EulerOS 2.0 SP5 : accountsservice (EulerOS-SA-2019-2709)

According to the version of the accountsservice packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in...

EulerOS 2.0 SP3 : accountsservice (EulerOS-SA-2019-2555)

According to the version of the accountsservice packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in...

EulerOS 2.0 SP2 : accountsservice (EulerOS-SA-2019-2443)

According to the version of the accountsservice packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in...

glib2 security, bug fix, and enhancement update

2.56.4-7 - Backport patch for CVE-2019-12450 Resolves: 1722101 2.56.4-5 - Backport glib2 change needed for accountsservice dbus codegen fix Resolves: 1713081 2.56.4-4 - Back GHmac with GnuTLS for FIPS - Resolves: 1630260 2.56.4-3 - Backport per-desktop overrides - Resolves: 1715951 2.56.4-2 - Add...

GNOME security, bug fix, and enhancement update

accountsservice 0.6.50-7 - Dont send change updates for login history changes Resolves: 1713080 appstream-data 8-20190805 - Regenerate the RHEL metadata to include the latest cockpit changes - Resolves: 1673011 8-20190719 - Regenerate the RHEL metadata - Resolves: 1673011 8-20180721 - Regenerate...

SUSE SLED12 / SLES12 Security Update : accountsservice (SUSE-SU-2019:2778-1)

This update for accountsservice fixes the following issues : Security issue fixed : CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699. Non-security issue fixed: Improved wtmp io performance bsc1139487. Note that Tenable...

SUSE-SU-2019:2778-1 Security update for accountsservice

This update for accountsservice fixes the following issues: Security issue fixed: - CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699. Non-security issue fixed: - Improved wtmp io performance bsc1139487...

PT-2020-14763

Name of the Vulnerable Software and Affected Versions AccountsService versions prior to 0.6.55-0ubuntu13.2 Description The issue arises from an Ubuntu-specific modification to AccountsService, which performs unbounded read operations on user-controlled /.pam environment files. This can lead to an...

PT-2020-14762

Name of the Vulnerable Software and Affected Versions AccountsService versions prior to 0.6.55-0ubuntu13.2 Description The issue arises from an Ubuntu-specific modification to AccountsService, where the ruid is improperly dropped, allowing untrusted users to send signals to AccountService. This c...

openSUSE Security Update : accountsservice (openSUSE-2019-902)

This update for accountsservice fixes the following issues : This security issue was fixed : - CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699 Thsese non-security issues were fixed : - Don't abort loading users when an...

SUSE SLED15 / SLES15 Security Update : accountsservice (SUSE-SU-2018:3625-1)

This update for accountsservice fixes the following issues : This security issue was fixed : CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699 Thsese non-security issues were fixed: Don't abort loading users when an...

PackageKit, accountsservice, adwaita, appstream, at, atk, baobab, bolt, brasero, cairo, cheese, clutter, compat, control, dconf, devhelp, ekiga, empathy, eog, evince, evolution, file, flatpak, folks, fontconfig, freetype, fribidi, fwupd, fwupdate, gcr, gdk, gdm, gedit, geoclue2, geocode, gjs, glade, glib, glib2, glibmm24, gnome, gnote, gobject, gom, google, grilo, gsettings, gspell, gssdp, gstreamer1, gtk, gtk3, gtksourceview3, gucharmap, gupnp, gvfs, harfbuzz, json, libappstream, libchamplain, libcroco, libgdata, libgee, libgepub, libgexiv2, libgnomekbd, libgovirt, libgtop2, libgweather, libgxps, libical, libmediaart, libosinfo, libpeas, librsvg2, libsecret, libsoup, libwayland, libwnck3, mozjs52, mutter, nautilus, openchange, osinfo, pango, poppler, python2, rest, rhythmbox, seahorse, shotwell, sushi, totem, upower, vala, valadoc, vino, vte, vte291, wayland, webkitgtk4, xdg, yelp, zenity security update

CentOS Errata and Security Advisory CESA-2018:3140 An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Security update for accountsservice (moderate)

This update for accountsservice fixes the following issues: This security issue was fixed: - CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699 Thsese non-security issues were fixed: - Don't abort loading users when an...

openSUSE Security Update : accountsservice (openSUSE-2018-1380)

This update for accountsservice fixes the following issues : This security issue was fixed : - CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699 Thsese non-security issues were fixed : - Don't abort loading users when an...

openSUSE: Security Advisory for accountsservice (openSUSE-SU-2018:3710-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2018:3625-1 Security update for accountsservice

This update for accountsservice fixes the following issues: This security issue was fixed: - CVE-2018-14036: Prevent directory traversal caused by an insufficient path check in userchangeiconfileauthorizedcb bsc1099699 Thsese non-security issues were fixed: - Don't abort loading users when an...

GNOME security, bug fix, and enhancement update

PackageKit 1.1.10-1.0.1 - remove PackageKit-0.3.8-Fedora-Vendor.conf.patch 1.1.10-1 - New upstream release - Resolves: 1576494 accountsservice 0.6.50-2 - Fix user switching Resolves: 1597350 0.6.50-1 - Update to 0.6.50 Related: 1576538 Related: 1596735 Related: 1602918 0.6.49-1 - Update to 0.6.49...

RHEL 7 : GNOME (RHSA-2018:3140)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3140 advisory. GNOME is the default desktop environment of Red Hat Enterprise Linux. Security Fixes: libsoup: Crash in soupcookiejar.c:getcookies on empty...

accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in userchangeiconfileauthorizedcb in user.c...

AccountsService Path Traversal Vulnerability

AccountsService is a D-Bus service package for accessing user accounts and profile lists developed by Canonical UK and the Ubuntu Foundation. A path traversal vulnerability exists in AccountsService versions prior to 0.6.50, which stems from a failure to adequately validate paths in the...