Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 hplip Major Update Addressing Possible Arbitrary Code Execution

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 Important Kernel Security Advisory ELSA-2026-21706

Calendar White Jun 02, 2026
Important
Oracle Large Esm H900
Oracle

Oracle Linux 8 httpd Important Denial of Service Vuln ELSA-2026-22140

Calendar White Jun 02, 2026
Important
Oracle Large Esm H800
Oracle

Oracle Linux 8 ELSA-2026-22315 compat-openssl10 Moderate DoS Fix

Calendar White Jun 02, 2026
moderate
Oracle Large Esm H900
Oracle

Oracle Linux 8 gnutls Important Buffer Overflow Auth Bypass ELSA-2026-20611

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS nginx Security Advisory for Critical DoS Vulnerabilities

Calendar White Jun 03, 2026
Critical
Ubuntu Large Esm H800
Ubuntu

Ubuntu 20.04 LTS MySQL Important Security Issues USN-8363-2

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 20.04 LTS GStreamer Base Significant DoS Attack Vulnerability Alert

Calendar White Jun 03, 2026
Important
Ubuntu Large Esm H900
Ubuntu

Ubuntu 26.04 LTS python-pip Moderate DoS Regression Fix USN-8344-3

Calendar White Jun 03, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
91
Ls Advisories Gentoo Esm H240
Price Tag 1security advisorygentoocritical

Gentoo: 200306-04 Critical: LPRng Exploit of Symlink Attack

psbanner in the LPRng package allows local users to overwrite arbitraryfiles via a symbolic link attack on the /tmp/before file.. - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200306-04 - - --------------------------------------------------------------------- PACKAGE : lprng SUMMARY : symbolic link attack DATE : 2003-06-14 15:35 UTC EXPLOIT : local VERSIONS AFFECTED : =lprng-3.8.12-r1 CVE : CAN-2003-0136 - - --------------------------------------------------------------------- psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file. SOLUTION It is recommended that all Gentoo Linux users who are running net-print/lprng upgrade to lprng-3.8.12-r1 as follows emerge sync emerge lprng emerge clean - - --------------------------------------------------------------------- This email address is being protected from spambots. You need JavaScript enabled to view it. - GnuPG key is available at - - --------------------------------------------------------------------- . Residents in the area can exploit the psbanner vulnerability in LPRng to conduct a symbolic link attack, causing unauthorized file substitutions; update LPRng immediately. Gentoo Linux, LPRng Update, Local Exploit, File Overwrite, Symlink Attack. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 14, 2003 •Critical Gentoo
87
Ls Advisories Debian Esm H240
Price Tag 1security advisorydebianlocal threat

Debian 3.0 Woody DSA 285-1 Moderate: Insecure Temporary File Issue

psbanner, a printer filter, insecurely creates a temporary file for debugging purpose when it is configured as filter.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 285-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Martin Schulze April 14th, 2003 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : lprng Vulnerability : insecure temporary file Problem-Type : local Debian-specific: no CVE Id : CAN-2003-0136 Karol Lewandowski discovered that psbanner, a printer filter that creates a PostScript format banner and is part of LPRng, insecurely creates a temporary file for debugging purpose when it is configured as filter. The program does not check whether this file already exists or is linked to another place writes its current environment and called arguments to the file unconditionally with the user id daemon. For the stable distribution (woody) this problem has been fixed in version 3.8.10-1.2. The old stable distribution (potato) is not affected by this problem. For the unstable distribution (sid) these problems have been fixed in version 3.8.20-4. We recommend that you upgrade your lprng package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 656 5b675ef9bc39b470e3ec8cb1b88150b4 Size/MD5 checksum: 1729853d5ce171d250135756bf4682a82737d Size/MD5 checksum: 5125140 3127e3793b94bd4a403a3809b1d8467b Architecture independent components: Size/MD5 checksum: 1709460 2cec616424b93bfe9df97b0b378b0c6b Alpha architecture: Size/MD5 checksum: 543788 2889fb7f5dcca329b03edc9f1489e1e6 ARM architecture: Size/MD5 checksum: 511150 becc4d3f2165ae49dfbf518ce488caea Intel IA-32 architecture: Size/MD5 checksum: 467568 b16f01e1ea4a1c458a6e32829a85c7b3 Intel IA-64 architecture: Size/MD5 checksum: 631104 b34cf87d77dd353bf702d403e9561718 HP Precision architecture: Size/MD5 checksum: 544364 b6e5e6f81c4d291c65b55fbe71ac6747 Motorola 680x0 architecture: Size/MD5 checksum: 467846 2659f796ef5715191e6ab5919cdddb30 Big endian MIPS architecture: Size/MD5 checksum: 480194 93b19b4230658fa889315579da6d4db2 Little endian MIPS architecture: Size/MD5 checksum: 477314 9edafa58c5a2bf0f3dcbb1c1a1542a78 PowerPC architecture: Size/MD5 checksum: 512804 d0d141a47635f7c4ccf208489d14e6bb IBM S/390 architecture: Size/MD5 checksum: 505336 a897c14ef252fb998395d67c9eeab1cd Sun Sparc architecture: Size/MD5 checksum: 513382 fc6769e619873033d73a3c7d9cb47fb9 These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Security vulnerability identified in the lprng print filter affecting transient files; it is recommended to implement updates enhancing security measures to mitigate risks effectively.. Debian Security, Printer Filter Insecurity, Lprng Update,Security Patch. . Severity: Medium. LinuxSecurity.com Team

Calendar 2 Apr 14, 2003 •Medium Debian
Banner 2 1028x280 1708121730 1 1771599631
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryunauthorized accessred hat

Red Hat 7.x: RHSA-2002:089-07 Critical Unauthorized Access in LPRng

The LPRng print spooler, as shipped in Red Hat Linux 7.x, accepts allremote print jobs by default.. `` --------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Relaxed LPRng job submission policy Advisory ID: RHSA-2002:089-07 Issue date: 2002-05-16 Updated on: 2002-06-09 Product: Red Hat Linux Keywords: LPRng Cross references: Obsoletes: RHSA-2001:077 CVE Names: CAN-2002-0378 --------------------------------------------------------------------- 1. Topic: The LPRng print spooler, as shipped in Red Hat Linux 7.x, accepts all remote print jobs by default. 2. Relevant releases/architectures: Red Hat Linux 7.0 - alpha, i386 Red Hat Linux 7.1 - alpha, i386, ia64 Red Hat Linux 7.2 - i386, ia64 Red Hat Linux 7.3 - i386 3. Problem description: With its default configuration, LPRng will accept job submissions from any host, which is not appropriate in a workstation environment. We are grateful to Matthew Caron for pointing out this configuration problem. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2002-0378 to this issue. The updated packages from this advisory change the job submission policy (in /etc/lpd.perms) so that jobs from remote hosts are refused by default. Those running print servers may want to adjust this policy as appropriate, for example to give access to certain hosts or subnets. For details on how to do this see the lpd.perms(5) man page. Since Red Hat Linux 7.1, default installations include ipchains rules blocking remote access to the print spooler IP port; as a result those installations already reject remote job submissions. However, Red Hat Linux 7 machines and any machine upgraded to a later release (as opposed to having been freshly installed) will not have ipchains rules in place by default. IMPORTANT: There are special instructions for installing this update at the end of the"Solution" section below. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. To update all RPMs for your particular architecture, run: rpm -Fvh [filenames] where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs. Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. After upgrading, you should check that the new configuration file is activated. To do this, type the following command: grep "X NOT SERVER" /etc/lpd.perms If this commad returns no output, you will need to put the new configuration file in place by typing: mv /etc/lpd.perms.rpmnew /etc/lpd.perms 5. Bug IDs fixed ( for more info): 6. RPMs required: Red Hat Linux 7.0: SRPMS: alpha: i386: Red Hat Linux 7.1: SRPMS: alpha: i386: ia64: Red Hat Linux 7.2: SRPMS: i386: ia64: Red Hat Linux 7.3: SRPMS: i386: 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- 69f458cca66118c3516a836fe81bea0c 7.0/en/os/SRPMS/LPRng-3.7.4-23.1.src.rpm a48b696acd1d993e0ed0592ec06e14c0 7.0/en/os/alpha/LPRng-3.7.4-23.1.alpha.rpm 5443ead6739e417c77b4ce4af28124cc 7.0/en/os/i386/LPRng-3.7.4-23.1.i386.rpm 69f458cca66118c3516a836fe81bea0c 7.1/en/os/SRPMS/LPRng-3.7.4-23.1.src.rpm a48b696acd1d993e0ed0592ec06e14c0 7.1/en/os/alpha/LPRng-3.7.4-23.1.alpha.rpm 5443ead6739e417c77b4ce4af28124cc7.1/en/os/i386/LPRng-3.7.4-23.1.i386.rpm cbd09b4ebd705011785c4ffdf63bde74 7.1/en/os/ia64/LPRng-3.7.4-23.1.ia64.rpm 33bad25aff0a6ea45564acac4a3843da 7.2/en/os/SRPMS/LPRng-3.7.4-28.1.src.rpm 0940df47e5a6a33c1bdeac9d0d2d29e7 7.2/en/os/i386/LPRng-3.7.4-28.1.i386.rpm 89d7d9f82d2425cc7221665110045260 7.2/en/os/ia64/LPRng-3.7.4-28.1.ia64.rpm 0a63596e6de46f9e32c2dd3b025c68a5 7.3/en/os/SRPMS/LPRng-3.8.9-4.src.rpm a6d4b8b6cb30cddb686c102e27997d6d 7.3/en/os/i386/LPRng-3.8.9-4.i386.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: About You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: CVE -CVE-2002-0378 Copyright(c) 2000, 2001, 2002 Red Hat, Inc. _______________________________________________ Red Hat-watch-list mailing list To unsubscribe, visit: ``. Red Hat advisory reveals critical LPRng print spooler vulnerability allowing unauthorized access. Update recommended.. RedHat Linux, LPRng, Print Spooler, Unauthorized Access. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 11, 2002 •Critical Red Hat
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here