S-119: apt-listchanges Vulnerability

Tags

apt, security, vulnerability

Special Forums Cybersecurity Security Advisories (RSS) S-119: apt-listchanges Vulnerability

01-17-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

S-119: apt-listchanges Vulnerability

It was discovered that apt-listchanges, a package change history notification tool, used unsafe paths when importing its python libraries. The risk is MEDIUM. This could alllow the execution of arbitrary shell commands if the root user executed the command in a directory which other local users may write to.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Apt-get

Want to install APACHE but it's saying command is not found using centos

2. Red Hat

Yum and apt-get

I know both yum and apt-get could update the package , could advise which one is better in Redhat server ? thanks Login ID ust3 is currently in read-only mode for multiple infractions. Creating new identities to avoid restrictions is not allowed. This thread is closed.

3. AIX

lsmksysb: error 0511-119 & 0511-137 ?

I have 2 workstations that when I do the smitty lsmksysb to verify the tape created by the smitty mksysb, both fail on the same problem: restore: 0511-119 There is a missing header block. restore: 0511-137 Trying to find the next header. Data maybe lost. Starting again at file .... I...

4. UNIX for Advanced & Expert Users

2007/11/09! 03.56.29! E00549! Enq_pty! Tty.c! 119! PID (22597)! Operations ioctl (TCS

helo, i got accessing system from putty. a user has had System Telnet up (for hours at a time) and been running various commands from the CUI menu.(its just client application) The following message appears over and over again in the account log: 2007/11/09! 03.56.29! E00549! Enq_pty! Tty.c!...

5. UNIX for Dummies Questions & Answers

Apt-get install

When I use apt-get install command, for example samba install, does that command then invokes search of entire disk to find samba packet or what?

LEARN ABOUT LINUX

apt

apt(8)							      System Manager's Manual							    apt(8)

NAME

       apt - Advanced Package Tool

SYNOPSIS

       apt

DESCRIPTION

       APT  is	a management system for software packages. For normal day to day package management there are several frontends available, such as
       aptitude(8) for the command line or synaptic(8) for the X Window System. Some options are only implemented in apt-get(8) though.

SEE ALSO

       apt-cache(8), apt-get(8), apt.conf(5), sources.list(5), apt_preferences(5), apt-secure(8)

DIAGNOSTICS

       apt returns zero on normal operation, decimal 100 on error.

BUGS

       This manpage isn't even started.

       See <http://bugs.debian.org/apt>.  If you wish to report a bug in apt, please see /usr/share/doc/debian/bug-reporting.txt  or  the  report-
       bug(1) command.

AUTHOR

       apt was written by the APT team <apt@packages.debian.org>.

Debian GNU/Linux						   16 June 1998 							    apt(8)

Security Advisories (RSS)