Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
172

Ubuntu 4077-1: Tmpreaper Security Advisory for File Overwrite Issue

tmpreaper could be made to overwrite files as the administrator.. =========================================================================Ubuntu Security Notice USN-4077-1 July 29, 2019 tmpreaper vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: tmpreaper could be made to overwrite files as the administrator. Software Description: - tmpreaper: cleans up files in directories based on their age Details: It was discovered that tmpreaper incorrectly handled certain mount operations. A local attacker could possibly use this issue to create arbitrary files, leading to privilege escalation. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: tmpreaper 1.6.13+nmu1+deb9u1build0.18.04.1 Ubuntu 16.04 LTS: tmpreaper 1.6.13+nmu1+deb9u1build0.16.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4077-1 CVE-2019-3461 Package Information: https://launchpad.net/ubuntu/+source/tmpreaper/1.6.13+nmu1+deb9u1build0.18.04.1 https://launchpad.net/ubuntu/+source/tmpreaper/1.6.13+nmu1+deb9u1build0.16.04.1 . Ubuntu Security Advisory USN-4078-2 highlights vulnerabilities in tmpwatch which could lead to data loss and unauthorized access problems.. tmpreaper security, ubuntu tmpreaper update, file overwrite issue, privilege escalation vulnerability. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jul 29, 2019 Critical Ubuntu
197

Debian 8: DLA-1640-1 Moderate: tmpreaper Race Condition Fix

It was discovered that tmpreaper, a program that cleans up files in directories based on their age, is vulnerable to a race condition. This vulnerability might be exploited by local attackers to perform privilege escalation. . Package : tmpreaper Version : 1.6.13+nmu1+deb8u1 CVE ID : CVE-2019-3461 Debian Bug : 918956 It was discovered that tmpreaper, a program that cleans up files in directories based on their age, is vulnerable to a race condition. This vulnerability might be exploited by local attackers to perform privilege escalation. For Debian 8 "Jessie", this problem has been fixed in version 1.6.13+nmu1+deb8u1. We recommend that you upgrade your tmpreaper packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . tmpreaper release 1.6.13+nmu1+deb8u1 has been modified to address potential privilege elevation vulnerabilities arising from race conditions.. tmpreaper security, Debian update, race condition threat, privilege escalation fix. . LinuxSecurity.com Team

Calendar 2 Jan 24, 2019 Debian LTS
87

Debian: DSA-4365-1 Privilege Escalation in Tmpreaper Security Advisory

Stephen Roettger discovered a race condition in tmpreaper, a program that cleans up files in directories based on their age, which could result in local privilege escalation. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4365-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff January 10, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : tmpreaper CVE ID : CVE-2019-3461 Stephen Roettger discovered a race condition in tmpreaper, a program that cleans up files in directories based on their age, which could result in local privilege escalation. For the stable distribution (stretch), this problem has been fixed in version 1.6.13+nmu1+deb9u1. We recommend that you upgrade your tmpreaper packages. For the detailed security status of tmpreaper please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/tmpreaper Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Uncover tmpreaper's vulnerability that facilitates unauthorized privilege elevation. Necessary updates for Debian stretch.. tmpreaper Security, Debian Advisory, Privilege Escalation, Race Condition, Security Updates. . Severity: Important. LinuxSecurity.com Team

Calendar 2 Jan 10, 2019 Important Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here