systemd security update

250-12.0.2.el91.1 - Backport upstream pstore dmesg fix Orabug: 34868110 - Remove upstream references Orabug: 33995357 - Disable unprivileged BPF by default Orabug: 32870980 - udev rules: fix memory hot add and remove Orabug: 31310273 - set 'RemoveIPC=no' in logind.conf as default for OL7.2 Orabug...

GSD-2023-1001555 md/raid1: stop mdx_raid1 thread when raid1 array run failed

md/raid1: stop mdxraid1 thread when raid1 array run failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit...

GSD-2023-1001331 drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()

drivers/md/md-bitmap: check the return value of mdbitmapgetcounter This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001330 md/raid1: stop mdx_raid1 thread when raid1 array run failed

md/raid1: stop mdxraid1 thread when raid1 array run failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001004 md/raid1: stop mdx_raid1 thread when raid1 array run failed

md/raid1: stop mdxraid1 thread when raid1 array run failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000893 md/bitmap: Fix bitmap chunk size overflow issues

md/bitmap: Fix bitmap chunk size overflow issues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.87 by commit...

GSD-2023-1000572 md/raid0, raid10: Don't set discard sectors for request queue

md/raid0, raid10: Don't set discard sectors for request queue This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000571 md/raid1: stop mdx_raid1 thread when raid1 array run failed

md/raid1: stop mdxraid1 thread when raid1 array run failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000431 md/bitmap: Fix bitmap chunk size overflow issues

md/bitmap: Fix bitmap chunk size overflow issues This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-34407 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: A potential issue exists where the md/raid1 thread is not stopped when the raid1 array run fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33649

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A potential issue exists in the Linux Kernel related to md/raid0 and raid10, where discard sectors are not properly set for the request queue. The actual impact and attack plausibility have no...

PT-2023-33648 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential issue exists where the md/raid1 thread is not stopped when the raid1 array run fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2023-34081

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A potential issue exists where the md/raid1 thread is not stopped when the raid1 array run fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-34632

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description A potential issue exists where the md/raid1 thread is not stopped when the raid1 array run fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-33650

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the md bitmap get counter function in the Linux Kernel. It is noted that the return value of this function should be checked. The actual impact and potential for attack...

PT-2023-34082

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the md bitmap get counter function in the Linux Kernel. It is noted that the return value of this function should be checked. The actual impact and potential for attac...

PT-2023-34408

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the md bitmap get counter function in the Linux Kernel. It is noted that the return value of this function should be checked. The actual impact and potential for atta...

CVE-2022-4821

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

Cross site scripting

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

CVE-2022-4821 FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...