Security fix for the ALT Linux 6 package bind version 9.3.4-alt4

July 24, 2007 Dmitry V. Levin 9.3.4-alt4 - Updated to 9.3.4-P1 release fixes CVE-2007-2926...

Security fix for the ALT Linux 9 package clamav version 0.91-alt1

July 13, 2007 Victor Forsyuk 0.91-alt1 - Fixes security bug: https://wwws.clamav.net/bugzilla/showbug.cgi?id=555 CVE-2007-3725. - Use of libcurl removed should improve stability...

Security fix for the ALT Linux 9 package apache2 version 2.2.4-alt31

July 5, 2007 Aleksey Avdeev 2.2.4-alt31 - Using Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch...

Security fix for the ALT Linux 6 package fetchmail version 6.3.6-alt1

Jan. 8, 2007 Michael Shigorin 6.3.6-alt1 - 6.3.6: minor security update CVE-2006-5867, CVE-2006-5974 - replaced Debian menufile with Freedesktop one - spec macro abuse cleanup - NB: added Packager: but I don't use fetchmail for quite a while...

CVE-2006-3123

Multiple integer overflows in the 1 dodecrypt and 2 doencrypt functions in cfsfh.c in cfsd in Matt Blaze Cryptographic File System CFS 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service daemon crash by appending data to a file that is larger than 2 Gb...

Security fix for the ALT Linux 5 package xpdf version 3.01-alt3

Jan. 13, 2006 Victor Forsyuk 3.01-alt3 - Security fix CVE-2005-3191. Apply both recent security patches from Fedora package...

CVE-2001-1494

script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command...

Security fix for the ALT Linux 8 package sudo version 1:1.6.7p5-alt5

June 21, 2005 Dmitry V. Levin 1:1.6.7p5-alt5 - Backported upstream fix so a sudoers entry with sudo ALL no longer overwrites the value of safecmnd CAN-2005-1993...

Security fix for the ALT Linux 6 package cscope version 15.5-alt2

Dec. 1, 2004 Sir Raorn 15.5-alt2 - CAN-2004-0996...

RHEL 2.1 : util-linux (RHSA-2002:137)

The util-linux package shipped with Red Hat Linux Advanced Server contains a locally exploitable vulnerability. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. The 'chfn' utility included in this package allows users...

RHEL 2.1 : util-linux (RHSA-2004:056)

Updated util-linux packages that fix an information leak in the login program are now available. The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. In some situations, the login program could use a pointer that had been...

CVE-2002-0638

setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in...

RAZOR advisory: Linux util-linux chfn local root vulnerability

Linux util-linux chfn local root vulnerability Issue Date: July 29, 2002 Contact: Michal Zalewski CVE: CAN-2002-0638 CERT vulnerability note: http://www.kb.cert.org/vuls/id/405955 the URL should be accessible soon Topic: A locally exploitable vulnerability is present in the util-linux package...

Moderate: Red Hat Security Advisory: : : : Updated util-linux package fixes password locking race

A locally exploitable vulnerability is present in the util-linux package which shipped with Red Hat Linux. Updated 8 July 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The util-linux package contains a large variety of low-level system utilities that are necessary for ...

util-linux package vulnerable to privilege escalation when "ptmptmp" file is not removed properly when using "chfn" utility

Overview The util-linux package contains a race condition vulnerability that can be used to elevate privileges on the system. Description util-linux is shipped with Red Hat Linux and numerous other Linux distributions. It contains a collection of utility programs, such as fstab, mkfs, and chfn. T...

CVE-2001-1147

The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pamlimits...

CVE-2001-1147

CVE-2001-1147 affects util-linux’s /bin/login PAM handling prior to version 2.11, where a static pwent buffer could be rewritten across PAM calls. In non-default configurations (notably with pam_limits), this could leak one user’s credentials to another. The advisories (Mandrake, Red Hat) documen...

CVE-2001-1175

CVE-2001-1175 : In vipw from the util-linux package, before version 2.10, editing /etc/shadow could leave the file world-readable in some cases, enabling local users to more easily perform brute-force password guessing. Supported details in connected docs show Red Hat advisories (RHSA-2001:95, 13...

CVE-2001-1175

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing...

script.command.txt

------------------------------------------------------------- Title: Silly hardlink vulnerability in UNIX 'script' command Linux version maintainer: Andries Brouwer [email protected] Bug found by: Marco van Berkum [email protected] Date: 17-12-2001 Priority: low...