what you don't know can hurt you

Debian Security Advisory 4429-1

Debian Security Advisory 4429-1
Posted Apr 10, 2019
Authored by Debian | Site debian.org

Debian Linux Security Advisory 4429-1 - It was discovered that SPIP, a website engine for publishing, did not properly sanitize its user input. This would allow an authenticated user to perform arbitrary command execution.

tags | advisory, arbitrary
systems | linux, debian
MD5 | 32fa8b4a5f010a39a2bfda5a9d308521

Debian Security Advisory 4429-1

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4429-1 security@debian.org
https://www.debian.org/security/ Sebastien Delafond
April 10, 2019 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : spip
Debian Bug : 926764

It was discovered that SPIP, a website engine for publishing, did not
properly sanitize its user input. This would allow an authenticated
user to perform arbitrary command execution.

For the stable distribution (stretch), this problem has been fixed in
version 3.1.4-4~deb9u2.

We recommend that you upgrade your spip packages.

For the detailed security status of spip please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/spip

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEAqSkbVtrXP4xJMh3EL6Jg/PVnWQFAlyt4CQACgkQEL6Jg/PV
nWTphwf+MnTEngHeGlCl5zusQHd1uYBcrdQeujBcUejnIjIYmdp8RHS68JhyAi4n
XyKnVVMP7FCrZ6AmVOkAO03ci/gp4m5S8gS+1o5oEJzgdEQYthzmaxJcDysMIRcQ
qw/vheQeEulozifpM7aM1lFmr1tXoj06iyPp8/4c4zajiLI/dVYI4SI8Ft+Or+UD
TDK2NPZeS4kd6awuzqtTsXV0L3Li1mR6zYW7jAaWTG3OYlzRf4N+5ycCWs91ug01
VBtlI/DrsMhNZzg0MWNONMjdylJts66MEjVyXiDQEw+3gscEh0s+f+Q8z1NmE5kt
eLHakSNknXhpI9jvEq2nlMX/535iBA==fQ0j
-----END PGP SIGNATURE-----

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    34 Files
  • 2
    Jul 2nd
    15 Files
  • 3
    Jul 3rd
    9 Files
  • 4
    Jul 4th
    8 Files
  • 5
    Jul 5th
    2 Files
  • 6
    Jul 6th
    3 Files
  • 7
    Jul 7th
    1 Files
  • 8
    Jul 8th
    15 Files
  • 9
    Jul 9th
    15 Files
  • 10
    Jul 10th
    20 Files
  • 11
    Jul 11th
    17 Files
  • 12
    Jul 12th
    16 Files
  • 13
    Jul 13th
    2 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    20 Files
  • 16
    Jul 16th
    27 Files
  • 17
    Jul 17th
    7 Files
  • 18
    Jul 18th
    5 Files
  • 19
    Jul 19th
    1 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close