Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 7 articles for you...
91
security advisorygentoocode executionGentoo GLSA-200903-41 gedit Local Code Execution Risk Normal Severity
A vulnerability in gedit might allow local attackers to execute arbitrary code.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200903-41 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: gedit: Untrusted search path Date: March 30, 2009 Bugs: #257004 ID: 200903-41 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A vulnerability in gedit might allow local attackers to execute arbitrary code. Background ========= gedit is a text editor for the GNOME desktop. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-editors/gedit < 2.24.3 *> = 2.22.3-r1 > = 2.24.3 Description ========== James Vega reported that gedit uses the current working directory when searching for python modules, a vulnerability related to CVE-2008-5983. Impact ===== A local attacker could entice a user to open gedit from a specially crafted environment, possibly resulting in the execution of arbitrary code with the privileges of the user running the application. Workaround ========= Do not run gedit from untrusted working directories. Resolution ========= All gedit 2.22.x users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-editors/gedit-2.22.3-r1" All gedit 2.24.x users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-editors/gedit-2.24.3" References ========= [ 1 ] CVE-2008-5983 https://www.cve.org/CVERecord?id=CVE-2008-5983 [ 2 ] CVE-2009-0314 https://www.cve.org/CVERecord?id=CVE-2009-0314 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200903-41 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Mar 30, 2009
Gentoo
89
security advisoryfedoraremote code executionFedora 10: 2009-3500 Urgent Gedit Memory Issue and Risk
A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was discovered in the way Firefox handles certain XUL garbage collection events. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1044). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-3100 2009-03-28 00:57:36 --------------------------------------------------------------------------------Name : kazehakase Product : Fedora 10 Version : 0.5.6 Release : 1.fc10.5 URL : Summary : Kazehakase browser using Gecko rendering engine Description : Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine. --------------------------------------------------------------------------------Update Information: A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was discovered in the way Firefox handles certain XUL garbage collection events. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1044) --------------------------------------------------------------------------------ChangeLog: * Fri Mar 27 2009 Christopher Aillon - 0.5.6-1.5 - Rebuild against newer gecko * Fri Mar 6 2009 Jan Horak - 0.5.6-1.4 - Rebuild against newer gecko * Wed Feb 4 2009 Christopher Aillon - 0.5.6-1.3 - Rebuild against newer gecko * Wed Dec 17 2008 Christopher Aillon -0.5.6-1.2 - Rebuild against newer gecko --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update kazehakase' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Mar 28, 2009
•Critical
Fedora
89
security advisoryFedorageditFedora 10: 2010-2345 High: Nautilus Privilege Escalation Vulnerability
Untrusted search path vulnerability in gedit's Python module allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-1189 2009-01-29 22:32:51 --------------------------------------------------------------------------------Name : gedit Product : Fedora 9 Version : 2.22.3 Release : 3.fc9 URL : https://wiki.gnome.org/Apps Summary : gEdit is a small but powerful text editor for GNOME Description : gEdit is a small but powerful text editor designed specifically for the GNOME GUI desktop. gEdit includes a plug-in API (which supports extensibility while keeping the core binary small), support for editing multiple documents using notebook tabs, and standard text editor functions. You'll need to have GNOME and GTK+ installed to use gEdit. --------------------------------------------------------------------------------Update Information: Untrusted search path vulnerability in gedit's Python module allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function. References: The latest stable upstream release of gedit. From the release announcement: New Features and Fixes ====================== - Backport some bugfixes from the developement version New and updated translations ============================ - Alexander Shopov (bg) - Priit Laes (et) - Shankar Prasad (kn) --------------------------------------------------------------------------------ChangeLog: * Mon Jan 26 2009 Ray Strode - 1:2.22.3-3 - Fix bug 481556 in a more functional way. * Mon Jan 26 2009 Ray Strode - 1:2.22.3-2 - Fix up python plugin path to close up a security attack vectors (bug481556). --------------------------------------------------------------------------------References: [ 1 ] Bug #481556 - gedit: untrusted python modules search path https://bugzilla.redhat.com/show_bug.cgi?id=481556 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update gedit' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Jan 29, 2009
Fedora
89
security advisoryFedoracode executionFedora 10 gedit 2.24.3-3 Critical: Local Code Execution Threat
Untrusted search path vulnerability in gedit's Python module allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-1187 2009-01-29 22:32:49 --------------------------------------------------------------------------------Name : gedit Product : Fedora 10 Version : 2.24.3 Release : 3.fc10 URL : https://wiki.gnome.org/Apps Summary : gEdit is a small but powerful text editor for GNOME Description : gEdit is a small but powerful text editor designed specifically for the GNOME GUI desktop. gEdit includes a plug-in API (which supports extensibility while keeping the core binary small), support for editing multiple documents using notebook tabs, and standard text editor functions. You'll need to have GNOME and GTK+ installed to use gEdit. --------------------------------------------------------------------------------Update Information: Untrusted search path vulnerability in gedit's Python module allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function. References: The latest stable upstream release of gedit. From the release announcement: New Features and Fixes ====================== - Backport some bugfixes from the developement version New and updated translations ============================ - Alexander Shopov (bg) - Priit Laes (et) - Shankar Prasad (kn) --------------------------------------------------------------------------------ChangeLog: * Mon Jan 26 2009 Ray Strode - 1:2.24.3-3 - Fix bug 481556 in a more functional way * Mon Jan 26 2009 Ray Strode - 1:2.24.3-2 - Fix up python plugin path to close up a security attack vectors (bug481556). * Thu Jan 15 2009 Matthias Clasen - 1:2.24.3-1 - Update to 2.24.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #481556 - gedit: untrusted python modules search path https://bugzilla.redhat.com/show_bug.cgi?id=481556 --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update gedit' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailing list
Jan 29, 2009
•Critical
Fedora
89
security advisorysoftware updateFedora CoreFedora Core 5 Security Advisory: gedit-2.14.2 Moderate Bug Fixes
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-316 2006-04-17 ---------------------------------------------------------------------Product : Fedora Core 5 Name : gedit Version : 2.14.2 Release : 1.fc5.1 Summary : gEdit is a small but powerful text editor for GNOME. Description : gEdit is a small but powerful text editor designed specifically for the GNOME GUI desktop. gEdit includes a plug-in API (which supports extensibility while keeping the core binary small), support for editing multiple documents using notebook tabs, and standard text editor functions. You'll need to have GNOME and GTK+ installed to use gEdit. ---------------------------------------------------------------------Update Information: New features and fixes =====================- bugfixes to the external tools plugin (Steve Frécinaux) - bugfixes to the snippets plugin (Jesse Van Den Kieboom) - misc bugfixes New and updated translations ===========================- Clytie Siddall (vi) - Francisco Javier F. Serrador (es) - Ihar Hrachyshka (be) - Ivar Smolin (et) - Jérémy Ar Floc'h (br) - Pema Geyleg (dz) - Vladimer Sichinava (ka) ---------------------------------------------------------------------* Mon Apr 10 2006 Matthias Clasen 2.14.2-1.fc5.1 - Update to 2.14.2 ---------------------------------------------------------------------This update can be downloaded from: efe4d06ac72cf8346b12159636f73e0d00c50785 SRPMS/gedit-2.14.2-1.fc5.1.src.rpm 9a17a5d6a2438148bca49acc429ad32d94351e69 ppc/gedit-2.14.2-1.fc5.1.ppc.rpm b9b41bf9f4b2ebb85e28fc1687b061f2fa67bba6 ppc/gedit-devel-2.14.2-1.fc5.1.ppc.rpm f53a0b2a1c819e3f36ac1a6be38880db8622238b ppc/debug/gedit-debuginfo-2.14.2-1.fc5.1.ppc.rpm b49b86e8b76d8bf876ed5c473eeadb409fe999c4 x86_64/gedit-2.14.2-1.fc5.1.x86_64.rpm 047bddd8c73f0f419a7ca8e572a3d0d4b3e34bb4 x86_64/gedit-devel-2.14.2-1.fc5.1.x86_64.rpm 613ce9d69ed690475c3655a1add8b9893307b0da x86_64/debug/gedit-debuginfo-2.14.2-1.fc5.1.x86_64.rpm 1b0a6aa27502b8dc0951b485c492a60b77c3285b i386/gedit-2.14.2-1.fc5.1.i386.rpm 2da966cd41d52dc6089b9f1334ce619b61089b91 i386/gedit-devel-2.14.2-1.fc5.1.i386.rpm e5f0ea5cc7c0eac9aa5a1286cc5f7692ca84abc1 i386/debug/gedit-debuginfo-2.14.2-1.fc5.1.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ----------------------------------------------------------------------- fedora-announce-list mailing list
Apr 17, 2006
Fedora
89
security advisorycriticalsoftware updateFedora Core 5: gedit-2.14.1-1 Critical: Tab Drag-and-Drop Problem
A new version of the gedit package has been built that fixes a problem with tab drag-and-drop when multiple gedit windows are open.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2006-157 2006-03-24 ---------------------------------------------------------------------Product : Fedora Core 5 Name : gedit Version : 2.14.1 Release : 1 Summary : gEdit is a small but powerful text editor for GNOME. Description : gEdit is a small but powerful text editor designed specifically for the GNOME GUI desktop. gEdit includes a plug-in API (which supports extensibility while keeping the core binary small), support for editing multiple documents using notebook tabs, and standard text editor functions. You'll need to have GNOME and GTK+ installed to use gEdit. ---------------------------------------------------------------------Update Information: A new version of the gedit package has been built that fixes a problem with tab drag-and-drop when multiple gedit windows are open. ---------------------------------------------------------------------* Thu Mar 16 2006 Matthias Clasen 2.14.1-1 - Update to 2.14.1 ---------------------------------------------------------------------This update can be downloaded from: 5de6c6a5f3a261f539d5a1489b574c49c0e7199c SRPMS/gedit-2.14.1-1.src.rpm c6926a64b638becbd1970f611808a7f5e7120fc1 ppc/gedit-2.14.1-1.ppc.rpm e9b4dc321e16089b937754779c24dcea59953a41 ppc/gedit-devel-2.14.1-1.ppc.rpm 0293db0e992e8a02ae955a10fc0a2e40317fd998 ppc/debug/gedit-debuginfo-2.14.1-1.ppc.rpm 684f5aeb056f8c17bea3f3f572407f0083e232db x86_64/gedit-2.14.1-1.x86_64.rpm 614a3235c17a12150092fd363f13ac5354073791 x86_64/gedit-devel-2.14.1-1.x86_64.rpm b0a10022ac624140d4c78f98e7f23dd21e9eca68 x86_64/debug/gedit-debuginfo-2.14.1-1.x86_64.rpm 48e7a69b48548eab464539b642f680403f9c137d i386/gedit-2.14.1-1.i386.rpm 5173ea3628f59c52f3cf3784d7b60ae69446399a i386/gedit-devel-2.14.1-1.i386.rpm 1deebf8135a3fb9f45cf992e74c46c477ba09942 i386/debug/gedit-debuginfo-2.14.1-1.i386.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at . ----------------------------------------------------------------------- fedora-announce-list mailing list
Mar 24, 2006
•Critical
Fedora
89
security advisoryupdatecriticalFedora Core 5: FEDORA-2005-950 Important Update for Gedit Released
Updated package.. ---------------------------------------------------------------------Fedora Update Notification FEDORA-2005-738 2005-08-10 ---------------------------------------------------------------------Product : Fedora Core 3 Name : vim Version : 6.3.086 Release : 0.fc3 Summary : The VIM editor. Description : VIM (VIsual editor iMproved) is an updated and improved version of the vi editor. Vi was the first real screen-based editor for UNIX, and is still very popular. VIM improves on vi by adding new features: multiple windows, multi-level undo, block highlighting and more. ---------------------------------------------------------------------Update Information: CAN-2005-2368 ---------------------------------------------------------------------* Wed Aug 10 2005 Karsten Hopp 6.3.086-0.fc3 - build for FC-3 * Tue Aug 9 2005 Karsten Hopp 6.3.086-1 - update to patchlevel 86 * Sun Jun 12 2005 Karsten Hopp 6.3.080-1 - update to patchlevel 80 * Wed Apr 27 2005 Jeremy Katz - 1:6.3.071-3 - silence %post * Mon Apr 18 2005 Karsten Hopp 6.3.071-2 - fix wrong Russian code page for vimtutor (#155181) * Mon Apr 11 2005 Karsten Hopp 6.3.071-1 - patchlevel 71, fixes crashes when converting text with illegal characters and when moving the vertical separator to the far left (vertically splitted window) ---------------------------------------------------------------------This update can be downloaded from: e8713820a24eae8791b0eedb16e9410a SRPMS/vim-6.3.086-0.fc3.src.rpm 215a750345bc4c03af915fc7c5262432 x86_64/vim-common-6.3.086-0.fc3.x86_64.rpm 5f103768c33411aeae28a67514ed394c x86_64/vim-minimal-6.3.086-0.fc3.x86_64.rpm b041c2cc9e5d8ecc621aed5c85e42e35 x86_64/vim-enhanced-6.3.086-0.fc3.x86_64.rpm 1bb5dc4210cedc062f1c8879bb8cbf75 x86_64/vim-X11-6.3.086-0.fc3.x86_64.rpm 80d7efb223f3854dc4e6161667702559 x86_64/debug/vim-debuginfo-6.3.086-0.fc3.x86_64.rpm f72bdd8d4585908fc8510b9c6a29e4a6 i386/vim-common-6.3.086-0.fc3.i386.rpm fba09464a17c75bf386d96b941e16f39 i386/vim-minimal-6.3.086-0.fc3.i386.rpm 0dfefee9fb62531d5c811d3aaeda136b i386/vim-enhanced-6.3.086-0.fc3.i386.rpm 1e1667c5e142a096d048502b5117b87d i386/vim-X11-6.3.086-0.fc3.i386.rpm fca814aa727e1e34a9bdad1bb0341f4d i386/debug/vim-debuginfo-6.3.086-0.fc3.i386.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. -----------------------------------------------------------------------fedora-announce-list mailing list
Aug 11, 2005
•Important
Fedora
87
security advisorydenial of servicedebianDebian: DSA 754-1 Urgent: Gedit Format String Denial Of Service
A format string vulnerability has been discovered in gedit, a light-weight text editor for GNOME, that may allow attackers to cause a denial of service (application crash) via a binary file with format string specifiers in the filename.. - --------------------------------------------------------------------------Debian Security Advisory DSA 753-1
Jul 12, 2005
•Important
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!