.1-79 - turn off selinux * Fri Sep 5 2003 Dan Walsh - 3.0.1-78.sel - turn on selinux * Tue Jul 29 2003 Dan Walsh - 3.0.1-77 - Patch to run on SELinux * Wed Jun 4 2003 Elliot Lee - rebuilt * Wed Mar 19 2003 Jens Petersen - 3.0.1-75 - add vixie-cron-3.0.1-root_-u-85879.patch from Valdis Kletnieks to allow root to run "crontab -u " even for users that aren't allowed to * Wed Feb 19 2003 Jens Petersen - 3.0.1-74 - fix preun script typo (#75137) [reported by Peter Bieringer] * Tue Feb 11 2003 Bill Nottingham 3.0.1-73 - don't set SIGCHLD to SIG_IGN and then try and wait... (#84046) * Fri Feb 7 2003 Nalin Dahyabhai 3.0.1-72 - adjust cron.d patch so that it ignores file with names that begin with '#' or end with '~', '.rpmorig', '.rpmsave', or '.rpmnew' - merge hunk of buffer overflow patch into the cron.d patch * Wed Jan 22 2003 Tim Powers - rebuilt * Wed Dec 11 2002 Tim Powers 3.0.1-70 - rebuild on all arches * Sat Jul 20 2002 Akira TAGOH 3.0.1-69 - vixie-cron-3.0.1-nonstrip.patch: applied to fix the stripped binary issue. * Fri Jun 21 2002 TimPowers - automated rebuild * Mon Jun 10 2002 Bill Huang - Fix preun bugs.(#55340) - Fix fprintf bugs.(#65209) * Thu May 23 2002 Tim Powers - automated rebuild * Mon Apr 15 2002 Bill Huang - Fixed #62963. * Thu Apr 4 2002 James McDermott - Alter behavior of crontab to take stdin as the default behavior if no options are specified. * Sun Jun 24 2001 Elliot Lee - Bump release + rebuild. * Thu Mar 8 2001 Bill Nottingham - add patch from Alan Eldridge to fix double execution of jobs (#29868) * Sun Feb 11 2001 Bill Nottingham - fix buffer overflow in crontab * Wed Feb 7 2001 Trond Eivind Glomsrød - fix usage string in initscript (#26533) * Tue Feb 6 2001 Bill Nottingham - fix build with new glibc (#25931) * Tue Jan 23 2001 Bill Nottingham - change i18n mechanism * Fri Jan 19 2001 Bill Nottingham - log as 'crond', not 'CROND' (#19410) - account for shifts in system clock (#23230, patch from ) - i18n-ize initscript * Thu Aug 24 2000 Than Ngo - fix to set startup position correct at update * Thu Aug 24 2000 Than Ngo - add /sbin/service to Prereq - call /sbin/service instead service - fix startup position (Bug #13353) * Mon Aug 7 2000 Bill Nottingham - fix crond logging patch (This email address is being protected from spambots. You need JavaScript enabled to view it.) - log via syslog (suggestion from This email address is being protected from spambots. You need JavaScript enabled to view it.) - put system crontab location in crontab(5) (#14842) * Fri Jul 28 2000 Bill Nottingham - fix condrestart * Fri Jul 21 2000 Bill Nottingham - fix reload bug (#14065) * Fri Jul 14 2000 Bill Nottingham - move initscript back * Thu Jul 13 2000 Prospector - automatic rebuild * Thu Jul 6 2000 Bill Nottingham - prereq /etc/init.d * Mon Jul 3 2000 Bill Nottingham - fix %post; we do condrestart in %postun * Thu Jun 29 2000 Bill Nottingham - oops, fix init script * Tue Jun 27 2000 Bill Nottingham - require new initscripts, not prereq * Mon Jun 26 2000 Bill Nottingham - initscripthacks * Wed Jun 14 2000 Nalin Dahyabhai - tweak logrotate config * Sun Jun 11 2000 Bill Nottingham - rebuild in new env. - FHS fixes - don't ship chkconfig links * Fri Mar 31 2000 Bill Nottingham - fix non-root builds (#10490) * Sun Mar 26 2000 Florian La Roche - do not remove log files * Thu Feb 3 2000 Bill Nottingham - handle compressed man pages * Fri Sep 10 1999 Bill Nottingham - chkconfig --del in %preun, not %postun * Wed Aug 25 1999 Bill Nottingham - fix buffer overflow * Mon Aug 16 1999 Bill Nottingham - initscript munging * Fri Jul 30 1999 Michael K. Johnson - dayofmonth and month can't be 0 * Thu Jun 3 1999 Jeff Johnson - in cron.log use "kill -HUP pid" not killall to preserve errors (#2241). * Wed Apr 14 1999 Michael K. Johnson - add note to man page about DST conversion causing strangeness - documented cron.d patch * Tue Apr 13 1999 Michael K. Johnson - improved cron.d patch * Mon Apr 12 1999 Erik Troan - added cron.d patch * Tue Mar 23 1999 Bill Nottingham - logrotate changes * Tue Mar 23 1999 Preston Brown - clean up log files on deinstallation * Sun Mar 21 1999 Cristian Gafton - auto rebuild in the new build environment (release 28) * Wed Dec 30 1998 Cristian Gafton - build for glibc 2.1 * Wed Jun 10 1998 Prospector System - translations modified for de * Wed Jun 10 1998 Jeff Johnson - reset SIGCHLD before grandchild execle (problem #732) * Sat May 2 1998 Cristian Gafton - enhanced initscript * Mon Apr 27 1998 Prospector System - translations modified for de, fr, tr * Thu Dec 11 1997 Cristian Gafton - added a patch to get rid of the dangerous sprintf() calls - added BuildRoot and Prereq: /sbin/chkconfig * Sun Nov 9 1997 Michael K. Johnson - fixed cron/crond dichotomy in init file. * Wed Oct 29 1997 Donnie Barnes - fixed bad init symlinks * Thu Oct 23 1997 Erik Troan - force it to use SIGCHLDinstead of defunct SIGCLD * Mon Oct 20 1997 Erik Troan - updated for chkconfig - added status, restart options to init script * Tue Jun 17 1997 Erik Troan - built against glibc * Wed Feb 19 1997 Erik Troan - Switch conditional from "axp" to "alpha" ---------------------------------------------------------------------This update can be downloaded from: 20695749f2995739c74c3adaf4799b1a SRPMS/vixie-cron-4.1-24_FC3.src.rpm 1814a71884ed104ded1805e154a90ccc x86_64/vixie-cron-4.1-24_FC3.x86_64.rpm 0157c4ce27ff92a64f30e8677d169268 x86_64/debug/vixie-cron-debuginfo-4.1-24_FC3.x86_64.rpm 38cd67b3e1895ba91104ab0f94195d51 i386/vixie-cron-4.1-24_FC3.i386.rpm cd54187be169967355f36567afea9706 i386/debug/vixie-cron-debuginfo-4.1-24_FC3.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Upgrade your Fedora installation by applying the latest vixie-cron patch to boost both safety and performance.. Fedora Core 3, vixie-cron update, cron daemon security. . LinuxSecurity.com Team

Calendar%202 Feb 25, 2005 Fedora
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here