Nginx UI 输入验证错误漏洞

Nginx UI is a WebUI for Nginx by Jacky Personal Developer. An input validation error vulnerability exists in versions of Nginx UI prior to 2.0.0-beta.36, which stems from a failure to validate input when configuring logrotate, leading to arbitrary command execution...

RHEL 6 : freeradius (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - freeradius: privilege escalation due to insecure logrotate configuration CVE-2019-10143 - freeradius:...

SUSE-SU-2023:0592-1 Security update for SUSE Manager Server 4.2

This update fixes the following issues: cobbler: - Fix improper authorization bsc1197027, CVE-2022-0860 - Prevent error when starting up logrotate.service bsc1188191 drools: - Deserialization of Untrusted Data: unsafe data deserialization in DroolsStreamUtils.java bsc1204879, CVE-2022-1415...

SUSE-SU-2023:0353-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: dracut-saltboot: - Update to version 0.1.1673279145.e7616bd Add failsafe stop file when salt-minion does not stop bsc1172110 Copy existing wicked config instead of generating new bsc1205599 grafana: - Update to version 8.5.15 jscPED-2617: CVE-2022-39306: Fi...

CentOS 8 : freeradius:3.0 (CESA-2019:3353)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3353 advisory. - freeradius: privilege escalation due to insecure logrotate configuration CVE-2019-10143 Note that Nessus has not tested for this issue but has instead relied...

CentOS 7 : freeradius (RHSA-2020:3984)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3984 advisory. - It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has...

MGASA-2020-0007 Updated freeradius packages fix security vulnerabilities

Updated freeradius packages fix security vulnerabilities: It was discovered freeradius does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a...

RHEL 8 : freeradius:3.0 (RHSA-2019:3353)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3353 advisory. FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service RADIUS server, designed to allow centralized...

Moderate: Red Hat Security Advisory: freeradius:3.0 security and bug fix update

An update for the freeradius:3.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

OPENSUSE-SU-2019:0344-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerability addresed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: - Install logrotate configuration bsc1004220 - Align systemd service file with upstream, run...

openSUSE: Security Advisory for sssd (openSUSE-SU-2019:0344-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for sssd (moderate)

openSUSE Security Update: Security update for sssd Announcement ID: openSUSE-SU-2019:0344-1 Rating: moderate References: 1004220 1087320 1120852 1121759 1125277 Cross-References: CVE-2019-3811 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has four fixes is now...

SUSE-SU-2019:0556-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerabilities addressed: - Fix fallbackhomedir returning '/' for empty home directories CVE-2019-3811 bsc1121759 - Create sockets with right permissions bsc1098377, CVE-2018-10852 Other bug fixes and changes: - Install logrotate...

SUSE-SU-2019:0542-1 Security update for sssd

This update for sssd fixes the following issues: Security vulnerability addresed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other bug fixes and changes: - Install logrotate configuration bsc1004220 - Align systemd service file with upstream, run...

openSUSE Security Update : sssd (openSUSE-2016-1238)

This update for sssd fixes one security issue and three bugs. The following vulnerability was fixed : - CVE-2014-0249: Incorrect expansion of group membership when encountering a non-POSIX group. bsc880245 The following non-security fixes were also included : - Prevent crashes of statically linke...

SUSE SLED12 / SLES12 Security Update : sssd (SUSE-SU-2016:2579-1)

This update for sssd fixes one security issue and three bugs. The following vulnerability was fixed : - CVE-2014-0249: Incorrect expansion of group membership when encountering a non-POSIX group. bsc880245 The following non-security fixes were also included : - Prevent crashes of statically linke...

Fedora 24 : glpi-0.90.3-1.fc24 (2016-9db4add326)

Version 0.90.3 security update to prevent a minor vulnerability fix issues with post-only ticket form See changelog for more details. ---- Version 0.90.2 Include bugfixes and some minor features : An alert in central page when some of your mysql tables are marked as crashed A better flexibility i...

MGASA-2015-0338 Updated lighttpd packages fix CVE-2015-3200 & other bugs

Updated lighttpd packages fix security vulnerability: modauth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character CVE-2015-3200. The...

Updated lighttpd packages fix CVE-2015-3200 & other bugs

Updated lighttpd packages fix security vulnerability: modauth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character CVE-2015-3200. The...

Moderate: Red Hat Bug Fix Advisory: Red Hat Enterprise Linux OpenStack Platform Bug Fix and Enhancement Advisory

Updated packages that resolve various issues are now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly...