Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 25 Update: Critical Access Control Issues in Trytond-Sale

- security fix for CVE-2016-1241, CVE-2016-1242 - other bug fixes. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-d961441913 2016-09-13 18:03:12.594480 -------------------------------------------------------------------------------- Name : trytond-sale Product : Fedora 25 Version : 4.0.3 Release : 1.fc25 URL : http://www.tryton.org Summary : sale module for Tryton Description : sale module for Tryton application server. -------------------------------------------------------------------------------- Update Information: - security fix for CVE-2016-1241, CVE-2016-1242 - other bug fixes -------------------------------------------------------------------------------- References: [ 1 ] Bug #1374220 - CVE-2016-1242 tryton: admin user able to access all files on system https://bugzilla.redhat.com/show_bug.cgi?id=1374220 [ 2 ] Bug #1374172 - CVE-2016-1241 tryton: password hashes leak to authenticated users https://bugzilla.redhat.com/show_bug.cgi?id=1374172 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update trytond-sale' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Major security patch released for Fedora 25 targeting vulnerabilities in access permissions and credential handling within the trytond-sale component.. Fedora Security Updates, Trytond Sale Fixes, Access Control Issues,Password Management Security. . Severity: Critical. LinuxSecurity.com Team

Sep 13, 2016 •Critical Fedora