Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
91
security advisoryhigh severityprivilege escalationGentoo: 201810-08 High Severity: PostgreSQL Escalation Issues
Multiple vulnerabilities have been found in PostgreSQL, the worst which could lead to privilege escalation.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201810-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: PostgreSQL: Multiple vulnerabilities Date: October 30, 2018 Bugs: #603716, #603720, #664332 ID: 201810-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in PostgreSQL, the worst which could lead to privilege escalation. Background ========= PostgreSQL is an open source object-relational database management system. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-db/postgresql < 10.5 > = 9.3.24:9.3 > = 9.4.19:9.4 > = 9.5.14:9.5 > = 9.6.10:9.6 > = 10.5:10 Description ========== Multiple vulnerabilities have been discovered in PostgreSQL. Please review the referenced CVE identifiers for details. In addition it was discovered that Gentoo's PostgreSQL installation suffered from a privilege escalation vulnerability due to a runscript which called OpenRC's checkpath() on a user controlled path and allowed user running PostgreSQL to kill arbitrary processes via PID file manipulation. Impact ===== A remote attacker could bypass certain client-side connectionsecurity features, read arbitrary server memory or alter certain data. In addition, a local attacker could gain privileges or cause a Denial of Service condition by killing arbitrary processes. Workaround ========= There is no known workaround at this time. Resolution ========= All PostgreSQL users up to 9.3 should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-db/postgresql-9.3.24:9.3" All PostgreSQL 9.4 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-db/postgresql-9.4.19:9.4" All PostgreSQL 9.5 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-db/postgresql-9.5.14:9.5" All PostgreSQL 9.6 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-db/postgresql-9.6.10:9.6" All PostgreSQL 10 users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-db/postgresql-10.5:10" References ========= [ 1 ] CVE-2018-10915 https://nvd.nist.gov/vuln/detail/CVE-2018-10915 [ 2 ] CVE-2018-10925 https://nvd.nist.gov/vuln/detail/CVE-2018-10925 [ 3 ] CVE-2018-1115 https://nvd.nist.gov/vuln/detail/CVE-2018-1115 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201810-08 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Oct 30, 2018
Gentoo
91
security advisorynormal severityremote access threatGentoo: GLSA-201507-18 Normal: Chromium Remote Bypass Threat
Multiple vulnerabilities have been found in Chromium allowing remote attackers to bypass security restrictions.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201507-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Chromium: Multiple vulnerabilities Date: July 10, 2015 Bugs: #552904 ID: 201507-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in Chromium allowing remote attackers to bypass security restrictions. Background ========= Chromium is an open-source web browser project. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-client/chromium < 43.0.2357.130 > = 43.0.2357.130 Description ========== Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker could bypass security restrictions. Workaround ========= There is no known workaround at this time. Resolution ========= All Chromium users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot -v "> =www-client/chromium-43.0.2357.130" References ========= [ 1 ] CVE-2015-1266 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-1266 [ 2 ] CVE-2015-1267 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-1267 [ 3 ] CVE-2015-1268 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-1268 [ 4 ] CVE-2015-1269 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-1269 Availability =========== This GLSA and any updates to it are availablefor viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201507-18 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jul 10, 2015
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!