Multiple vulnerabilities have been found in zoneminder. This update fixes only a serious file disclosure vulnerability (CVE-2017-5595). The application has been found to suffer from many other problems . Hash: SHA512 Package : zoneminder Version : 1.25.0-4+deb7u2 CVE ID : CVE-2017-5595 Multiple vulnerabilities have been found in zoneminder. This update fixes only a serious file disclosure vulnerability (CVE-2017-5595). The application has been found to suffer from many other problems such as SQL injection vulnerabilities, cross-site scripting issues, cross-site request forgery, session fixation vulnerability. Due to the amount of issues and to the relative invasiveness of the relevant patches, those issues will not be fixed in Wheezy. We thus advise you to restrict access to zoneminder to trusted users only. If you want to review the list of ignored issues, you can check the security tracker: https://security-tracker.debian.org/tracker/source-package/zoneminder We recommend that you upgrade your zoneminder packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS - -- Raphaël Hertzog ◈ Debian Developer Support Debian LTS: https://www.freexian.com/lts/debian/ Learn to master Debian: https://debian-handbook.info/get/ . Various vulnerabilities in zoneminder resolved: limit access, enhance packages for security.. Zoneminder Security Update, File Disclosure, Debian LTS. . Severity: Critical. LinuxSecurity.com Team
Security fix for CVE-2017-5595. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-d5fb74cd2e 2017-02-18 15:07:31.990596 -------------------------------------------------------------------------------- Name : zoneminder Product : Fedora 24 Version : 1.28.1 Release : 8.fc24 URL : https://zoneminder.com/ Summary : A camera monitoring and analysis tool Description : ZoneMinder is a set of applications which is intended to provide a complete solution allowing you to capture, analyse, record and monitor any cameras you have attached to a Linux based machine. It is designed to run on kernels which support the Video For Linux (V4L) interface and has been tested with cameras attached to BTTV cards, various USB cameras and IP network cameras. It is designed to support as many cameras as you can attach to your computer without too much degradation of performance. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-5595 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1419507 - CVE-2017-5595 zoneminder: File disclosure due to unfiltered user-input https://bugzilla.redhat.com/show_bug.cgi?id=1419507 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade zoneminder' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Security fix for CVE-2017-5595. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-2bb174ae3c 2017-02-18 15:07:53.157167 -------------------------------------------------------------------------------- Name : zoneminder Product : Fedora 25 Version : 1.28.1 Release : 8.fc25 URL : https://zoneminder.com/ Summary : A camera monitoring and analysis tool Description : ZoneMinder is a set of applications which is intended to provide a complete solution allowing you to capture, analyse, record and monitor any cameras you have attached to a Linux based machine. It is designed to run on kernels which support the Video For Linux (V4L) interface and has been tested with cameras attached to BTTV cards, various USB cameras and IP network cameras. It is designed to support as many cameras as you can attach to your computer without too much degradation of performance. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2017-5595 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1419507 - CVE-2017-5595 zoneminder: File disclosure due to unfiltered user-input https://bugzilla.redhat.com/show_bug.cgi?id=1419507 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade zoneminder' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Multiple vulnerabilities were discovered in zoneminder, a Linux video camera security and surveillance solution. The Common Vulnerabilities and Exposures project identifies the following problems: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2640-1
Get the latest Linux and open source security news straight to your inbox.