Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
203

Mageia 7 MGASA-2020-0245 Critical: Libzypp Incorrect Permissions

Libzypp from mageia 7 is affected by a security issue. This update fixes this. Incorrect Default Permissions vulnerability in libzypp allowed local . MGASA-2020-0245 - Updated libzypp packages fix security vulnerability Publication date: 10 Jun 2020 URL: https://advisories.mageia.org/MGASA-2020-0245.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-18900 Libzypp from mageia 7 is affected by a security issue. This update fixes this. Incorrect Default Permissions vulnerability in libzypp allowed local attackers to read a cookie store used by libzypp, exposing private cookies. References: - https://bugs.mageia.org/show_bug.cgi?id=26068 - https://bugzilla.suse.com/show_bug.cgi?id=1158763 - https://github.com/openSUSE/libzypp/pull/196 - https://github.com/openSUSE/libzypp/commit/ea50981352bb5c7ab48663edaeb2df1ddd66953e - https://github.com/openSUSE/libzypp/commit/508b1201f23b44ee90dee6dbbeb3ac5f8bd4c089 - https://www.cve.org/CVERecord?id=CVE-2019-18900 SRPMS: - 7/core/libzypp-17.9.0-1.1.mga7 . MGASA-2020-0246 resolves a vulnerability in libzypp, improving the overall safety of Mageia 7.. libzypp update, mageia security, permissions fix, cookie security. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 10, 2020 Critical Mageia
197

Debian 8: DLA-2132-1 Critical: Libzypp Incorrect Permissions

It was discovered that there was an issue where incorrect default permissions on a HTTP cookie store could have allowed local attackers to read private credentials. . Package : libzypp Version : 14.29.1-2+deb8u1 CVE ID : CVE-2019-18900 It was discovered that there was an issue where incorrect default permissions on a HTTP cookie store could have allowed local attackersto read private credentials. For Debian 8 "Jessie", this issue has been fixed in libzypp version 14.29.1-2+deb8u1. We recommend that you upgrade your libzypp packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS Regards, - -- ,'`. : :' : Chris Lamb `. `'` This email address is being protected from spambots. You need JavaScript enabled to view it. / chris-lamb.co.uk `- . This patch enhances security settings within the libzypp framework, mitigating a local vulnerability that could potentially expose confidential information.. libzypp Update, Security Advisory, Debian LTS. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Mar 03, 2020 Critical Debian LTS
87

Debian: DSA-336-1 High: WordPress Security Flaw Introduction

mantis, a PHP/MySQL web based bug tracking system, stores the passwordused to access its database in a configuration file which isworld-readable.. -------------------------------------------------------------------------- Debian Security Advisory DSA 335-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman June 28th, 2003 Debian -- Debian security FAQ -------------------------------------------------------------------------- Package : mantis Vulnerability : incorrect permissions Problem-Type : local Debian-specific: yes mantis, a PHP/MySQL web based bug tracking system, stores the password used to access its database in a configuration file which is world-readable. This could allow a local attacker to read the password and gain read/write access to the database. For the stable distribution (woody) this problem has been fixed in version 0.17.1-3. For the old stable distribution (potato) does not contain a mantis package. For the unstable distribution (sid) this problem is fixed in version 0.17.5-6. We recommend that you update your mantis package. Upgrade Instructions -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 577 51599356a83dc1b315fc7e6f21d338ff Size/MD5 checksum: 15264 4a65805f85b2e70ab61f61446ab29336 Size/MD5 checksum: 220458 d8bac093eaf31ef5812e714db5c07f82 Architecture independent components: Size/MD5 checksum: 250314 e47ccc4eec1d97677a7fa350565ed98a You may use an automated update by adding the resources from the footer to theproper configuration. --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Debian security advisory DSA-336-1 addresses flaws in Mantis's permission settings risking database access for local users.. Debian Security, Mantis Permissions, Exposure Issues, Database Security, Bug Tracking System. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 28, 2003 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here