Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisorymoderatesecurity updateFedora 28: 2018-49ab80333f Moderate: Star Binary Hardening
harden the binaries (rhbz#1548670). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-49ab80333f 2018-04-15 02:32:41.336876 --------------------------------------------------------------------------------Name : star Product : Fedora 28 Version : 1.5.3 Release : 12.fc28 URL : Summary : An archiving tool with ACL support Description : Star saves many files together into a single tape or disk archive, and can restore individual files from the archive. Star supports ACL. --------------------------------------------------------------------------------Update Information: harden the binaries (rhbz#1548670) --------------------------------------------------------------------------------References: [ 1 ] Bug #1548670 - star: Partial build flags injection https://bugzilla.redhat.com/show_bug.cgi?id=1548670 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade star' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Apr 15, 2018
•Important
Fedora
91
security advisorygentoodirectory traversalGentoo: GLSA-200710-23 Low: Star Directory Traversal Threat
A directory traversal vulnerability has been discovered in Star.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200710-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: Star: Directory traversal vulnerability Date: October 22, 2007 Bugs: #189690 ID: 200710-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= A directory traversal vulnerability has been discovered in Star. Background ========= The Star program provides the ability to create and extract tar archives. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-arch/star < 1.5_alpha84 > = 1.5_alpha84 Description ========== Robert Buchholz of the Gentoo Security team discovered a directory traversal vulnerability in the has_dotdot() function which does not identify //.. (slash slash dot dot) sequences in file names inside tar files. Impact ===== By enticing a user to extract a specially crafted tar archive, a remote attacker could extract files to arbitrary locations outside of the specified directory with the permissions of the user running Star. Workaround ========= There is no known workaround at this time. Resolution ========= All Star users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-arch/star-1.5_alpha84" References ========= [ 1 ] CVE-2007-4134 https://www.cve.org/CVERecord?id=CVE-2007-4134 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo SecurityWebsite: https://security.gentoo.org/glsa/200710-23 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Oct 22, 2007
•Low
Gentoo
200
security advisorymoderatesecurity updateScientific Linux: CVE-2007-4134 Moderate: Star Path Traversal Threat
Moderate: star security update. Date: Wed, 5 Sep 2007 09:00:23 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for star on SL5.x, SL4.x, SL3,x i386/x86_64 Comments: To:
Sep 05, 2007
•Important
Scientific Linux
91
security advisoryhigh severitysecurity issueGentoo: GLSA-200409-12 Critical Risk: Star SUID Root Vulnerability Exploit
star contains a suid root vulnerability which could potentially grant unauthorized root access to an attacker.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200409-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: star: Suid root vulnerability Date: September 07, 2004 Bugs: #61797 ID: 200409-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= star contains a suid root vulnerability which could potentially grant unauthorized root access to an attacker. Background ========= star is an enhanced tape archiver, much like tar, that is recognized for it's speed as well as it's enhanced mt/rmt support. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 app-arch/star < star-1.5_alpha46 > = star-1.5_alpha46 Description ========== A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact ===== Attackers with local user level access could potentially gain root level access. Workaround ========= There is no known workaround at this time. Resolution ========= All star users should upgrade to the latest version: # emerge sync # emerge -pv "> =app-arch/star-1.5_alpha46" # emerge "> =app-arch/star-1.5_alpha46" References ========= [ 1 ] Star Mailing List Announcement Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200409-11 Concerns? ======== Security is a primary focus of GentooLinux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Sep 07, 2004
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!