SUSE SLES15 / openSUSE 15 Security Update : keepalived (SUSE-SU-2022:3232-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3232-1 advisory. - CVE-2021-44225: Fix a potential privilege escalation due to insufficient control in the D-Bus policy bsc1193115. Bugfixes: - Set...

SUSE-SU-2022:3235-1 Security update for keepalived

This update for keepalived fixes the following issues: - CVE-2021-44225: Fix a potential privilege escalation due to insufficient control in the D-Bus policy bsc1193115...

SUSE-SU-2022:3234-1 Security update for keepalived

This update for keepalived fixes the following issues: - CVE-2021-44225: Fix a potential privilege escalation due to insufficient control in the D-Bus policy bsc1193115...

libgudev1, systemd security update

CentOS Errata and Security Advisory CESA-2022:6160 An update for systemd is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

cras:cras_fl_media_fuzzer: Use-of-uninitialized-value in _dbus_marshal_write_basic

Detailed Report: https://oss-fuzz.com/testcase?key=6496527626928128 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: crasflmediafuzzer Job Type: libfuzzermsancras Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: dbusmarshalwritebasic dbustypewriterwritebas...

systemd security update

An update is available for systemd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux,...

RLSA-2022:6206 Important: systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...

Important: systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...

SUSE SLES15 / openSUSE 15 Security Update : keepalived (SUSE-SU-2022:2923-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2923-1 advisory. - CVE-2021-44225: Fix a potential privilege escalation due to insufficient control in the D-Bus policy bsc1193115. Tenable has extracted t...

openSUSE: Security Advisory for keepalived (SUSE-SU-2022:2923-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:2923-1 Security update for keepalived

This update for keepalived fixes the following issues: - CVE-2021-44225: Fix a potential privilege escalation due to insufficient control in the D-Bus policy bsc1193115...

Important: Red Hat Security Advisory: systemd security update

An update for systemd is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Uncovering a ChromeOS remote memory corruption vulnerability

Microsoft discovered a memory corruption vulnerability in a ChromeOS component that can be triggered remotely, allowing attackers to perform either a denial-of-service DoS or, in extreme cases, remote code execution RCE. Following our D-Bus blog post that focused on Linux, we searched for similar...

Mageia: Security Advisory (MGASA-2022-0286)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated nvidia390 packages fix security vulnerabilities

Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges,...

PT-2022-37649 · Nvidia · Nvidia Windows Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux versions prior to the fixed version NVIDIA GPU Display Driver for Windows versions prior to the fixed version Description: The issue is related to improper input validation and null-pointer dereferences in...

PT-2022-37647

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux versions prior to the fixed version NVIDIA GPU Display Driver for Windows versions prior to the fixed version Description: The issue is related to improper input validation and null-pointer dereferences in...

PT-2022-37648

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux versions prior to the fixed version NVIDIA GPU Display Driver for Windows versions prior to the fixed version Description: The issue is related to improper input validation and null-pointer dereferences in...

PT-2022-37650

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux versions prior to the fixed version NVIDIA GPU Display Driver for Windows versions prior to the fixed version Description: The issue is related to improper input validation and null-pointer dereferences in...

USN-5169-1: oddjob vulnerability

Matthias Gerstner discovered that there was a race condition in the mkhomedir tool shipped with the oddjob package. An authenticated attacker could use this to setup a symlink attack and change permissions on files on the host filesystem...