Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisoryFedoraprivilege escalationFedora 38 - FEDORA-2023-41bdb7dba8 Moderate: Polkit Permission Change
config file permission change to increase security of polkitd. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-41bdb7dba8 2023-04-17 01:21:13.055008 --------------------------------------------------------------------------------Name : polkit Product : Fedora 38 Version : 122 Release : 3.fc38.1 URL : https://gitlab.freedesktop.org/polkit/polkit/ Summary : An authorization framework Description : polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. --------------------------------------------------------------------------------Update Information: config file permission change to increase security of polkitd --------------------------------------------------------------------------------ChangeLog: * Thu Mar 30 2023 Jan Rybar - 122-3.1 - config file permission change to increase security of polkitd - Resolves: bz#2182784 --------------------------------------------------------------------------------References: [ 1 ] Bug #2182784 - polkit: Privilege escalation from polkitd user https://bugzilla.redhat.com/show_bug.cgi?id=2182784 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-41bdb7dba8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 17, 2023
Fedora
89
security advisorymoderatesecurity issueFedora 37: 2023-4936e4e7f1 Moderate: Polkit Permission Change
config file permission change to increase security of polkitd. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-4936e4e7f1 2023-04-13 01:53:04.374252 --------------------------------------------------------------------------------Name : polkit Product : Fedora 37 Version : 121 Release : 4.fc37.2 URL : https://gitlab.freedesktop.org/polkit/polkit/ Summary : An authorization framework Description : polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. --------------------------------------------------------------------------------Update Information: config file permission change to increase security of polkitd --------------------------------------------------------------------------------ChangeLog: * Tue Apr 11 2023 Jan Rybar - 122-3.2 - revert config file location * Thu Mar 30 2023 Jan Rybar - 122-3.1 - config file permission change to increase security of polkitd - Resolves: bz#2182784 --------------------------------------------------------------------------------References: [ 1 ] Bug #2182784 - polkit: Privilege escalation from polkitd user https://bugzilla.redhat.com/show_bug.cgi?id=2182784 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-4936e4e7f1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 13, 2023
•Important
Fedora
203
security advisoryfile accessexploitationMageia 8: 2021-0484 Moderate: Docker-Containerd Permission Change Threat
A bug was found in containerd where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky. . MGASA-2021-0484 - Updated docker-containerd packages fix security vulnerability Publication date: 23 Oct 2021 URL: https://advisories.mageia.org/MGASA-2021-0484.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-32760, CVE-2021-41103 A bug was found in containerd where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. References: - https://bugs.mageia.org/show_bug.cgi?id=29268 - https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w - https://ubuntu.com/security/notices/USN-5012-1 - - https://lists.fedoraproject.org/archives/list/
Oct 23, 2021
Mageia
172
security advisorysoftware updateUbuntuUbuntu 7.10: USN-708-1 Moderate - HPLIP Local Exploit Risk
It was discovered that an installation script in the HPLIP package would change permissions on the hplip config files located in user's home directories. A local user could exploit this and change permissions on arbitrary files upon an HPLIP installation or upgrade, which could lead to root privileges. [More...]. ==========================================================Ubuntu Security Notice USN-708-1 January 13, 2009 hplip vulnerability https://bugs.launchpad.net/ubuntu/+source/hplip/+bug/191299 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 7.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 7.10: hplip 2.7.7.dfsg.1-0ubuntu5.3 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: It was discovered that an installation script in the HPLIP package would change permissions on the hplip config files located in user's home directories. A local user could exploit this and change permissions on arbitrary files upon an HPLIP installation or upgrade, which could lead to root privileges. Updated packages for Ubuntu 7.10: Source archives: Size/MD5: 149462 e8b5cb18aff082738bfcfe069eb873f5 Size/MD5: 1064 531e707f0cbace5f1eb82039e409c306 Size/MD5: 14361049 ae5165d46413db8119979f5b3345f7a5 Architecture independent packages: Size/MD5: 6898006 691895b0f8e5fc93bcb86d47d11da1af Size/MD5: 4146918 d4e0b928aacc84bbe2a05862050a5963 Size/MD5: 117628 91f0c9d09f2520e76b3a3e6cde4abd63 Size/MD5: 480134 59604754cef89d7b5ae128ecf20f44da amd64 architecture (Athlon64, Opteron, EM64T Xeon): Size/MD5: 341576 918813fb4741326051c7480ffeae9a9a Size/MD5: 770122ccef78fc8a55b4e94318931964e9e97b Size/MD5: 302856 f2a47e27a69aa016334a1ffdac105be1 i386 architecture (x86 compatible Intel/AMD): Size/MD5: 334690 dd891b2df494fd1fbc46abd25b9ef7db Size/MD5: 747250 4676694a4d20445e64f3f4dc91aaa44c Size/MD5: 290282 921463222e2b642fb5bc16083d8b70ac lpia architecture (Low Power Intel Architecture): Size/MD5: 337798 9c060add246bb5212706b9dd0d92cc51 Size/MD5: 926096 af4481ea010212486ea621103329cf13 Size/MD5: 290082 f26b9fc31e3457719b3102b3a9c77b5b powerpc architecture (Apple Macintosh G3/G4/G5): Size/MD5: 348258 66f9714865cad898e10e98ef83f6e443 Size/MD5: 784504 0c76dac215474fc62900aea547168387 Size/MD5: 319006 52d13211d1681fe90b74951dc204a788 sparc architecture (Sun SPARC/UltraSPARC): Size/MD5: 332756 a3411ca114399f0359b949462e0313ab Size/MD5: 717210 401d1050417a9a8608198088abb9e305 Size/MD5: 289370 f92c0c0f6a2f2ccef18d3874db728bf7 . The Linux Security Bulletin LSB-583-2 details a significant vulnerability in the xserver package, which could allow local attackers to gain elevated privileges.. HPLIP, Ubuntu, Permission Change, Local Exploit, Security Advisory. . Severity: Important. LinuxSecurity.com Team
Jan 13, 2009
•Important
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!