Updated openafs packages fix security vulnerability

Openafs packages have been updated to 1.9.1 for various bugfixes, and added a fix for security vulnerability: There exist in the wild AFS3 clients that improperly construct access control lists which are then stored to directories via RXAFSStoreACL opcode 134. These clients add negative access...

GSD-2021-1001759 afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server

afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

UVI-2021-1001759 afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server

afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

openSUSE: Security Advisory for Recommended (openSUSE-SU-2019:2607-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2019-0383 Updated openafs packages fix security vulnerabilities

Update to security-release 1.8.5, adresses: OPENAFS-SA-2019-001: Skip server OUT args on error OPENAFS-SA-2019-002: Zero all server RPC args OPENAFS-SA-2019-003: ubik: Avoid unlocked ubikcurrentTrans deref Update to official version 1.8.4: support Linux-kernel 5.3 Avoid non-dir ENOENT errors in...

Updated openafs packages fix security vulnerabilities

Update to security-release 1.8.5, adresses: OPENAFS-SA-2019-001: Skip server OUT args on error OPENAFS-SA-2019-002: Zero all server RPC args OPENAFS-SA-2019-003: ubik: Avoid unlocked ubikcurrentTrans deref Update to official version 1.8.4: support Linux-kernel 5.3 Avoid non-dir ENOENT errors in...

openSUSE Security Update : openafs (openSUSE-2019-2607)

This update for openafs fixes the following issues : Update to security-release 1.8.5, adresses : - OPENAFS-SA-2019-001: Skip server OUT args on error - OPENAFS-SA-2019-002: Zero all server RPC args - OPENAFS-SA-2019-003: ubik: Avoid unlocked ubikcurrentTrans deref update to official version 1.8....

Recommended update for openafs (moderate)

openSUSE Security Update: Recommended update for openafs Announcement ID: openSUSE-SU-2019:2607-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for openafs fixes the following issues: Update...

OPENSUSE-SU-2019:2607-1 Recommended update for openafs

This update for openafs fixes the following issues: Update to security-release 1.8.5, adresses: OPENAFS-SA-2019-001: Skip server OUT args on error OPENAFS-SA-2019-002: Zero all server RPC args OPENAFS-SA-2019-003: ubik: Avoid unlocked ubikcurrentTrans deref update to official version 1.8.4 suppor...

[SECURITY] [DLA 1982-1] openafs security update

Package : openafs Version : 1.6.9-2+deb8u9 CVE ID : CVE-2019-18601 CVE-2019-18602 CVE-2019-18603 Debian Bug : 943587 Several security vulnerabilities were discovered in OpenAFS, a distributed file system. CVE-2019-18601 OpenAFS is prone to denial of service from unserialized data access because...

Debian DLA-1982-1 : openafs security update

Several security vulnerabilities were discovered in OpenAFS, a distributed file system. CVE-2019-18601 OpenAFS is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...

Debian: Security Advisory (DLA-1982-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-1982-1 openafs - security update

Bulletin has no description...

OpenAFS Information Disclosure Vulnerability (CNVD-2019-43377)

OpenAFS is a set of open source distributed file system , allowing systems to share files and resources through the local area and wide area network . An information disclosure vulnerability exists in OpenAFS. The vulnerability arises from an uninitialized scalar being sent over the network to a...

OpenAFS Denial of Service Vulnerability (CNVD-2019-43378)

OpenAFS is a set of open source distributed file system , allowing systems to share files and resources through the local area and wide area network . A denial of service vulnerability exists in OpenAFS. An attacker could exploit this vulnerability by making a series of VOTEDebug RPC calls to cau...

OpenAFS Information Disclosure Vulnerability (CNVD-2019-43376)

OpenAFS is a set of open source distributed file system , allowing systems to share files and resources through the local area and wide area network . OpenAFS is vulnerable to an information disclosure vulnerability under certain error conditions. The vulnerability arises from uninitialized RPC...

CVE-2019-18603

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer...

CVE-2019-18602

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to an information disclosure vulnerability because uninitialized scalars are sent over the network to a peer...

CVE-2019-18603

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to information leakage upon certain error conditions because uninitialized RPC output variables are sent over the network to a peer...

CVE-2019-18601

OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTEDebug RPC calls to crash a database server within the SVOTEDebug RPC handler...