Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
99

Slackware: SSA:2003-141-06a Critical: Fix For Sysvinit Quotacheck Issue

An upgraded sysvinit package is available which fixes a problem with the use of quotacheck in /etc/rc.d/rc.M.. [slackware-security] REVISED quotacheck security fix in rc.M (SSA:2003-141-06a) NOTE: The original advisory quotes a section of the Slackware ChangeLog which had inadvertently reversed the options to quotacheck. The correct option to use is 'm'. A corrected advisory follows: An upgraded sysvinit package is available which fixes a problem with the use of quotacheck in /etc/rc.d/rc.M. The original version of rc.M calls quotacheck like this: echo "Checking filesystem quotas: /sbin/quotacheck -avugM" /sbin/quotacheck -avugM The 'M' option is wrong. This causes the filesystem to be remounted, and in the process any mount flags such as nosuid, nodev, noexec, and the like, will be reset. The correct option to use here is 'm', which does not attempt to remount the partition: echo "Checking filesystem quotas: /sbin/quotacheck -avugm" /sbin/quotacheck -avugm We recommend sites using file system quotas upgrade to this new package, or edit /etc/rc.d/rc.M accordingly. Here are the details from the Slackware 9.0 ChangeLog: +--------------------------+ Tue May 20 20:13:09 PDT 2003 patches/packages/sysvinit-2.84-i386-26.tgz: Use option m, not M, for quotacheck. Otherwise, the partition might be remounted losing flags like nosuid,nodev, noexec. Thanks to Jem Berkes for pointing this out. (* Security fix *) +--------------------------+ WHERE TO FIND THE NEW PACKAGES: +-----------------------------+ Updated package for Slackware 9.0: MD5 SIGNATURES: +-------------+ Slackware 9.0 package: 966281dbd4e8cac23264021b9ad48f61 sysvinit-2.84-i386-26.tgz INSTALLATION INSTRUCTIONS: +------------------------+ Upgrade using upgradepkg (as root): upgradepkg sysvinit-2.84-i386-26.tgz Then, you'll need to move the new version of rc.M into place, as rc.M is considered a config file and upgradepkg will not overwrite these by default: mv /etc/rc.d/rc.M.new/etc/rc.d/rc.M +-----+ Slackware Linux Security Team slackware This email address is being protected from spambots. You need JavaScript enabled to view it. . Remediates an exploit in quotacheck featured in rc.M for Slackware, improving the sysvinit suite to fix remount issues.. sysvinit upgrade, slackware security, filesystem quotas, quotacheck fix. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 23, 2003 Critical Slackware
99

Slackware 9.0: SSA:2003-141-06 Critical: Fix For Quotacheck

An upgraded sysvinit package is available which fixes a problem with the use of quotacheck in /etc/rc.d/rc.M.. [slackware-security] quotacheck security fix in rc.M (SSA:2003-141-06) An upgraded sysvinit package is available which fixes a problem with the use of quotacheck in /etc/rc.d/rc.M. The original version of rc.M calls quotacheck like this: echo "Checking filesystem quotas: /sbin/quotacheck -avugM" /sbin/quotacheck -avugM The 'M' option is wrong. This causes the filesystem to be remounted, and in the process any mount flags such as nosuid, nodev, noexec, and the like, will be reset. The correct option to use here is 'm', which does not attempt to remount the partition: echo "Checking filesystem quotas: /sbin/quotacheck -avugm" /sbin/quotacheck -avugm We recommend sites using file system quotas upgrade to this new package, or edit /etc/rc.d/rc.M accordingly. Here are the details from the Slackware 9.0 ChangeLog: +--------------------------+ Tue May 20 20:13:09 PDT 2003 patches/packages/sysvinit-2.84-i386-26.tgz: Use option M, not m, for quotacheck. Otherwise, the partition might be remounted losing flags like nosuid,nodev, noexec. Thanks to Jem Berkes for pointing this out. (* Security fix *) +--------------------------+ WHERE TO FIND THE NEW PACKAGES: +-----------------------------+ Updated package for Slackware 9.0: MD5 SIGNATURES: +-------------+ Slackware 9.0 package: 966281dbd4e8cac23264021b9ad48f61 sysvinit-2.84-i386-26.tgz INSTALLATION INSTRUCTIONS: +------------------------+ Upgrade using upgradepkg (as root): upgradepkg sysvinit-2.84-i386-26.tgz Then, you'll need to move the new version of rc.M into place, as rc.M is considered a config file and upgradepkg will not overwrite these by default: mv /etc/rc.d/rc.M.new /etc/rc.d/rc.M +-----+ Slackware Linux Security Team slackware This email address is being protected from spambots. You need JavaScript enabled to view it. . An upgraded sysvinit package is available to fix quotacheck settings errors, improving system security.. Filesystem Quotas,Sysvinit Fixes, Slackware Updates, Security Management, Configuration Changes. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 May 22, 2003 Critical Slackware
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here