exploit the possibilities

Debian Security Advisory 4365-1

Debian Security Advisory 4365-1
Posted Jan 11, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4365-1 - Stephen Roettger discovered a race condition in tmpreaper, a program that cleans up files in directories based on their age, which could result in local privilege escalation.

tags | advisory, local
systems | linux, debian
advisories | CVE-2019-3461
MD5 | b7df79db42b0fc4f6ea9529905cda3e3

Debian Security Advisory 4365-1

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4365-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
January 10, 2019 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : tmpreaper
CVE ID : CVE-2019-3461

Stephen Roettger discovered a race condition in tmpreaper, a program that
cleans up files in directories based on their age, which could result in
local privilege escalation.

For the stable distribution (stretch), this problem has been fixed in
version 1.6.13+nmu1+deb9u1.

We recommend that you upgrade your tmpreaper packages.

For the detailed security status of tmpreaper please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/tmpreaper

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=fAny
-----END PGP SIGNATURE-----

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

January 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jan 1st
    15 Files
  • 2
    Jan 2nd
    15 Files
  • 3
    Jan 3rd
    11 Files
  • 4
    Jan 4th
    1 Files
  • 5
    Jan 5th
    2 Files
  • 6
    Jan 6th
    5 Files
  • 7
    Jan 7th
    24 Files
  • 8
    Jan 8th
    15 Files
  • 9
    Jan 9th
    16 Files
  • 10
    Jan 10th
    22 Files
  • 11
    Jan 11th
    17 Files
  • 12
    Jan 12th
    3 Files
  • 13
    Jan 13th
    2 Files
  • 14
    Jan 14th
    18 Files
  • 15
    Jan 15th
    30 Files
  • 16
    Jan 16th
    0 Files
  • 17
    Jan 17th
    0 Files
  • 18
    Jan 18th
    0 Files
  • 19
    Jan 19th
    0 Files
  • 20
    Jan 20th
    0 Files
  • 21
    Jan 21st
    0 Files
  • 22
    Jan 22nd
    0 Files
  • 23
    Jan 23rd
    0 Files
  • 24
    Jan 24th
    0 Files
  • 25
    Jan 25th
    0 Files
  • 26
    Jan 26th
    0 Files
  • 27
    Jan 27th
    0 Files
  • 28
    Jan 28th
    0 Files
  • 29
    Jan 29th
    0 Files
  • 30
    Jan 30th
    0 Files
  • 31
    Jan 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close