Oracle Linux 9 : pcs (ELSA-2022-10007)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-10007 advisory. 0.11.3-4 - Fixed ruby socket permissions - Resolves: rhbz2116841 0.11.3-3 - Fixed booth ticket mode value case insensitive - Fixed booth sync check whether...

Information Disclosure

rh-mysql80-mysql is vulnerable to information disclosure. The vulnerability exists in the Server: PAM Auth Plugin component, allowing attackers to modify the critical data or all MySQL Server accessible data through the multiple protocols...

AlmaLinux 9 : pcs (ALSA-2022:7935)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7935 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using P...

Rocky Linux 8 : pcs (RLSA-2022:7447)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7447 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using...

org.apache.felix.karaf.shell:org.apache.felix.karaf.shell.ssh (1.0.0), org.apache.felix.karaf:org.apache.felix.karaf.client (1.0.0) +1 more potentially affected by CVE-2022-45047 via org.apache.sshd:sshd-core (0.2.0)

org.apache.sshd:sshd-core MAVEN version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sshd:sshd-core and may be impacted: - org.apache.felix.karaf.shell:org.apache.felix.karaf.shell.ssh 1.0.0 -...

org.apache.sshd:sshd-pam (0.1.0) potentially affected by CVE-2022-45047 via org.apache.sshd:sshd-core (0.1.0)

org.apache.sshd:sshd-core MAVEN version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sshd:sshd-core and may be impacted: - org.apache.sshd:sshd-pam 0.1.0 Source cves: CVE-2022-45047 Source advisory: OSV:GHSA-FHW8-8J55-VWGQ...

org.apache.felix.karaf.shell:org.apache.felix.karaf.shell.ssh (>=1.2.0, <=1.4.0), org.apache.felix.karaf:org.apache.felix.karaf.client (>=1.2.0, <=1.4.0) +5 more potentially affected by CVE-2022-45047 via org.apache.sshd:sshd-core (0.3.0)

org.apache.sshd:sshd-core MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sshd:sshd-core and may be impacted: - org.apache.felix.karaf.shell:org.apache.felix.karaf.shell.ssh =1.2.0, =1.2.0, =1.2.0, =1.0.0-beta5,...

org.apache.camel:camel-example-ssh (>=2.13.0, <=2.13.4), org.apache.camel:camel-example-ssh-security (>=2.13.0, <=2.13.4) +4 more potentially affected by CVE-2022-45047 via org.apache.sshd:sshd-core (0.10.1)

org.apache.sshd:sshd-core MAVEN version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sshd:sshd-core and may be impacted: - org.apache.camel:camel-example-ssh =2.13.0, =2.13.0, =2.13.0, =2.13.4 - org.apache.sshd:apache-sshd 0.10.1 -...

org.apache.sshd:apache-sshd (0.10.0), org.apache.sshd:sshd-pam (0.10.0) +2 more potentially affected by CVE-2022-45047 via org.apache.sshd:sshd-core (0.10.0)

org.apache.sshd:sshd-core MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sshd:sshd-core and may be impacted: - org.apache.sshd:apache-sshd 0.10.0 - org.apache.sshd:sshd-pam 0.10.0 - org.apache.sshd:sshd-sftp 0.10.0 -...

Moderate: Red Hat Security Advisory: pcs security, bug fix, and enhancement update

An update for pcs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

pam bug fix and enhancement update

An update is available for pam. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...

RLSA-2022:7935 Moderate: pcs security, bug fix, and enhancement update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: pcs: improper authentication via PAM CVE-2022-1049 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

pcs security, bug fix, and enhancement update

An update is available for pcs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The pcs packages provide a command-line configuration system for the Pacemaker an...

Moderate: pcs security, bug fix, and enhancement update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: pcs: improper authentication via PAM CVE-2022-1049 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

ALSA-2022:7935 Moderate: pcs security, bug fix, and enhancement update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: pcs: improper authentication via PAM CVE-2022-1049 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

AlmaLinux 8 : pcs (ALSA-2022:7447)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7447 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using P...

Information Disclosure

rh-mysql80-mysql is vulnerable to denial of service. The vulnerability exists in the Server: PAM Auth Plugin component, allowing an attacker to access critical data or complete access to all MySQL Server accessible data...

sssd bug fix and enhancement update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

Moderate: Red Hat Security Advisory: pcs security, bug fix, and enhancement update

An update for pcs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

pam bug fix and enhancement update

An update is available for pam. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.7...