Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
87

Debian: DSA-927-1 Moderate: tkdiff Insecure Temp File Issue

Updated package.. - --------------------------------------------------------------------------Debian Security Advisory DSA 927-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : tkdiff Vulnerability : insecure temporary file Problem type : local Debian-specific: no CVE ID : CVE-2005-3343 Javier Fern�ndez-Sanguino Pe�a from the Debian Security Audit project discovered that tkdiff, a graphical side by side "diff" utility, creates temporary files in an insecure fashion. For the old stable distribution (woody) this problem has been fixed in version 3.08-3woody0. For the stable distribution (sarge) this problem has been fixed in version 4.0.2-1sarge0. For the unstable distribution (sid) this problem has been fixed in version 4.0.2-2. We recommend that you upgrade your tkdiff package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 568 f331eee995b5ec3b5346b519c7147ee4 Size/MD5 checksum: 3685 f00859ddd284e8016728b5a1d00b6fdd Size/MD5 checksum: 63171 197e9bee9812a5698889c589efd9b1ee Architecture independent components: Size/MD5 checksum: 67308 7314490886f96610a31f71bc22513c7f Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: Size/MD5 checksum: 571 e54f2d9fcd23c386640502fbe119e2b0 Size/MD5 checksum: 3973 decabcedfbb5b9fc7dfa8a48b661b563 Size/MD5 checksum: 86258 c52f7d8d87ebe34fbba6b6bdf30f3c60 Architecture independent components: Size/MD5 checksum: 85468 c5fe0c83bfb827e2903a045767f03ded These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Concerning DSA-927-2, the latest Debian patch resolves the vulnerability in tkdiff's temporary files, so ensure you update promptly for enhanced security.. Debian Security Advisory, tkdiff Temp File Fix, Package Update. . LinuxSecurity.com Team

Calendar 2 Dec 27, 2005 Debian
87

Debian 3.1 DSA 822-1 Moderate: Gtkdiskfree Insecure Temp File Fix

Updated package.. - --------------------------------------------------------------------------Debian Security Advisory DSA 822-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq - --------------------------------------------------------------------------Package : gtkdiskfree Vulnerability : insecure temporary file creation Problem type : local Debian-specific: no CVE ID : CAN-2005-2918 Eric Romang discovered that gtkdiskfree, a GNOME program that shows free and used space on filesystems, creates a temporary file in an insecure fashion. The old stable distribution (woody) does not contain the gtkdiskfree package. For the stable distribution (sarge) this problem has been fixed in version 1.9.3-4sarge1. For the unstable distribution (sid) this problem will be fixed soon. We recommend that you upgrade your gtkdiskfree package. Upgrade Instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.1 alias sarge - -------------------------------- Source archives: Size/MD5 checksum: 621 0bd28c26695d9fccf914ab1e377909b2 Size/MD5 checksum: 16542 ae45c717d4ae1b818444129e16c233cb Size/MD5 checksum: 255601 66218fc425da0a2c42adfcb9914dd641 Alpha architecture: Size/MD5 checksum: 98940 1b26a54bae0be826495264be3b7b82e6 AMD64 architecture: Size/MD5 checksum: 94194 bfb1876fa331f1ae9cb0298c28ffe4c5 ARM architecture: Size/MD5 checksum: 89044 1e857eadbbe706b8e225b2cb01d45490 Intel IA-32 architecture: Size/MD5 checksum: 90816 d4acc02866f01c1a8b730f415bdb0336 Intel IA-64 architecture: Size/MD5 checksum: 104408 459cf724e9f5577d4fda6a789c9a90bb HP Precision architecture: Size/MD5 checksum: 94946 7e14aaa69a7e846d77c96b84f9c5c025 Motorola 680x0 architecture: Size/MD5 checksum: 88688 a9a9de28ad819007aa994944c20e523c Big endian MIPS architecture: Size/MD5 checksum: 90530 7e553dc962f250a16cfe10512c9b458c Little endian MIPS architecture: Size/MD5 checksum: 88680 2069bcc94c615cc7b7862469ad7f25eb PowerPC architecture: Size/MD5 checksum: 93076 8b4dc0bedd12247019212ece8466154d IBM S/390 architecture: Size/MD5 checksum: 94662 ec49c801f4c1637e43324ff161ac58ea Sun Sparc architecture: Size/MD5 checksum: 90310 d1bc24a8debc839678181bc842a5b047 These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . An update and security patch for gtkdiskfree in Debian has been issued, resolving a critical issue regarding insecure temporary file creation for the stable version.. Debian Security, GTKDiskFree, Insecure Handling. . LinuxSecurity.com Team

Calendar 2 Sep 29, 2005 Debian
87

Debian DSA-340-1: x-face-el Local Exploit Risk and Update Recommendations

due to a combination of administrative problems, this advisorywas erroneously released with the identifier "DSA-338-1". DSA-338-1correctly refers to an earlier advisory regarding proftpd.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 340-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman July 6th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : x-face-el Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no NOTE: due to a combination of administrative problems, this advisory was erroneously released with the identifier "DSA-338-1". DSA-338-1 correctly refers to an earlier advisory regarding proftpd. x-face-el, a decoder for images included inline in X-Face email headers, does not take appropriate security precautions when creating temporary files. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running Emacs and x-face-el, potentially with contents supplied by the attacker. For the stable distribution (woody) this problem has been fixed in version 1.3.6.19-1woody1. For the unstable distribution (sid) this problem has been fixed in version 1.3.6.23-1. We recommend that you update your x-face-el package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 591 f431ba4034b534290d29103076464020 Size/MD5 checksum: 21268 ba3e6ed17c8c03e8fab969909bcd8572 Size/MD5 checksum: 80666 b541ab8e216e9df76f45b8b26241debd Architecture independent components: Size/MD5 checksum: 101882 9773535a2bb5e0ce12c34bb0bd5b351a These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Debian DSA-340-1 resolves x-face-el local exploit risk; update recommended for security.. Debian Advisory,x-face-el Security,insecure file management,local exploitation,Debian updates. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jul 07, 2003 Important Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here