Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 40 articles for you...
89
security advisoryFedoratemporary fileFedora 38: FEDORA-2024-08bb549a36 Moderate: perl-Data-UUID Symlink Fix
This update fixes CVE-2013-4184 (possible symlink attack due to use of predictable temporary file names). The module no longer saves state in temporary files at all.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-08bb549a36 2024-03-28 01:40:27.506833 -------------------------------------------------------------------------------- Name : perl-Data-UUID Product : Fedora 38 Version : 1.227 Release : 1.fc38 URL : https://metacpan.org/dist/Data-UUID Summary : Globally/Universally Unique Identifiers (GUIDs/UUIDs) Description : This module provides a framework for generating v3 UUIDs (Universally Unique Identifiers, also known as GUIDs (Globally Unique Identifiers). A UUID is 128 bits long, and is guaranteed to be different from all other UUIDs/GUIDs generated until 3400 CE. UUIDs were originally used in the Network Computing System (NCS) and later in the Open Software Foundation's (OSF) Distributed Computing Environment. Currently many different technologies rely on UUIDs to provide unique identity for various software components. Microsoft COM/DCOM for instance, uses GUIDs very extensively to uniquely identify classes, applications and components across network-connected systems. The algorithm for UUID generation, used by this extension, is described in the Internet Draft "UUIDs and GUIDs" by Paul J. Leach and Rich Salz (see RFC 4122). It provides a reasonably efficient and reliable framework for generating UUIDs and supports fairly high allocation rates - 10 million per second per machine - and therefore is suitable for identifying both extremely short-lived and very persistent objects on a given system as well as across the network. This module provides several methods to create a UUID. In all methods, is a UUID and is a free form string. -------------------------------------------------------------------------------- Update Information: This update fixesCVE-2013-4184 (possible symlink attack due to use of predictable temporary file names). The module no longer saves state in temporary files at all. -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 19 2024 Paul Howarth - 1.227-1 - Update to 1.227 - New maintainer, GTERMARS - Add basic GitHub Actions setup for testing - Typo corrections in POD - Eliminated use of state/node files in temp directory (CVE-2013-4184) * Thu Jan 25 2024 Fedora Release Engineering - 1.226-16 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 1.226-15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Tue Aug 29 2023 Jitka Plesnikova - 1.226-14 - Update license to SPDX format * Thu Jul 20 2023 Fedora Release Engineering - 1.226-13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Tue Jul 11 2023 Jitka Plesnikova - 1.226-12 - Perl 5.38 rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-08bb549a36' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 28, 2024
Fedora
203
security advisorytemporary fileattack mitigationMageia 8, 9: MGASA-2023-0297 Moderate: Cadence Temp File Exploit
Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence. (CVE-2023-43782) . MGASA-2023-0297 - Updated cadence packages fix security vulnerabilities Publication date: 22 Oct 2023 URL: https://advisories.mageia.org/MGASA-2023-0297.html Type: security Affected Mageia releases: 8, 9 CVE: CVE-2023-43782, CVE-2023-43783 Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence. (CVE-2023-43782) Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been created by a local adversary before Cadence started. The adversary can leverage this to create or overwrite files via a symlink attack. In some kernel configurations, code injection into the Wine registry is possible. (CVE-2023-43783) References: - https://bugs.mageia.org/show_bug.cgi?id=32361 - https://www.openwall.com/lists/oss-security/2023/10/05/4 - https://www.cve.org/CVERecord?id=CVE-2023-43782 - https://www.cve.org/CVERecord?id=CVE-2023-43783 SRPMS: - 9/core/cadence-0.9.1-7.1.mga9 - 8/core/cadence-0.9.1-3.1.mga8 . MGASA-2023-0298 addresses vulnerabilities in Cadence linked to improper handling of temporary files and risks stemming from local attacks.. Cadence Security, Mageia Update, Temporary File Exploit. . LinuxSecurity.com Team
Oct 22, 2023
Mageia
98
security advisorycritical issuered hatRed Hat RHSA-2001:110-05 Critical: Setserial Insecure Temp File Advisory
The initscript distributed with the setserial package (which is not installed or enabled by default) uses predictable temporary file names, and should not be used. setserial-2.17-4 and earlier versions are affected. . ` --------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Insecure setserial initscript Advisory ID: RHSA-2001:110-05 Issue date: 2001-09-12 Updated on: 2001-09-19 Product: Red Hat Linux Keywords: setserial initscript temporary file Cross references: Obsoletes: --------------------------------------------------------------------- 1. Topic: The initscript distributed with the setserial package (which is not installed or enabled by default) uses predictable temporary file names, and should not be used. setserial-2.17-4 and earlier versions are affected. If you have not recompiled your kernel, this issue does not affect you. To check if you are affected by this issue, use the following command: /bin/ls /etc/rc.d/init.d/serial If this gives the output '/etc/rc.d/init.d/serial' then the initscript has been manually installed. In this case use the following command: /sbin/modprobe -l | grep '/serial.o' If this command gives output, you are affected by this issue. 2. Relevant releases/architectures: 3. Problem description: The setserial package comes with an initscript in the documentation directory. If this initscript is manually copied into the init.d directory structure and enabled, and the kernel is recompiled to have modular serial port support, then the initscript will use a predictable temporary file name. There are a number of other bugs that also prevent the initscript from working correctly in this situation (detailed in bugzilla bug #52862). 4. Solution: Do not use the initscript supplied with setserial. To disable it, use the following command: /sbin/chkconfig serialoff Alternatively, if your system needs manual adjustment of its serial port settings and you wish to have those adjustments re-applied automatically on boot, be sure to use a kernel that has non-modular serial port support, such as those supplied by Red Hat, Inc. 5. Bug IDs fixed ( for more info): 6. RPMs required: 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: Bugzilla bug #52862, at: https://bugzilla.redhat.com/show_bug.cgi Copyright(c) 2000, 2001 Red Hat, Inc. ` . Investigating a critical flaw within the Red Hat setserial initialization script, which raises security issues due to the generation of predictable temporary files.. Red Hat Security, Insecure Script Advisory, Setserial Vulnerability. . Severity: Critical. LinuxSecurity.com Team
Oct 16, 2023
•Critical
Red Hat
91
security advisoryhigh severitygentooGentoo: GLSA-202107-03 High: Libqb Local Code Execution Threat
An insecure temporary file usage has been reported in libqb possibly allowing local code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202107-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: libqb: Insecure temporary file Date: July 03, 2021 Bugs: #699860 ID: 202107-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= An insecure temporary file usage has been reported in libqb possibly allowing local code execution. Background ========= libqb is a library with the primary purpose of providing high-performance, reusable features for client-server architecture, such as logging, tracing, inter-process communication (IPC), and polling. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 sys-cluster/libqb < 1.0.5 > = 1.0.5 Description ========== It was discovered that libqb used predictable filenames (under /dev/shm and /tmp) without O_EXCL. Impact ===== A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application linked against libqb. Workaround ========= There is no known workaround at this time. Resolution ========= All libqb users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =sys-cluster/libqb-1.0.5" References ========= [ 1 ] CVE-2019-12779 https://nvd.nist.gov/vuln/detail/CVE-2019-12779 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo SecurityWebsite: https://security.gentoo.org/glsa/202107-03 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jul 03, 2021
Gentoo
100
security advisoryDoStemporary fileSUSE: 2021:0776-1 Important: s390-tools Temporary File Threat
An update that solves one vulnerability and has two fixes is now available. . SUSE Security Update: Security update for s390-tools ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0776-1 Rating: important References: #1182777 #1182876 #1183041 Cross-References: CVE-2021-25316 CVSS scores: CVE-2021-25316 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H Affected Products: SUSE Linux Enterprise Server 12-SP5 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for s390-tools fixes the following issues: - Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target (bsc#1183041). - CVE-2021-25316: Do not use predictable temporary file names (bsc#1182777). - Made the name of the temporary configuration file in /tmp/ unpredictable (bsc#1182876). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-776=1 Package List: - SUSE Linux Enterprise Server 12-SP5 (s390x): osasnmpd-2.1.0-18.29.1 osasnmpd-debuginfo-2.1.0-18.29.1 s390-tools-2.1.0-18.29.1 s390-tools-debuginfo-2.1.0-18.29.1 s390-tools-debugsource-2.1.0-18.29.1 s390-tools-hmcdrvfs-2.1.0-18.29.1 s390-tools-hmcdrvfs-debuginfo-2.1.0-18.29.1 s390-tools-zdsfs-2.1.0-18.29.1 s390-tools-zdsfs-debuginfo-2.1.0-18.29.1 References: https://www.suse.com/security/cve/CVE-2021-25316.html https://bugzilla.suse.com/1182777 https://bugzilla.suse.com/1182876 https://bugzilla.suse.com/1183041 . An important patch from SUSE for s390-tools resolves CVE-2021-25316, urgently tackling vulnerabilities related to temporary file predictability.. SUSE Enterprise,s390-tools update,security patch. . Severity: Important. LinuxSecurity.com Team
Mar 12, 2021
•Important
SuSE
91
security advisorygentootemporary fileGentoo: GLSA-202011-18 Normal Severity: Apache Ant Symlink Attack Risk
Apache Ant uses various insecure temporary files possibly allowing local code execution.. Linux Security Advisory GLSA 202011-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Apache Ant: Insecure temporary file Date: November 16, 2020 Bugs: #745768 ID: 202011-18 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Apache Ant uses various insecure temporary files possibly allowing local code execution. Background ========= Ant is a Java-based build tool similar to ‘make’ that uses XML configuration files. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-java/ant < 1.10.9 > = 1.10.9 Description ========== A previous fix for a security vulnerability involving insecure temporary files has been found to be incomplete. Impact ===== A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application. Workaround ========= There is no known workaround at this time. Resolution ========= All Apache Ant users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-java/ant-1.10.9" References ========= [ 1 ] CVE-2020-11979 https://nvd.nist.gov/vuln/detail/CVE-2020-11979 [ 2 ] GLSA-202007-34 https://security.gentoo.org/glsa/202007-34 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202011-18 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuringthe confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Nov 15, 2020
Gentoo
202
security advisorymoderateinformation leakopenSUSE: 2020:1022-1 Moderate: Ant Temporary File Issue
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for ant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1022-1 Rating: moderate References: #1171696 Cross-References: CVE-2020-1945 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ant fixes the following issues: - CVE-2020-1945: Fixed an inseure temorary file vulnerability which could have potentially leaked sensitive information (bsc#1171696). This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1022=1 Package List: - openSUSE Leap 15.2 (noarch): ant-1.10.7-lp152.2.3.1 ant-antlr-1.10.7-lp152.2.3.1 ant-apache-bcel-1.10.7-lp152.2.3.1 ant-apache-bsf-1.10.7-lp152.2.3.1 ant-apache-log4j-1.10.7-lp152.2.3.1 ant-apache-oro-1.10.7-lp152.2.3.1 ant-apache-regexp-1.10.7-lp152.2.3.1 ant-apache-resolver-1.10.7-lp152.2.3.1 ant-apache-xalan2-1.10.7-lp152.2.3.1 ant-commons-logging-1.10.7-lp152.2.3.1 ant-commons-net-1.10.7-lp152.2.3.1 ant-imageio-1.10.7-lp152.2.3.1 ant-javamail-1.10.7-lp152.2.3.1 ant-jdepend-1.10.7-lp152.2.3.1 ant-jmf-1.10.7-lp152.2.3.1 ant-jsch-1.10.7-lp152.2.3.1 ant-junit-1.10.7-lp152.2.3.1 ant-junit5-1.10.7-lp152.2.3.1 ant-manual-1.10.7-lp152.2.3.1 ant-scripts-1.10.7-lp152.2.3.1 ant-swing-1.10.7-lp152.2.3.1 ant-testutil-1.10.7-lp152.2.3.1 ant-xz-1.10.7-lp152.2.3.1 References: https://www.suse.com/security/cve/CVE-2020-1945.html https://bugzilla.suse.com/1171696 -- . This patch for Fedora tackles a medium-level security concern related to an exposed session log.. openSUSE Ant Update, Security Patch, Information Leak Fix. . LinuxSecurity.com Team
Jul 20, 2020
OpenSUSE
89
security advisorysecurity issuecriticalFedora 30: 2020-A69F99BC67 Critical: Horde_Form Security Issue
**Horde_Form 2.0.20** * [mjr] SECURITY: Prevent ability to specify temporary filename (CVE-2020-8866, Reported By: Andrea Cardaci working with Trend Micro Zero Day Initiative).. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-a69f99bc67 2020-03-16 22:04:27.466615 --------------------------------------------------------------------------------Name : php-horde-Horde-Form Product : Fedora 30 Version : 2.0.20 Release : 1.fc30 URL : http://pear.horde.org Summary : Horde Form API Description : The Horde_Form package provides form rendering, validation, and other functionality for the Horde Application Framework. --------------------------------------------------------------------------------Update Information: **Horde_Form 2.0.20** * [mjr] SECURITY: Prevent ability to specify temporary filename (CVE-2020-8866, Reported By: Andrea Cardaci working with Trend Micro Zero Day Initiative). --------------------------------------------------------------------------------ChangeLog: * Mon Mar 9 2020 Remi Collet - 2.0.20-1 - update to 2.0.20 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-a69f99bc67' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 16, 2020
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!