Mageia: Security Advisory (MGASA-2015-0405)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0457)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0310)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5244-1: DBus vulnerability

Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect handling of usernames sharing the same UID. An attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service...

Ubuntu 16.04 ESM : DBus vulnerability (USN-5244-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5244-1 advisory. Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect handling of usernames sharing the same UID. An attacker could...

OESA-2021-1477 keepalived security update

High Availability monitor built upon LVS, VRRP and service pollers. Security Fixes: In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situation...

virt:rhel and virt-devel:rhel security update

An update is available for libguestfs, libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...

AZL-6508 CVE-2021-44225 affecting package keepalived for versions less than 2.2.7-1

In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable writable property...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

Code injection

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

CVE-2021-3939

CVE-2021-3939 affects Ubuntu’s accountsservice. Ubuntu patch 0010-set-language.patch caused the fallback_locale (pointing to static storage) to be freed in user_change_language_authorized_cb, making it reachable via the SetLanguage D-Bus function. The issue is fixed in Ubuntu releases: 0.6.55-0ub...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

dbus bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

dbus bug fix and enhancement update

An update is available for dbus. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

OESA-2021-1404 flatpak security update

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. Security Fixes: In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-...

F5 Networks BIG-IP : D-Bus vulnerability (K16729408)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.4.1 / 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K16729408 advisory. An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon,...

NewStart CGSL CORE 5.05 / MAIN 5.05 : ibus Vulnerability (NS-SA-2021-0155)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has ibus packages installed that are affected by a vulnerability: - A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due ...

NewStart CGSL CORE 5.05 / MAIN 5.05 : dbus Vulnerability (NS-SA-2021-0136)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has dbus packages installed that are affected by a vulnerability: - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon, leaks file descriptors when a message exceeds the...

NewStart CGSL CORE 5.05 / MAIN 5.05 : dbus Vulnerability (NS-SA-2021-0152)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has dbus packages installed that are affected by a vulnerability: - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 and in some, less common, use...