Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisoryfedoracriticalFedora 22: FEDORA-2015-9324 Critical: FusionForge Command Execution
Security fix for CVE-2015-0850 CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt . . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-9324 2015-06-02 09:31:42 -------------------------------------------------------------------------------- Name : fusionforge Product : Fedora 22 Version : 5.3.2 Release : 4.fc22 URL : Summary : Collaborative development tool Description : FusionForge provides many tools to aid collaboration in a development project, such as bug-tracking, task management, mailing-lists, SCM repository, forums, support request helper, web/FTP hosting, release management, etc. All these services are integrated into one web site and managed through a web interface. This metapackage installs a stand-alone FusionForge site. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-0850 CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt . -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2015 Sylvain Beucler - 5.3.2-4 - CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt . -------------------------------------------------------------------------------- References: [ 1 ] Bug #1226872 - CVE-2015-0850 fusionforge: incorrect input validation in Git plug-in https://bugzilla.redhat.com/show_bug.cgi?id=1226872 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fusionforge' at the command line. For more information, refer to "Managing Software withyum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Jun 10, 2015
•Critical
Fedora
89
security advisoryfedorasoftware updateFedora 21 FusionForge Security Update: Critical Command Execution Risk
Security fix for CVE-2015-0850 CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt . . -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-9128 2015-05-30 09:30:09 -------------------------------------------------------------------------------- Name : fusionforge Product : Fedora 21 Version : 5.3.2 Release : 4.fc21 URL : Summary : Collaborative development tool Description : FusionForge provides many tools to aid collaboration in a development project, such as bug-tracking, task management, mailing-lists, SCM repository, forums, support request helper, web/FTP hosting, release management, etc. All these services are integrated into one web site and managed through a web interface. This metapackage installs a stand-alone FusionForge site. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2015-0850 CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt . -------------------------------------------------------------------------------- ChangeLog: * Thu May 28 2015 Sylvain Beucler - 5.3.2-4 - CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt . -------------------------------------------------------------------------------- References: [ 1 ] Bug #1226872 - CVE-2015-0850 fusionforge: incorrect input validation in Git plug-in https://bugzilla.redhat.com/show_bug.cgi?id=1226872 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update fusionforge' at the command line. For more information, refer to "Managing Software withyum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Jun 10, 2015
•Critical
Fedora
87
security advisorysoftware updateremote code executionDebian: DSA-3275-1 Critical: FusionForge Git Plugin Remote Code Execution
Ansgar Burchardt discovered that the Git plugin for FusionForge, a web-based project-management and collaboration software, does not sufficiently validate user provided input as parameter to the method to create secondary Git repositories. A remote attacker can use this flaw . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3275-1
May 30, 2015
•Critical
Debian
87
security advisorydebianprivilege escalationDebian: DSA-2633-1 Moderate: FusionForge Privilege Escalation
Helmut Grohne discovered multiple privilege escalation flaws in FusionForge, a web-based project-management and collaboration software. Most of the vulnerabilities are related to the bad handling of privileged operations on user-controlled files or directories. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2633-1
Feb 26, 2013
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!