Alerts This Week
Warning Icon 1 540
Alerts This Week
Warning Icon 1 540

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
200

Scientific Linux: CVE-2010-1163 Moderate: sudo Local Command Execution Risk

Moderate: sudo security update. Date: Tue, 20 Apr 2010 15:46:23 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Moderate: sudo on SL5.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Moderate: sudo security update Issue date: 2010-04-20 CVE Names: CVE-2010-1163 In configurations where the ignore_dot option was set to off (the default is on for the Scientific Linux 5 sudo package), a local user authorized to use the sudoedit pseudo-command could possibly run arbitrary commands with the privileges of the users sudoedit was authorized to run as. (CVE-2010-1163) SL 5.x SRPMS: sudo-1.7.2p1-6.el5_5.src.rpm i386: sudo-1.7.2p1-6.el5_5.i386.rpm x86_64: sudo-1.7.2p1-6.el5_5.x86_64.rpm -Connie Sieh -Troy Dawson . Controlled sudo system patch for Scientific Linux 5 aimed at mitigating possible command execution vulnerabilities.. Scientific Linux, sudo update, security errata, command execution risk. . LinuxSecurity.com Team

Calendar 2 Apr 20, 2010 Scientific Linux
172

Ubuntu 6.10: USN-530-1 Medium: HPLIP Local Command Execution

It was discovered that the hpssd tool of hplip did not correctly handle shell meta-characters. A local attacker could exploit this to execute arbitrary commands as the hplip user. . =========================================================== Ubuntu Security Notice USN-530-1 October 12, 2007 hplip vulnerability CVE-2007-5208 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.10 Ubuntu 7.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.10: hplip 1.6.9-0ubuntu2.1 Ubuntu 7.04: hplip 1.7.3-0ubuntu1.1 In general, a standard system upgrade is sufficient to affect the necessary changes. Details follow: It was discovered that the hpssd tool of hplip did not correctly handle shell meta-characters. A local attacker could exploit this to execute arbitrary commands as the hplip user. Updated packages for Ubuntu 6.10: Source archives: Size/MD5: 259212 536df2eefb0b9fbe7265ce08cbcab8c6 Size/MD5: 867 f3fcef4f5d77e560d6e689dd46bd43cf Size/MD5: 10018087 38d57f58b48b5b0729d1de507776e7d1 Architecture independent packages: Size/MD5: 206190 b9b489f0774aa87c39124cb0db13fd31 Size/MD5: 6275996 6418efb1c032cd56481f644f19b3b61f Size/MD5: 1110706 e0178bd79b82544198aaaf530440383b amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 353370 6bee9b223495e146322db33ba595a3dd Size/MD5: 852854 0e1c50cf2f59f863fdd9f6921d75e182 Size/MD5: 558178 4993f82769599490e9afa75716ec676c i386 architecture (x86 compatible Intel/AMD): Size/MD5: 345224 d3b9fe0a4f475f27a4a7ed2f489bee5e Size/MD5: 825126 12c869a1721ccafc603583d711a01eff Size/MD5: 547254 dd426a5a7d2c9df72b6ca89e04bb546f powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 358780 4f77e25806dea449159b42eead6a7c99 Size/MD5: 862550 60f526a1953027144f3276425fd8048a Size/MD5: 563708 92351b2f1f6b6e9a8322e79818656c22 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 338118 74c15c966e2f094464cd476b3b5682fa Size/MD5: 784194 92b986a25c359122a5f10123306921fd Size/MD5: 542478 79ca390d413545ec5038624a40eddea0 Updated packages for Ubuntu 7.04: Source archives: Size/MD5: 306365 f41ad069c89422c7cf532b7f0b2298e9 Size/MD5: 1011 4205e63a16f1218403e403361351779b Size/MD5: 13556732 6921d256c9efc37446f5d2fad71979f8 Architecture independent packages: Size/MD5: 6497568 cd98dd4bd54b155e664f6fc988ce3995 Size/MD5: 4083742 089dcc3694e3d249188774c4ab6f727c Size/MD5: 217720 cdf52af0871895a8e4e8a81ada765870 amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 382046 6ed6ce7e6fe4301a5322d8cd8dae3744 Size/MD5: 902140 20107f7558991ccb6e4a90c283b45aa3 Size/MD5: 632374 b054a977150ec9f73e6334609ba7c947 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 374496 9d99f0b15690bef45e3458ac5190f988 Size/MD5: 874992 f5a1dc5eb40a50f043b2a2b5f73f9802 Size/MD5: 620606 05a1aab80677a9147b09dc7c27937712 powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 390378 eaec56fad0a69e249b2498eadf818d0d Size/MD5: 912866 80f008c38bb588d014dcaf598ca76c3f Size/MD5: 646356 e77243f70a0fd1a15c32948d792a5fb9 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 368140 0aebeee7c64bcac5a2ba28cf627b9282 Size/MD5: 832520 aa33f0f52142a040f1fc462f634ddd53 Size/MD5: 615194 e9216b7fc51ebb054961f22a5c4f759f . Ubuntu Security Notice USN-530-1 October 12, 2007 hplipvulnerability CVE-2007-5208 A security issue. hpssd, hplip, correctly, handle, shell, meta-characters. . Severity: Medium. LinuxSecurity.com Team

Calendar 2 Oct 12, 2007 Medium Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here