Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Debianlts Large Esm H800
Debian LTS

Debian Dovecot High Severity Service Disruption Info Leak Flaw DLA-4617-1

Calendar White Jun 05, 2026
Important
Debianlts Large Esm H900
Debian LTS

Debian 11 gsasl Critical DoS Threat Advisory DLA-4618-1 CVE-2026-48829

Calendar White Jun 05, 2026
Critical
Suse Large Esm H900
SuSE

SUSE MozillaThunderbird Important Memory Safety Fix Advisory 2026-2271-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro 6.0 Ignition Key HTTP Transport Loop Patch 2026-21987-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.0 Important Libzypp Libsolv Security Update 2026-21988-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Google-Guest-Agent Important Security Update 2026-21989-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H800
SuSE

SUSE Linux Micro Important Salt Multi-Linux Manager Vuln 2026-21990-1

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro Critical Ignition Patch CVE-2026-33814

Calendar White Jun 05, 2026
Important
Suse Large Esm H900
SuSE

SUSE Linux Micro 6.1 Security Update for libzypp libsolv Key 2026-21992-1

Calendar White Jun 05, 2026
Important
Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98
Ls Advisories Redhat Esm H240
Price Tag 1security advisoryRed Hat Enterprise LinuxMySQL fix

Red Hat: RHSA-2004:569-01 Moderate: MySQL Temporary File Issues

Updated mysql packages that fix various temporary file security issues, as well as a number of bugs, are now available.. --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated mysql packages fix minor security issues and bugs Advisory ID: RHSA-2004:569-01 Issue date: 2004-10-20 Updated on: 2004-10-20 Product: Red Hat Enterprise Linux CVE Names: CAN-2004-0381 CAN-2004-0388 CAN-2004-0457 --------------------------------------------------------------------- 1. Summary: Updated mysql packages that fix various temporary file security issues, as well as a number of bugs, are now available. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, ppc64, s390, s390x, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 3. Problem description: MySQL is a multi-user, multi-threaded SQL database server. This update fixes a number of small bugs, including some potential security problems associated with careless handling of temporary files. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CAN-2004-0381, CAN-2004-0388, and CAN-2004-0457 to these issues. A number of additional security issues that affect mysql have been corrected in the source package. These include CAN-2004-0835, CAN-2004-0836, CAN-2004-0837, and CAN-2004-0957. Red Hat Enterprise Linux 3 does not ship with the mysql-server package and is therefore not affected by these issues. This update also allows 32-bit and 64-bit libraries to be installed concurrently on the same system. All users of mysql should upgrade to these updated packages, which resolve these issues. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download andupdate your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/ 5. Bug IDs fixed (http://bugzilla.redhat.com/ for more info): 58732 - /etc/init.d/mysqld doesn't wait for server to start 108779 - Always timeout error starting MySQL Daemon 117017 - RHEL2.1: removing mysql-server does not remove the mysql user. 115165 - botched string concat ? 113960 - [PATCH] Bug fix + enhancement for mysql_setpermission 112693 - mysqlhotcopy of local Fedora DB broken after upgrade from RH9 102190 - specfile contains improper log details in %files 124352 - Cannot drop databases 119442 - CAN-2004-0381 mysqlbug temporary file vulnerability 130348 - CAN-2004-0457 mysqlhotcopy insecure temporary file vulnerability 128852 - database service should start earlier 129409 - linking with 'mysql --libs' doesent seem to work correctly. 133993 - Service mysqld restart 135387 - CAN-2004-0835 MySQL flaws (CAN-2004-0836, CAN-2004-0837, CAN-2004-0957) 6. RPMs required: Red Hat Enterprise Linux AS version 3: SRPMS: 3fea570d29c4a66fd5578705fd3a5f08 mysql-3.23.58-2.3.src.rpm i386: a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm d8d9f29055d4f9ac2bd0c577cf3c9f1a mysql-bench-3.23.58-2.3.i386.rpm 942437a7d22c99a96ccbc1fe30e01857 mysql-devel-3.23.58-2.3.i386.rpm ia64: 273e64f3bc444f642cc27e149047e88b mysql-3.23.58-2.3.ia64.rpm a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm 035537b43e8860f4713bb8ba2f434376 mysql-bench-3.23.58-2.3.ia64.rpm b10cfeaa55f652962f424036f6dd169b mysql-devel-3.23.58-2.3.ia64.rpm ppc: 22972cd7c174cd85e0c08cf6232d90c2 mysql-3.23.58-2.3.ppc.rpm 3d2f07341d89c5793f56dc9879b4c4e6 mysql-bench-3.23.58-2.3.ppc.rpm 2a3bb5baaecc6f1101d2a9d2c0f0938b mysql-devel-3.23.58-2.3.ppc.rpm ppc64: 552fb60408534cc09ea24f7a141a016b mysql-3.23.58-2.3.ppc64.rpm s390: f47fbbc3e354853485c5424dc22ccc8c mysql-3.23.58-2.3.s390.rpm 973e0714e31de71c0efad0599941bb7e mysql-bench-3.23.58-2.3.s390.rpm 6efe72cbdabdde4e2d3db8c24d5e8e24 mysql-devel-3.23.58-2.3.s390.rpm s390x: e525bd1a40a1157ff99f79006d8447fe mysql-3.23.58-2.3.s390x.rpm f47fbbc3e354853485c5424dc22ccc8c mysql-3.23.58-2.3.s390.rpm 62bc707e3a3a6444e7dad5fd0947249a mysql-bench-3.23.58-2.3.s390x.rpm a07377d3c15bcbf4a978676036a04d76 mysql-devel-3.23.58-2.3.s390x.rpm x86_64: f11ffaa788c38434a7259bccf485b1a0 mysql-3.23.58-2.3.x86_64.rpm a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm 9c20d57a7c724de9cd30a7a8be88fa1e mysql-bench-3.23.58-2.3.x86_64.rpm 14a7a2b00486de17c287bf90010b7377 mysql-devel-3.23.58-2.3.x86_64.rpm Red Hat Desktop version 3: SRPMS: 3fea570d29c4a66fd5578705fd3a5f08 mysql-3.23.58-2.3.src.rpm i386: a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm d8d9f29055d4f9ac2bd0c577cf3c9f1a mysql-bench-3.23.58-2.3.i386.rpm 942437a7d22c99a96ccbc1fe30e01857 mysql-devel-3.23.58-2.3.i386.rpm x86_64: f11ffaa788c38434a7259bccf485b1a0 mysql-3.23.58-2.3.x86_64.rpm a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm 9c20d57a7c724de9cd30a7a8be88fa1e mysql-bench-3.23.58-2.3.x86_64.rpm 14a7a2b00486de17c287bf90010b7377 mysql-devel-3.23.58-2.3.x86_64.rpm Red Hat Enterprise Linux ES version 3: SRPMS: 3fea570d29c4a66fd5578705fd3a5f08 mysql-3.23.58-2.3.src.rpm i386: a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm d8d9f29055d4f9ac2bd0c577cf3c9f1a mysql-bench-3.23.58-2.3.i386.rpm 942437a7d22c99a96ccbc1fe30e01857 mysql-devel-3.23.58-2.3.i386.rpm ia64: 273e64f3bc444f642cc27e149047e88b mysql-3.23.58-2.3.ia64.rpm a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm 035537b43e8860f4713bb8ba2f434376 mysql-bench-3.23.58-2.3.ia64.rpm b10cfeaa55f652962f424036f6dd169b mysql-devel-3.23.58-2.3.ia64.rpm x86_64: f11ffaa788c38434a7259bccf485b1a0 mysql-3.23.58-2.3.x86_64.rpm a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm 9c20d57a7c724de9cd30a7a8be88fa1e mysql-bench-3.23.58-2.3.x86_64.rpm 14a7a2b00486de17c287bf90010b7377 mysql-devel-3.23.58-2.3.x86_64.rpm Red Hat Enterprise Linux WS version 3: SRPMS: 3fea570d29c4a66fd5578705fd3a5f08 mysql-3.23.58-2.3.src.rpm i386: a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm d8d9f29055d4f9ac2bd0c577cf3c9f1a mysql-bench-3.23.58-2.3.i386.rpm 942437a7d22c99a96ccbc1fe30e01857 mysql-devel-3.23.58-2.3.i386.rpm ia64: 273e64f3bc444f642cc27e149047e88b mysql-3.23.58-2.3.ia64.rpm a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm 035537b43e8860f4713bb8ba2f434376 mysql-bench-3.23.58-2.3.ia64.rpm b10cfeaa55f652962f424036f6dd169b mysql-devel-3.23.58-2.3.ia64.rpm x86_64: f11ffaa788c38434a7259bccf485b1a0 mysql-3.23.58-2.3.x86_64.rpm a5291f0504a64c7640818b554b2ec268 mysql-3.23.58-2.3.i386.rpm 9c20d57a7c724de9cd30a7a8be88fa1e mysql-bench-3.23.58-2.3.x86_64.rpm 14a7a2b00486de17c287bf90010b7377 mysql-devel-3.23.58-2.3.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from 7. References: CVE -CVE-2004-0381 CVE -CVE-2004-0388 CVE -CVE-2004-0457 8. Contact: The Red Hat security contact is . More contact details at Copyright 2004 Red Hat, Inc. . Enhanced PostgreSQL components from CentOS address transient file concerns and various software glitches proficiently.. Red Hat Security Update, MySQL Security Fix, Database Update. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Oct 20, 2004 •Important Red Hat
91
Ls Advisories Gentoo Esm H240
Price Tag 1security advisorygentoofile overwrite

Gentoo: GLSA-200410-02 Normal: Netpbm Temp File Issues Exploit

Utilities included in old Netpbm versions are vulnerable to multiple temporary files issues, potentially allowing a local attacker to overwrite files with the rights of the user running the utility. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200410-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Netpbm: Multiple temporary file issues Date: October 04, 2004 Bugs: #65647 ID: 200410-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Utilities included in old Netpbm versions are vulnerable to multiple temporary files issues, potentially allowing a local attacker to overwrite files with the rights of the user running the utility. Background ========= Netpbm is a toolkit containing more than 200 separate utilities for manipulation and conversion of graphic images. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-libs/netpbm = 10.0 Description ========== Utilities contained in the Netpbm package prior to the 9.25 version contain defects in temporary file handling. They create temporary files with predictable names without checking first that the target file doesn't already exist. Impact ===== A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere on the filesystem. When a user or a tool calls one of the affected utilities, this would result in file overwriting with the rights of the user running the utility. Workaround ========= There is no known workaround at thistime. Resolution ========= All Netpbm users should upgrade to an unaffected version: # emerge sync # emerge -pv "> =media-libs/netpbm-10.0" # emerge "> =media-libs/netpbm-10.0" References ========= [ 1 ] CVE-2003-0924 https://www.cve.org/CVERecord?id=CVE-2003-0924 [ 2 ] US-CERT VU#487102 http://www.kb.cert.org/vuls/id/487102 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200410-02 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to This email address is being protected from spambots. You need JavaScript enabled to view it. or alternatively, you may file a bug at https://bugs.gentoo.org/. License ====== Copyright 2004 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/1.0/ . Local intruders could exploit transient file vulnerabilities in Netpbm tools, risking unauthorized file changes. Upgrading is crucial for improved security. Netpbm Exploit, File Overwrite Issue, Gentoo Security. . LinuxSecurity.com Team

Calendar 2 Oct 04, 2004 Gentoo
Banner 2 1028x280 1708121730 1 1771599631
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics

Your message here