Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
203
security advisorycritical issuesecurity issueMageia 7: MGASA-2021-0006 Critical: Execution Bypass in Dash
Code was executed even if noexec ("-n") was specified. (bdo#58288 / bsc#1178978) References: - https://bugs.mageia.org/show_bug.cgi?id=27655 . MGASA-2021-0006 - Updated dash packages fix a security vulnerability Publication date: 08 Jan 2021 URL: https://advisories.mageia.org/MGASA-2021-0006.html Type: security Affected Mageia releases: 7 Code was executed even if noexec ("-n") was specified. (bdo#58288 / bsc#1178978) References: - https://bugs.mageia.org/show_bug.cgi?id=27655 - https://www.openwall.com/lists/oss-security/2020/11/11/3 - https://www.openwall.com/lists/oss-security/2020/11/12/1 - https://lists.suse.com/pipermail/sle-security-updates/2020-November/007839.html - SRPMS: - 7/core/dash-0.5.10.2-1.1.mga7 . Dash components refreshed to rectify a vulnerability that enabled execution even when noexec was set. Insights included.. dash Security Update,Mageia Advisory,Execution Risk,Mageia Update. . Severity: Critical. LinuxSecurity.com Team
Jan 08, 2021
•Critical
Mageia
202
security advisorymoderatesecurity updateopenSUSE Leap 15.2: openSUSE-SU-2020:2065-1 Moderate: Dash Fix
An update that contains security fixes can now be installed. . openSUSE Security Update: Security update for dash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2065-1 Rating: moderate References: #1178978 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec ("-n") was specified (bsc#1178978). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2065=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): dash-0.5.11.2-lp152.4.6.1 dash-debuginfo-0.5.11.2-lp152.4.6.1 dash-debugsource-0.5.11.2-lp152.4.6.1 References: https://bugzilla.suse.com/1178978 _______________________________________________ openSUSE Security Announce mailing list --
Nov 27, 2020
OpenSUSE
202
security advisorymoderatesoftware updateopenSUSE: 2020:2046-1 Moderate: Dash Execution Issue Fix
An update that contains security fixes can now be installed. . openSUSE Security Update: Security update for dash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2046-1 Rating: moderate References: #1178978 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec ("-n") was specified (bsc#1178978). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-2046=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dash-0.5.11.2-lp151.3.6.1 dash-debuginfo-0.5.11.2-lp151.3.6.1 dash-debugsource-0.5.11.2-lp151.3.6.1 References: https://bugzilla.suse.com/1178978 _______________________________________________ openSUSE Security Announce mailing list --
Nov 26, 2020
OpenSUSE
100
security advisorymoderatesoftware updateSUSE: 2020:3480-1 Moderate: Dash Security Update Details
An update that contains security fixes can now be installed. . SUSE Security Update: Security update for dash ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:3480-1 Rating: moderate References: #1178978 Affected Products: SUSE Linux Enterprise Module for Development Tools 15-SP2 SUSE Linux Enterprise Module for Development Tools 15-SP1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec ("-n") was specified (bsc#1178978). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Development Tools 15-SP2: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP2-2020-3480=1 - SUSE Linux Enterprise Module for Development Tools 15-SP1: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP1-2020-3480=1 Package List: - SUSE Linux Enterprise Module for Development Tools 15-SP2 (aarch64 ppc64le s390x x86_64): dash-0.5.11.2-3.6.1 dash-debuginfo-0.5.11.2-3.6.1 dash-debugsource-0.5.11.2-3.6.1 - SUSE Linux Enterprise Module for Development Tools 15-SP1 (aarch64 ppc64le s390x x86_64): dash-0.5.11.2-3.6.1 dash-debuginfo-0.5.11.2-3.6.1 dash-debugsource-0.5.11.2-3.6.1 References: https://bugzilla.suse.com/1178978 . SUSE Security Patch: Apply this essential resolution for dash concerns to improve system integrity and performance.. SUSE Security Update, dash Security Fix, Software Update, Development Tools Patch. . LinuxSecurity.com Team
Nov 23, 2020
SuSE
172
security advisoryupdatelocal attackUbuntu 8.04/8.10 USN-732-1 Moderate: Dash Local Attack Risk
Wolfgang M. Reimer discovered that dash, when invoked as a login shell, would source .profile files from the current directory. Local users may be able to bypass security restrictions and gain root privileges by placing specially crafted .profile files where they might get sourced by other dash users. [More...]. ==========================================================Ubuntu Security Notice USN-732-1 March 10, 2009 dash vulnerability CVE-2009-0854 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: dash 0.5.4-8ubuntu1.1 Ubuntu 8.10: dash 0.5.4-9ubuntu1.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Wolfgang M. Reimer discovered that dash, when invoked as a login shell, would source .profile files from the current directory. Local users may be able to bypass security restrictions and gain root privileges by placing specially crafted .profile files where they might get sourced by other dash users. Updated packages for Ubuntu 8.04 LTS: Source archives: Size/MD5: 171656 5f74e0a922546193a9e6279ad8680c76 Size/MD5: 697 e78236937fea17c0c7a43427321b1ce6 Size/MD5: 212145 bc457e490a589d2f87f2333616b67931 Architecture independent packages: Size/MD5: 22068 82557822348627c1b240069e431886e2 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 96918 b8d43124e5353042c7fd93fcc5c19cc9 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 87952 6bc4578aea92450f8e00625fd7a7755a lpia architecture (Low Power Intel Architecture): Size/MD5: 88194 a90de1a5dedb9cbaeb65537e8e933356 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 97400 5e2187820648d980b4edaa4e4a71b6c5 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 91072 dc5e22376445e185eacdaa049421c866 Updated packages for Ubuntu 8.10: Source archives: Size/MD5: 129759 b5363e9ff9550e89dec4be8ddc408607 Size/MD5: 1083 dc87a11f64c53960ffb1f55dc42a253f Size/MD5: 212145 bc457e490a589d2f87f2333616b67931 Architecture independent packages: Size/MD5: 22286 9a34d34a67d46b8fa42584a2a7d61f76 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 99406 8703819fce4bc25f65caa350de05763c i386 architecture (x86 compatible Intel/AMD): Size/MD5: 90266 9d8931f5ef08f4d649127db0ab644f8e lpia architecture (Low Power Intel Architecture): Size/MD5: 90322 a0db897e7a7c5a7706d71674bad025ee powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 99500 a583f4a7fc59a7495cb3615c4af54b05 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 93030 1bd3a8c0907e56cb2ed17c572e61842b . Uncover information regarding the dash security flaw within Ubuntu that enables local individuals to circumvent limitations and obtain root privileges.. Dash Vulnerability, Ubuntu 8.04, Ubuntu 8.10, Local Attack, Root Access. . LinuxSecurity.com Team
Mar 10, 2009
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!