S-119: apt-listchanges Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-119: apt-listchanges Vulnerability
# 1  
Old 01-17-2008
S-119: apt-listchanges Vulnerability

It was discovered that apt-listchanges, a package change history notification tool, used unsafe paths when importing its python libraries. The risk is MEDIUM. This could alllow the execution of arbitrary shell commands if the root user executed the command in a directory which other local users may write to.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Apt-get

Want to install APACHE but it's saying command is not found using centos (4 Replies)
Discussion started by: zbest1966
4 Replies

2. Red Hat

Yum and apt-get

I know both yum and apt-get could update the package , could advise which one is better in Redhat server ? thanks Login ID ust3 is currently in read-only mode for multiple infractions. Creating new identities to avoid restrictions is not allowed. This thread is closed. (1 Reply)
Discussion started by: ust03
1 Replies

3. AIX

lsmksysb: error 0511-119 & 0511-137 ?

I have 2 workstations that when I do the smitty lsmksysb to verify the tape created by the smitty mksysb, both fail on the same problem: restore: 0511-119 There is a missing header block. restore: 0511-137 Trying to find the next header. Data maybe lost. Starting again at file .... I... (3 Replies)
Discussion started by: Browser_ice
3 Replies

4. UNIX for Advanced & Expert Users

2007/11/09! 03.56.29! E00549! Enq_pty! Tty.c! 119! PID (22597)! Operations ioctl (TCS

helo, i got accessing system from putty. a user has had System Telnet up (for hours at a time) and been running various commands from the CUI menu.(its just client application) The following message appears over and over again in the account log: 2007/11/09! 03.56.29! E00549! Enq_pty! Tty.c!... (0 Replies)
Discussion started by: amitpansuria
0 Replies

5. UNIX for Dummies Questions & Answers

Apt-get install

When I use apt-get install command, for example samba install, does that command then invokes search of entire disk to find samba packet or what? (1 Reply)
Discussion started by: salvor_hardin
1 Replies
Login or Register to Ask a Question
APT-CUDF-GET(8) 						    DOSE Tools							   APT-CUDF-GET(8)

NAME
apt-cudf-get - wrapper for calling apt-get with external solvers SYNOPSIS
apt-cudf-get [arguments] DESCRIPTION
apt-cudf-get is a wrapper that allows to invoke apt-get with external solvers while ignoring apt's pinning. All options are passed on to apt-get. Normally, apt uses so-called pinning to select a candidate version of a package in case there are several versions available. This also holds when calling apt-get with external solvers. However, when it is not possible to find a solution under this constraint, it may be useful to relax pinning and to allow the external solver to choose among all available versions of packages in order to satisfy dependencies, not only those that are selected by the pinning. This is precisely what apt-cudf-get does. Note that, when using an external solver, the proposed solution may contain any available version of the packages that are given as arguments to install on the command line without specifying a version qualifier. For example apt-cudf-get --solver aspcud install ocaml may propose to install any available version of ocaml, while apt-cudf-get --solver aspcud install ocaml=4.01.0 will only propose to install ocaml in version 4.01.0 AUTHOR
Pietro Abate and Roberto Di Cosmo BUGS
Not all types of arguements to apt are correctly treated by this wrapper, in particular not the +pkg and -pkg shorthands for installation and removal requests. SEE ALSO
apt-get(8), apt-cudf(1), apt-cudf.conf(5), update-cudf-solvers(8), README.cudf-solvers <file:///usr/share/doc/apt-cudf/README.cudf-solvers>, README.Debian <file:///usr/share/doc/apt-cudf/README.Debian> dose3 3.0.2 2012-06-25 APT-CUDF-GET(8)