Amazon Linux 2 : pacemaker (ALAS-2021-1583)

The version of pacemaker installed on the remote host is prior to 1.1.23-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1583 advisory. An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use...

[SECURITY] [DLA 2519-1] pacemaker security update

Debian LTS Advisory DLA-2519-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany January 06, 2021 https://wiki.debian.org/LTS Package : pacemaker Version : 1.1.24-0+deb9u1 CVE ID : CVE-2018-16877 CVE-2018-16878 CVE-2020-25654 Several security vulnerabilities were...

Updated libvirt packages fix security vulnerability

A double free memory issue was found to occur in the libvirt API responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with limited ACL permissions cou...

CVE-2020-35616

An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations...

CVE-2020-35616

An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations...

Input validation

An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations...

CVE-2020-35616 [20201107] - Core - Write ACL violation in multiple core views

An issue was discovered in Joomla! 1.7.0 through 3.9.22. Lack of input validation while handling ACL rulesets can cause write ACL violations...

CVE-2020-35616

Joomla! versions 1.7.0 through 3.9.22 are affected by an ACL write-violation vulnerability due to insufficient input validation when processing ACL rulesets. The issue can lead to write ACL violations in multiple core views, with the security entries indicating a high integrity impact (CVE-2020-3...

Joomla! 输入验证错误漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An ACL write conflict vulnerability exists in Joomla! 1.7.0-3.9.22. The...

Oracle Linux 8 : pacemaker (ELSA-2020-5487)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5487 advisory. - Prevent users from bypassing ACLs by using IPC directly CVE-2020-25654 Tenable has extracted the preceding description block directly from the Oracle Linux...

pacemaker security update

CentOS Errata and Security Advisory CESA-2020:5453 An update for pacemaker is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

RHEL 7 : pacemaker (RHSA-2020:5453)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5453 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in th...

RHEL 8 : pacemaker (RHSA-2020:5487)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5487 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in th...

Rocket.Chat: Improper ACL in Message Starring

The vulnerability allowed attackers to manipulate the starred attribute of arbitrary messages by providing an unrelated room ID where they had access. The vulnerability existed due to improper access checks when starring messages...

Moderate: Red Hat Security Advisory: pacemaker security update

An update for pacemaker is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

ALSA-2020:5487 Moderate: pacemaker security update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fixes: pacemaker: ACL restrictions bypass CVE-2020-25654 For more details about the security issues, including the...

Moderate: pacemaker security update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Security Fixes: pacemaker: ACL restrictions bypass CVE-2020-25654 For more details about the security issues, including the...

Moderate: Red Hat Security Advisory: pacemaker security update

An update for pacemaker is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Moderate: Red Hat Security Advisory: pacemaker security update

An update for pacemaker is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2020:5437)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5437-1 advisory. - kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt CVE-2020-14385 -...