Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 34: FEDORA-2022-dc62389784 Critical: btrbk Remote Execution Risk

Remove executable permissions from scripts in /usr/share. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-dc62389784 2022-01-19 01:53:29.295579 --------------------------------------------------------------------------------Name : btrbk Product : Fedora 34 Version : 0.31.3 Release : 1.fc34 URL : https://digint.ch/btrbk/ Summary : Tool for creating snapshots and remote backups of btrfs sub-volumes Description : Backup tool for btrfs sub-volumes, using a configuration file, allows creation of backups from multiple sources to multiple destinations, with ssh and flexible retention policy support (hourly, daily, weekly, monthly) --------------------------------------------------------------------------------Update Information: Remove executable permissions from scripts in /usr/share --------------------------------------------------------------------------------ChangeLog: * Mon Jan 10 2022 Juan Orti Alcaine - 0.31.3-1 - Version 0.31.3 (#1765928) - Remove executable permissions from scripts in /usr/share (#1994989) * Wed Jul 21 2021 Fedora Release Engineering - 0.28.3-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1994989 - CVE-2021-38173 btrbk: remote execution in ssh_filter_btrbk.sh [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1994989 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-dc62389784' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Update notice for btrbk on Fedora 34; mitigates elevated execution vulnerability by modifying script permissions in /usr/share.. btrbk updates,Fedora 34 advisories,remote exec risks,script permissions,btrfs backup tool. . Severity: Critical. LinuxSecurity.com Team

Jan 18, 2022 •Critical Fedora