Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98

Red Hat Linux: RHSA-2003:241-01 Critical: ddskk Temporary File Exploit

ddskk does not take appropriate security precautions when creatingtemporary files.. ` - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated ddskk packages fix temporary file vulnerability Advisory ID: RHSA-2003:241-01 Issue date: 2003-08-11 Updated on: 2003-08-11 Product: Red Hat Linux Keywords: tmpfile Cross references: Obsoletes: CVE Names: CAN-2003-0539 - --------------------------------------------------------------------- 1. Topic: Updated ddskk packages which fix a temporary file security issue are now available. 2. Relevant releases/architectures: Red Hat Linux 7.1 - noarch Red Hat Linux 7.2 - noarch Red Hat Linux 7.3 - noarch Red Hat Linux 8.0 - noarch Red Hat Linux 9 - noarch 3. Problem description: Daredevil SKK is a simple Kana to Kanji conversion program, an input method of Japanese for Emacs and XEmacs. ddskk does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running Emacs and skk. The Common Vulnerabilities and Exposures project (cve.mitre.org) has allocated the name CAN-2003-0539 to this issue. All users of ddskk should upgrade to these erratum packages containing a backported security patch that corrects this issue. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many peoplefind this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed ( for more info): 98924 - CAN-2003-0539 ddskk temporary file vulnerability 6. RPMs required: Red Hat Linux 7.1: SRPMS: noarch: Red Hat Linux 7.2: SRPMS: noarch: Red Hat Linux 7.3: SRPMS: noarch: Red Hat Linux 8.0: SRPMS: noarch: Red Hat Linux 9: SRPMS: noarch: 7. Verification: MD5 sum Package Name - -------------------------------------------------------------------------- ad2f068e78f849bfc86a80633116b2ce 7.1/en/os/SRPMS/ddskk-11.6.0-1.7.src.rpm a50846679107d8ecf3f95d6858808d38 7.1/en/os/noarch/ddskk-11.6.0-1.7.noarch.rpm ad2f068e78f849bfc86a80633116b2ce 7.2/en/os/SRPMS/ddskk-11.6.0-1.7.src.rpm a50846679107d8ecf3f95d6858808d38 7.2/en/os/noarch/ddskk-11.6.0-1.7.noarch.rpm 499cd5de7e358901d7c1cc3e29077273 7.3/en/os/SRPMS/ddskk-11.6.0-11.73.src.rpm 59ca022c65a60000894debc826ff2e04 7.3/en/os/noarch/ddskk-11.6.0-11.73.noarch.rpm ecc8acb7693f53de7b37c1d48283416f 7.3/en/os/noarch/ddskk-xemacs-11.6.0-11.73.noarch.rpm 82e9b3cde4970d94e02bd30cace9b87d 8.0/en/os/SRPMS/ddskk-11.6.0-11.80.src.rpm e20c214d46128c94b074e52960539688 8.0/en/os/noarch/ddskk-11.6.0-11.80.noarch.rpm 403925f3e025e778138bb4b4b4278115 8.0/en/os/noarch/ddskk-xemacs-11.6.0-11.80.noarch.rpm 54674aa6a5312c8add642d4eea303015 9/en/os/SRPMS/ddskk-11.6.0-11.90.src.rpm 0a6f50765004b7a66711d9e5e8bef8d1 9/en/os/noarch/ddskk-11.6.0-11.90.noarch.rpm 81d5b6cd7930ba9766dc3e23a9a2dadd 9/en/os/noarch/ddskk-xemacs-11.6.0-11.90.noarch.rpm These packages are GPG signed by Red Hat for security. Our key is available from Product Signing Keys - Red Hat Customer Portal You can verify each package with the following command: rpm --checksig -v If you only wish to verify that each package has not been corruptedor tampered with, examine only the md5sum with the following command: md5sum 8. References: CVE -CVE-2003-0539 9. Contact: The Red Hat security contact is . More contact details at All Red Hat products Copyright 2003 Red Hat, Inc. `. The latest firmware revisions tackle a critical flaw in temporary file handling affecting Debian Linux systems. Users are advised to update promptly to maintain the integrity of their setups.. ddskk Package Update, Critical Security Issue, Red Hat Linux Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 11, 2003 Critical Red Hat
87

Debian 3.0 DSA 343-1 Critical: SKK Insecure File Exploit

skk does not take appropriate security precautions when creating temporary files.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 343-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman July 8th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : skk, ddskk Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no skk (Simple Kana to Kanji conversion program), does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running Emacs and skk. ddskk is derived from the same code, and contains the same bug. For the stable distribution (woody) this problem has been fixed in skk version 10.62a-4woody1 and ddskk version 11.6.rel.0-2woody1. For the unstable distribution (sid) this problem has been fixed in ddskk version 12.1.cvs.20030622-1, and skk will be fixed soon. We recommend that you update your skk and ddskk package-. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 650 4dfedc401e846e185a14bf86e12dde82 Size/MD5 checksum: 10343 4e2d9a337118252422803eb5b5c13cc0 Size/MD5 checksum: 2952817 30bacbe572adf5c353bc65348ef7f2e4 Size/MD5 checksum: 6517386dc3f171c6620065ed32bea7a61c8 Size/MD5 checksum: 8684 2c345b4c6979509cd92ac2e411ae0825 Size/MD5 checksum: 583049 9c4b78ae5a5b9ca02d0cd450c0f01c47 Architecture independent components: Size/MD5 checksum: 314864 7bc8fb95fb95c886377cc0eafd4f8281 Alpha architecture: Size/MD5 checksum: 14664 95cadc075d8daa920f018b4dec830761 ARM architecture: Size/MD5 checksum: 12804 662ab1f2f69117112b7b8da543d04adf Intel IA-32 architecture: Size/MD5 checksum: 12322 0ff353139210f243e35ed6c275f7da98 Intel IA-64 architecture: Size/MD5 checksum: 16880 32cfed0ae347a436790c364204a61e6b HP Precision architecture: Size/MD5 checksum: 13788 d2389fb2860653e0ef8bc72b314a87fb Motorola 680x0 architecture: Size/MD5 checksum: 12076 36963139b8c6a2f310e254c214958d7f Big endian MIPS architecture: Size/MD5 checksum: 13328 94b05baa358a3fda8d096c2f4f1d894c Little endian MIPS architecture: Size/MD5 checksum: 13326 5c0f5fa48cef96b37ae66a1b7cecf8e2 PowerPC architecture: Size/MD5 checksum: 12868 34eaf4315a5a358d84b5860a051d8563 IBM S/390 architecture: Size/MD5 checksum: 13280 0c989e849f3dcdc14b26d4a25557d00f Sun Sparc architecture: Size/MD5 checksum: 15714 7a75008647a0d60f5fd2910bb69baffa Architecture independent components: Size/MD5 checksum: 488140 1a0a928861d148ae1dc005ecf50303dd These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Debian DSA 343-1 details critical insecure file handlingissues in skk, guiding users on necessary updates.. Debian Security Fix, Insecure File Issue, SKK Package Update. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 10, 2003 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here