openSUSE: Security Advisory for libvirt (openSUSE-SU-2019:1288-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1288-1 Security update for libvirt

This update for libvirt provides the following fixes: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues addressed: -...

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:1040-1)

This update for samba fixes the following issues : Security issue fixed : CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. ldb was updated to version 1.2.4 bsc1125410 bsc1131686: Out of bound read in...

SUSE-SU-2019:1040-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. ldb was updated to version 1.2.4 bsc1125410 bsc1131686: - Out of bound read ...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

DEBIAN-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

ALPINE-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

AZL-6306 CVE-2016-1585 affecting package apparmor for versions less than 2.13-16

In all versions of AppArmor mount rules are accidentally widened when compiled...

Code injection

In all versions of AppArmor mount rules are accidentally widened when compiled...

UBUNTU-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585 AppArmor mount rules grant excessive permissions

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

CVE-2016-1585: The AppArmor policy compiler widens mount rules in all versions when compiled. Vulnerability is discussed in multiple sources; patches exist in AppArmor 2.13-16 (and earlier 2.13-12) with advisories noting updated packages. Debian/Ubuntu references indicate ongoing remediation; imp...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

PT-2019-7813 · Canonical +2 · Apparmor +3

Name of the Vulnerable Software and Affected Versions: AppArmor affected versions not specified Description: The issue affects AppArmor, where mount rules are accidentally widened when compiled. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2019:0936-1)

This update for libvirt provides the following fixes : Security issue fixed : CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues addressed: apparmor...

SUSE-SU-2019:0936-1 Security update for libvirt

This update for libvirt provides the following fixes: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues addressed: -...

CVE-2019-11190

The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs such as /bin/su because installexeccreds is called too late in loadelfbinary in fs/binfmtelf.c, and thus the ptracemayaccess check has a race condition when reading /proc/pid/stat...