Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
87

Debian 4.0 DSA-1580-1: Severe PhpgEdView Privilege Escalation Issue

It was discovered that phpGedView, an application to provide online access to genealogical data, allowed remote attackers to gain administrator privileges due to a programming error.. - ------------------------------------------------------------------------Debian Security Advisory DSA-1580-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Thijs Kinkhorst May 20, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------Package : phpgedview Vulnerability : programming error Problem type : remote Debian-specific: no CVE Id(s) : CVE-2008-2064 It was discovered that phpGedView, an application to provide online access to genealogical data, allowed remote attackers to gain administrator privileges due to a programming error. Note: this problem was a fundamental design flaw in the interface (API) to connect phpGedView with external programs like content management systems. Resolving this problem was only possible by completely reworking the API, which is not considered appropriate for a security update. Since these are peripheral functions probably not used by the large majority of package users, it was decided to remove these interfaces. If you require that interface nonetheless, you are advised to use a version of phpGedView backported from Debian Lenny, which has a completely redesigned API. For the stable distribution (etch), this problem has been fixed in version 4.0.2.dfsg-4. For the unstable distribution (sid), this problem has been fixed in version 4.1.e+4.1.5-1. We recommend that you upgrade your phpgedview package. Upgrade instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-getupgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 4.0 alias etch - -------------------------------Source archives: Size/MD5 checksum: 6181964 73b1f051f01dcd6520a044badaa40fe6 Size/MD5 checksum: 8182 834f82b6f3a2512211e8e25dc99ebb44 Size/MD5 checksum: 1053 8058483846a8b7e51301ed3fac097cdd Architecture independent packages: Size/MD5 checksum: 1207756 6105005be43e22076a87b6590a899268 Size/MD5 checksum: 1821820 0c8d7b39855b30c6880aa8115bc1452e Size/MD5 checksum: 2271768 3a7155e548c4f5e2ddcc43747d804ed0 Size/MD5 checksum: 877102 4e62354aa4950afee7ca71178f1a717f These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Advisory DSA-1580-1 http://www.debian.org/security/ Thijs Kinkhorst May 20, 2008 htt. phpgedview, application, provide, online, genealogical. . Severity: Important. LinuxSecurity.com Team

Calendar 2 May 20, 2008 Important Debian
87

Debian 4.0 DSA-1559-1 Critical: phpGedView Cross Site Scripting Issue

It was discovered that phpGedView, an application to provide online access to genealogical data, performed insufficient input sanitising on some parameters, making it vulnerable to cross site scripting.. - ------------------------------------------------------------------------Debian Security Advisory DSA-1559-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Thijs Kinkhorst April 27, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------Package : phpgedview Vulnerability : insufficient input sanitising Problem type : remote Debian-specific: no CVE Id(s) : CVE-2007-5051 Debian Bug : 443901 It was discovered that phpGedView, an application to provide online access to genealogical data, performed insufficient input sanitising on some parameters, making it vulnerable to cross site scripting. For the stable distribution (etch), this problem has been fixed in version 4.0.2.dfsg-3. For the unstable distribution (sid), this problem has been fixed in version 4.1.e+4.1.1-2. We recommend that you upgrade your phpgedview package. Upgrade instructions - --------------------wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 4.0 alias etch - -------------------------------Source archives: Size/MD5 checksum: 6181964 73b1f051f01dcd6520a044badaa40fe6 Size/MD5 checksum: 7845 0ae3d02bf2f9bfecac01bfbb98e16b53 Size/MD5 checksum: 1053 30d7415d993b4034f44fdfcd9bf9d998 Architecture independent packages: Size/MD5 checksum: 876616 0745d130e09318bd72790028db6a943d Size/MD5 checksum: 2270996 ce02af3e71b958d0fd3f72c1eea9eca4 Size/MD5 checksum: 1215452 dff7649b79e3f32ee6868839cd3c4c68 Size/MD5 checksum: 1821112 1b004f9221d532a1e07eb242bdd13ba1 These files will probably be moved into the stable distribution on its next update. - ---------------------------------------------------------------------------------For apt-get: deb https://www.debian.org/security/ stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Uncover the solution for the phpGedView cross site scripting vulnerability in Debian as outlined in security advisory DSA-1559-1.. phpgedview Fix, debian Security, cross site scripting Issue, Security Advisory DSA-1559-1. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Apr 27, 2008 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here