Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
87

Ubuntu: DSA 634-1 Important: Api Insecure Cache Vulnerability Risk

Peter Samuelson, upstream maintainer of bmv, a PostScript viewer for SVGAlib, discovered that temporary files are created in an insecure fashion. A malicious local user could cause arbitrary files to be overwritten by a symlink attack.. --------------------------------------------------------------------------Debian Security Advisory DSA 633-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Martin Schulze January 11th, 2005 http://www.debian.org/security/faq --------------------------------------------------------------------------Package : bmv Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no CVE ID : CAN-2003-0014 Peter Samuelson, upstream maintainer of bmv, a PostScript viewer for SVGAlib, discovered that temporary files are created in an insecure fashion. A malicious local user could cause arbitrary files to be overwritten by a symlink attack. For the stable distribution (woody) this problem has been fixed in version 1.2-14.2. For the unstable distribution (sid) this problem has been fixed in version 1.2-17. We recommend that you upgrade your bmv packages. Upgrade Instructions --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody -------------------------------- Source archives: Size/MD5 checksum: 565 7b056960fafe4fca7c72083788cf5844 Size/MD5 checksum: 11811 ab4e7218ce67de842d3a78e1c8e11caf Size/MD5 checksum: 50755 40c881800edac6b1d2ce75ea8da6e6b4 Intel IA-32 architecture: Size/MD5 checksum: 21762 b625704138829c0dcd96a25e0a7f365b These files will probably be moved into the stable distribution on its next revision. ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Ubuntu Security Notice USN-1234-1 highlights vulnerabilities in temporary file management which could allow for symlink exploitation.. Debian Security, Symlink Attacks, Insecure Files. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 11, 2005 Important Debian
87

Debian DSA 500-1 Critical: Flim Insecure Temporary File Access

This vulnerability could be exploited by a local user to overwrite files with the privileges of the user running emacs.. Debian Security Advisory DSA 500-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman May 1st, 2004 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : flim Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no CVE Ids : CAN-2004-0422 Tatsuya Kinoshita discovered a vulnerability in flim, an emacs library for working with internet messages, where temporary files were created without taking appropriate precautions. This vulnerability could potentially be exploited by a local user to overwrite files with the privileges of the user running emacs. the 'chroot' option. For the current stable distribution (woody) this problem has been fixed in version 1.14.3-9woody1. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you update your flim package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 576 e355dde8fc5dfb1b6b86504ad98ecb3f Size/MD5 checksum: 8044 71ee1b83fab4c323625b1dbd34a84497 Size/MD5 checksum: 165844 5931a530506e944f0605aeb022b5b97c Architecture independent components: Size/MD5 checksum: 156874 525f828cc8022e80601cb5c67d10b482 These files will probably bemoved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Debian Security Advisory DSA 500-1 outlines a critical flaw in flim, enabling local users to compromise file integrity.. debian advisories,insecure files,flim security,local exploitation. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 10, 2004 Critical Debian
87

Debian: DSA 367-1 Critical: Caffeine Security Flaw in User Session Handling

eroaster does nottake appropriate security precautions when creating a temporary filefor use as a lockfile.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 366-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman August 5th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : eroaster Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no CVE Id : CAN-2003-0656 eroaster, a frontend for burning CD-R media using cdrecord, does not take appropriate security precautions when creating a temporary file for use as a lockfile. This bug could potentially be exploited to overwrite arbitrary files with the privileges of the user running eroaster. For the stable distribution (woody) this problem has been fixed in version 2.1.0.0.3-2woody1. For the unstable distribution (sid) this problem has been fixed in version 2.2.0-0.5-1. We recommend that you update your eroaster package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 641 384fd61393ef45c246489da03dec960c Size/MD5 checksum: 2442 1356f13831c215a137f8639c3a656ee9 Size/MD5 checksum: 160884 1337d58a0c140ef62f2184699132ed40 Architecture independent components: Size/MD5 checksum: 145184 757bdf67c5b40eb6309260d90f1006ab These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Debian Security Advisory DSA 367-1 details critical Caffeine security flaw in user session handling requiring urgent updates.. Debian,Eroaster,Temporary File,Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 06, 2003 Critical Debian
87

Debian: DSA 286-1 Critical: Gs-Common Insecure Temporary File Exploit

A file is created in an insecure fashion, which could allow a local attacker to overwrite files owned by a user who invokes ps2epsi.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 286-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze April 14th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : gs-common Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no Paul Szabo discovered insecure creation of a temporary file in ps2epsi, a script that is distributed as part of gs-common which contains common files for different Ghostscript releases. ps2epsiuses a temporary file in the process of invoking ghostscript. This file was created in an insecure fashion, which could allow a local attacker to overwrite files owned by a user who invokes ps2epsi. For the stable distribution (woody) this problem has been fixed in version 0.3.3.0woody1. The old stable distribution (potato) is not affected by this problem. For the unstable distribution (sid) these problems have been fixed in version 0.3.3.1. We recommend that you upgrade your gs-common package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 522 16e9ffda57fcdb6c48e977e499fd8671 Size/MD5 checksum: 16202 9588ecfa64ccffdc50df77cdf282edc0 Architecture independent components: Size/MD5 checksum: 23008 77cc8798e636d26f6fa3a9913afc1de4 These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Local attacker could exploit a weak transient document located in gs-shared. Ensure your application is current to maintain safety standards.. Debian Security,Gs-Common,File Protection,Local Threat. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 15, 2003 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here