Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
91

Gentoo GLSA 202003-48 Normal: Node.js Remote File Writing Threat

Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202003-48 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Node.js: Multiple vulnerabilities Date: March 20, 2020 Bugs: #658074, #665656, #672136, #679132, #702988, #708458 ID: 202003-48 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in Node.js, worst of which could allow remote attackers to write arbitrary files. Background ========= Node.js is a JavaScript runtime built on Chrome’s V8 JavaScript engine. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-libs/nodejs < 12.15.0 > = 10.19.0 > = 12.15.0 Description ========== Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker could possibly write arbitrary files, cause a Denial of Service condition or can conduct HTTP request splitting attacks. Workaround ========= There is no known workaround at this time. Resolution ========= All Node.js

Calendar 2 Mar 20, 2020 Gentoo
172

Ubuntu 15.10 USN-2879-1 Moderate: Rsync File Writing Issue

rsync could be made to write files outside of the expected directory.. =========================================================================Ubuntu Security Notice USN-2879-1 January 21, 2016 rsync vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.10 - Ubuntu 15.04 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: rsync could be made to write files outside of the expected directory. Software Description: - rsync: fast, versatile, remote (and local) file-copying tool Details: It was discovered that rsync incorrectly handled invalid filenames. A malicious server could use this issue to write files outside of the intended destination directory. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: rsync 3.1.1-3ubuntu0.15.10.1 Ubuntu 15.04: rsync 3.1.1-3ubuntu0.15.04.1 Ubuntu 14.04 LTS: rsync 3.1.0-2ubuntu0.2 Ubuntu 12.04 LTS: rsync 3.0.9-1ubuntu1.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2879-1 CVE-2014-9512 Package Information: https://launchpad.net/ubuntu/+source/rsync/3.1.1-3ubuntu0.15.10.1 https://launchpad.net/ubuntu/+source/rsync/3.1.1-3ubuntu0.15.04.1 https://launchpad.net/ubuntu/+source/rsync/3.1.0-2ubuntu0.2 https://launchpad.net/ubuntu/+source/rsync/3.0.9-1ubuntu1.1 . Ubuntu Security Notice USN-2879-1 details an rsync issue that permits file writing outside expected directories.. Rsync Vulnerability, File Access, Software Update. . LinuxSecurity.com Team

Calendar 2 Jan 21, 2016 Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here