Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
87

Debian 2.2 DSA-041-1 Critical: Local Exploit In Joe's Editor

Christer Öberg of Wkit Security AB found a problem in joe (Joe's Own Editor).. ------------------------------------------------------------------------ Debian Security Advisory DSA-041-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Wichert Akkerman March 9, 2001 ------------------------------------------------------------------------ Package : joe Problem type : local exploit Debian-specific: no Christer Öberg of Wkit Security AB found a problem in joe (Joe's Own Editor). joe will look for a configuration file in three locations: the current directory, the users homedirectory ($HOME) and in /etc/joe. Since the configuration file can define commands joe will run (for example to check spelling) reading it from the current directory can be dangerous: an attacker can leave a .joerc file in a writable directory, which would be read when a unsuspecting user starts joe in that directory. This has been fixed in version 2.8-15.3 and we recommend that you upgrade your joe package immediately. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.2 alias potato --------------------------------- Potato was released for alpha, arm, i386, m68k, powerpc and sparc. Source archives: MD5 checksum: cd6b006c8a2426ada62a6af1ddd001fe MD5 checksum: 4f3b3a027cd8baf4c3b1a282b31cb5ed MD5 checksum: 84c1aebfce7876b8639945da3c29f204 Alpha architecture: MD5 checksum: bb4f2753fa7b05f5877b7bad353ac7a4 ARM architecture: MD5 checksum: 179c212d01bfaa898259028ce06a24a8 Intel ia32 architecture: MD5 checksum: 39f680f8fde72d0958431f617e774123 Motorola 680x0 architecture: MD5 checksum: 100db16eb2ff8aa43840cdde49d9b5a9 PowerPC architecture: MD5 checksum: 425019054e7eb9b104e96ff351132bf3 Sun Sparc architecture: MD5 checksum: 8f88ab48a61c0c9f5e955fdf0fc79d4e Thesefiles will be moved into soon. For not yet released architectures please refer to the appropriate directory . -- ---------------------------------------------------------------------------- apt-get: deb Debian -- Security Information stable/updates main dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A critical local exploit in Joe's Editor discovered, impacting Debian systems. Immediate update advised for security protection.. debian advisory, local exploit, joe editor, security update. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 09, 2001 Critical Debian
87

Debian 2.2 Moderate: Symlink Attack in Joe Editor Advisory

When joe dies to a signal instead of a normal exit it is vulnerable to a symlink attack.. - ------------------------------------------------------------------------ Debian Security Advisory This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Wichert Akkerman November 22, 2000 - ------------------------------------------------------------------------ Package : joe Problem type : symlink attack Debian-specific: no When joe (Joe's Own Editor) dies due to a signal instead of a normal exit it saves a list of the files it is editing to a file called `DEADJOE' in its current directory. Unfortunately this wasn't done safely which made joe vulnerable to a symlink attack. This has been fixed in version 2.8-15.1 . wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian GNU/Linux 2.2 alias potato - --------------------------------- Potato was released for alpha, arm, i386, m68k, powerpc and sparc. Source archives: MD5 checksum: 94131d7638b028e6bd6f529747b9d318 MD5 checksum: 5ad45a1fa1a293bef03786f9258bf846 MD5 checksum: 84c1aebfce7876b8639945da3c29f204 Alpha architecture: MD5 checksum: defbc5c39a2ae8ed000b7b302ecd339f ARM architecture: MD5 checksum: bcb70726840c2cf11cba068ce2a826be Intel ia32 architecture: MD5 checksum: 21444255b240be01132208e5cb1d3439 Motorola 680x0 architecture: MD5 checksum: a4b275c324956489bf7558d42a80f22f PowerPC architecture: MD5 checksum: 689d54abe039ded6e82bf60115737631 Sun Sparc architecture: MD5 checksum: 8846236e9158cf3f3d7f1b8edce73d40 These files will be moved into soon. For not yet released architectures please refer to the appropriate directory . - -- - ---------------------------------------------------------------------------- apt-get: deb Debian -- Security Information stable/updates main dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . - ------------------------------------------------------------------------ Debian Security Advisory . signal, instead, normal, vulnerable, symlink, attack, ---------. . LinuxSecurity.com Team

Calendar%202 Nov 22, 2000 Debian
98

Red Hat Linux 5.2, 6.x: RHSA-2000:110-06 Critical Symlink Exploit

Updated joe packages are available for Red Hat Linux 5.2, 6.x and 7.. ` --------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Updated joe packages are available for Red Hat Linux 5.2, 6.x and 7 Advisory ID: RHSA-2000:110-06 Issue date: 2000-11-17 Updated on: 2000-11-20 Product: Red Hat Linux Keywords: joe DEADJOE symlink vulnerability Cross references: N/A --------------------------------------------------------------------- 1. Topic: Updated joe packages are available for Red Hat Linux 5.2, 6.x and 7. 2. Relevant releases/architectures: Red Hat Linux 5.2 - i386, alpha, sparc Red Hat Linux 6.0 - i386, alpha, sparc Red Hat Linux 6.1 - i386, alpha, sparc Red Hat Linux 6.2 - i386, alpha, sparc Red Hat Linux 6.2EE - i386 Red Hat Linux 7.0 - i386 3. Problem description: When exiting joe in a nonstandard way (such as a system crash, closing an xterm, or a network connection going down), joe will unconditionally append its open buffers to the file "DEADJOE". This could be exploited by the creation of DEADJOE symlinks in directories where root would normally use joe. In this way, joe could be used to append garbage to potentially-sensitive files, resulting in a denial of service. Users of Red Hat Linux 6.x and 5.2 should also note that joe's configuration files have been moved from /usr/lib/joe to /etc/joe 4. Solution: For each RPM for your particular architecture, run: rpm -Fvh [filename] where filename is the name of the RPM. 5. Bug IDs fixed ( for more info): N/A 6. RPMs required: Red Hat Linux 5.2: alpha: sparc: i386: sources: Red Hat Linux 6.0: sparc: i386: alpha: sources: Red Hat Linux 6.1: alpha: sparc: i386: sources: Red Hat Linux 6.2: alpha: sparc: i386: sources: Red Hat Linux 7.0: i386: sources: 7. Verification: MD5 sum PackageName -------------------------------------------------------------------------- 7b78c81b253833ae849d162457d318dd 5.2/SRPMS/joe-2.8-42.52.src.rpm 0959bddd216c47426e5c335e6dbaa922 5.2/alpha/joe-2.8-42.52.alpha.rpm d5dc1a23953544964c04ad1eaa9c1a26 5.2/i386/joe-2.8-42.52.i386.rpm d5ce7e5469be6ff16373d4610c2b8fb3 5.2/sparc/joe-2.8-42.52.sparc.rpm 6eb2d2741296250f71667d5a1c1467fc 6.0/SRPMS/joe-2.8-42.62.src.rpm c53a34db6539d412adc86493e17e9725 6.0/alpha/joe-2.8-42.62.alpha.rpm d6afd50052ee0f5354a7398849d6c5b5 6.0/i386/joe-2.8-42.62.i386.rpm 0b1e58283c4f4d4c41c55948b0117f80 6.0/sparc/joe-2.8-42.62.sparc.rpm 6eb2d2741296250f71667d5a1c1467fc 6.1/SRPMS/joe-2.8-42.62.src.rpm c53a34db6539d412adc86493e17e9725 6.1/alpha/joe-2.8-42.62.alpha.rpm d6afd50052ee0f5354a7398849d6c5b5 6.1/i386/joe-2.8-42.62.i386.rpm 0b1e58283c4f4d4c41c55948b0117f80 6.1/sparc/joe-2.8-42.62.sparc.rpm 6eb2d2741296250f71667d5a1c1467fc 6.2/SRPMS/joe-2.8-42.62.src.rpm c53a34db6539d412adc86493e17e9725 6.2/alpha/joe-2.8-42.62.alpha.rpm d6afd50052ee0f5354a7398849d6c5b5 6.2/i386/joe-2.8-42.62.i386.rpm 0b1e58283c4f4d4c41c55948b0117f80 6.2/sparc/joe-2.8-42.62.sparc.rpm 67e2ddb6f4c903672782467684fbb7d3 7.0/SRPMS/joe-2.8-43.src.rpm 1578b0e184b76b23d2a30b101f1665d4 7.0/i386/joe-2.8-43.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: N/A Copyright(c) 2000 Red Hat, Inc. `. Updated Alex software receives critical fix to rectify symlink vulnerability in Fedora Linux editions 30, 31, and 32. Timely installation advised.. joe Editor, Red Hat Linux, Symlink Exploits, Security patches. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Nov 20, 2000 Critical Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":555,"type":"x","order":1,"pct":78.72,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.26,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.82,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.2,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here