Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
87

Debian 3.0: DSA 251-1 Critical: W3m HTML Quoting Remote Threat

There are two security vulnerabilities in w3m and associated programs.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 251-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze February 14th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : w3m, w3m-ssl Vulnerability : missing HTML quoting Problem-Type : remote Debian-specific: no CVE Id : CAN-2002-1335 CAN-2002-1348 Hironori Sakamoto, one of the w3m developers, found two security vulnerabilities in w3m and associated programs. The w3m browser does not properly escape HTML tags in frame contents and img alt attributes. A malicious HTML frame or img alt attribute may deceive a user to send his local cookies which are used for configuration. The information is not leaked automatically, though. For the stable distribution (woody) these problems have been fixed in version 0.3-2.4. The old stable distribution (potato) is not affected by these problems. For the unstable distribution (sid) these problems have been fixed in version 0.3.2.2-1 and later. We recommend that you upgrade your w3m and w3m-ssl packages. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 622 20b45c25d667d7070eb577bb3a79dbcc Size/MD5 checksum: 30286 fea2017c4a531d1ff8bef12900beb0f4 Size/MD5checksum: 1061650 837dc9c4b64c85e720eed60a54e409ef Size/MD5 checksum: 641 7de04cb1692172671a9c6c1361c228d7 Size/MD5 checksum: 29622 446fb46c6b1b1bea398beb7d4568dfb5 Size/MD5 checksum: 1061650 837dc9c4b64c85e720eed60a54e409ef Alpha architecture: Size/MD5 checksum: 716678 a4be8bbaf22be37109c24fc926ac90d2 Size/MD5 checksum: 46038 832edd93d5bce7f975089a4280c783c9 Size/MD5 checksum: 522114 4e63b78eea41987eb3c9d4e56c37f2bb ARM architecture: Size/MD5 checksum: 576102 7955eee2d641927783e4d980acca3e2b Size/MD5 checksum: 44918 cdc767960efdb93bf98f16b2d0dbba81 Size/MD5 checksum: 416534 bc19d77a1de0eb19ae0a890331c757ce Intel IA-32 architecture: Size/MD5 checksum: 536546 403d4d66e4a35b72fde1ca2648477eee Size/MD5 checksum: 44696 2dea9365153597340338fa6cb3d26a73 Size/MD5 checksum: 378256 f678a241934a5cd884dc08a19602670a HP Precision architecture: Size/MD5 checksum: 679602 4e45ab940066fd4b31eafda7324cb882 Size/MD5 checksum: 45474 08805d242612377e90de7e0e6658a1eb Size/MD5 checksum: 488050 abf5cba42d0f2209a9614bcbdb47d0df Motorola 680x0 architecture: Size/MD5 checksum: 509352 42729e7a7cf55b0f635ec7b82d74e4d3 Size/MD5 checksum: 44404 ab8a616265b6061dd12d81e26eeb2c86 Size/MD5 checksum: 353590 70b91ebb6faab0579d4d5421b4527d6d Big endian MIPS architecture: Size/MD5 checksum: 658884 a6bb69fdffed8f078ec96f07a226c0a9 Size/MD5 checksum: 45254 21977f7a10c606f05eea735f66c21f7c Size/MD5 checksum: 469378 686ee1efae499861354ffb4a5958018c Little endian MIPS architecture: Size/MD5 checksum: 657326 334db3009539a5923e5aea348c8b5e11 Size/MD5 checksum: 45252 0e2c3363c84b9f4113308179b889dd97 Size/MD5 checksum: 467646 dedfb98ab9aef606ca73a925f9b694ec PowerPC architecture: Size/MD5 checksum: 598206 b3634a26e9e30b3576d8b22b57f3bfc6 Size/MD5 checksum: 44944 1b5252467644b0cc3c86e02665443e20 Size/MD5 checksum: 416488 eea92fb56474841f98dca6a0d9b2c346 IBM S/390 architecture: Size/MD5 checksum: 575340 8145d936ae5cfa717dbbb11c47fc9c2c Size/MD5 checksum: 45476 96288fb9f339dbec945e80a27588805c Size/MD5 checksum: 407616 4e366109f0be690c11beafe3fe1265fa Sun Sparc architecture: Size/MD5 checksum: 609858 f72ba2a2dbdad04abe4518287d9fcf9f Size/MD5 checksum: 45650 13c85543bd43383e30acc038b38c834f Size/MD5 checksum: 412114 44d471fc7b738b4b21d3303654869d99 These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Elevate w3m and w3m-ssl iterations to mitigate risks linked to HTML character representations and reduce the likelihood of external threats.. Debian Security,W3M Update,Remote Threats,HTML Quoting Issue. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 14, 2003 Critical Debian
87

Debian: DSA 250-1 Critical: w3mmee-ssl HTML Quoting Remote Issue

There are two security vulnerabilities in w3m and associated programs.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 250-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze February 12th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : w3mmee-ssl Vulnerability : missing HTML quoting Problem-Type : remote Debian-specific: no CVE Id : CAN-2002-1335 CAN-2002-1348 Hironori Sakamoto, one of the w3m developers, found two security vulnerabilities in w3m and associated programs. The w3m browser does not properly escape HTML tags in frame contents and img alt attributes. A malicious HTML frame or img alt attribute may deceive a user to send his local cookies which are used for configuration. The information is not leaked automatically, though. For the stable distribution (woody) these problems have been fixed in version 0.3.p23.3-1.5. Please note that the update also contains an important patch to make the program work on the powerpc platform again. The old stable distribution (potato) is not affected by these problems. For the unstable distribution (sid) these problems have been fixed in version 0.3.p24.17-3 and later. We recommend that you upgrade your w3mmee-ssl packages. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 690e256e36bb0bf8d8bf9e9975412973208 Size/MD5 checksum: 10637 d9fbc273ea87e86541d7b640ca964ded Size/MD5 checksum: 647067 4953803b51ff72205021114f6cf6149d Alpha architecture: Size/MD5 checksum: 400162 7a1f209555e61803849e3b55a09e9e06 ARM architecture: Size/MD5 checksum: 329450 4d11889a060c4cccd51d66c091d36071 Intel IA-32 architecture: Size/MD5 checksum: 308562 6430f41778cf4a16a86fa4bc74d9886c Intel IA-64 architecture: Size/MD5 checksum: 519748 ef15af2b6056eb2786a0fd67e1280ece HP Precision architecture: Size/MD5 checksum: 382358 ba11e5ae971e3a1a70b9c98a98d1d196 Motorola 680x0 architecture: Size/MD5 checksum: 292480 7e9c4ccb4fd24a43e6555e9e01c01173 Big endian MIPS architecture: Size/MD5 checksum: 371774 4d7760c56c62879c856b5f0698bb89ff Little endian MIPS architecture: Size/MD5 checksum: 371202 629306c3589377d45687f42f0ab8226d PowerPC architecture: Size/MD5 checksum: 334850 7684f24bf001b405288bbc85bf93fb38 IBM S/390 architecture: Size/MD5 checksum: 330170 f015edd377f8a61ebda32c2aec42da20 Sun Sparc architecture: Size/MD5 checksum: 328290 1585bb05d4b658a8cde88cc27b15316e These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Addressing a critical HTML injection flaw in w3m and related programs for Debian users to bolster protective measures.. w3m Security, Debian Flaw, HTML Quoting. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 13, 2003 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":548,"type":"x","order":1,"pct":78.51,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.87,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.32,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here