MGASA-2024-0136 Updated puppet packages fix security vulnerabilities

The updated packages fix missing requires for puppet and fix commands in systemd units...

Updated puppet packages fix security vulnerabilities

The updated packages fix missing requires for puppet and fix commands in systemd units...

PT-2024-41048

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue involves missing requires for puppet and fix commands in systemd units. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

UBUNTU-CVE-2024-26867

In the Linux kernel, the following vulnerability has been resolved: comedi: comedi8255: Correct error in subdevice initialization The refactoring done in commit 5c57b1ccecc7 "comedi: comedi8255: Rework subdevice initialization functions" to the initialization of the io field of struct...

EulerOS 2.0 SP9 : systemd (EulerOS-SA-2024-1520)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2024-1520)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : systemd (EulerOS-SA-2024-1499)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they...

ROS-20240403-04

Vulnerability of onstreamio and dnsstreamcomplete functions of the subsystem of initialization and management of services Systemd is related to not incrementing the reference count for the DnsStream object. Exploitation of the vulnerability could allow a remote intruder to violate the integrity a...

systemd-tmpfiles DoS

The vulnerability of the systemd-tmpfiles file of the Systemd initialization and service management subsystem is related to recursion. This vulnerability occurs when too many nested directories are created in /tmp. Exploiting this vulnerability could allow an attacker to cause a service failure...

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 SSH Backdoor Container Env This is an environme...

ROS-20240403-15

Vulnerability of alloca and strdup functions of Systemd service initialization and management subsystem is related to uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in systemd-tmpfiles of the Systemd...

Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

Red Hat on Friday released an "urgent security alert" warning that two versions of a popular data compression library called XZ Utils previously LZMA Utils have been backdoored with malicious code designed to allow unauthorized remote access. The software supply chain compromise, tracked as...

XZ utils: Backdoor in release tarballs

Background XZ Utils is free general-purpose data compression software with a high compression ratio. Description A backdoor has been discovered in XZ utils. Please review the CVE identifier referenced below for details. Impact Our current understanding of the backdoor is that is does not affect...

CLSA-2024-1711562715 systemd: Fix of CVE-2023-26604

Moved tuxcare patches from 219-78.7.tuxcare.els1 - CVE-2023-26604: use only less as a pager and restrict its functionality e.g stop running external shell unless environment variable SYSTEMDPAGERSECURE is defined...

Moby's external DNS requests from 'internal' networks could lead to data exfiltration

Moby is an open source container framework originally developed by Docker Inc. as Docker. It is a key component of Docker Engine, Docker Desktop, and other distributions of container tooling or runtimes. As a batteries-included container runtime, Moby comes with a built-in networking implementati...

CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17

CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17. A patched version of the package is available...

CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17

CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17. A patched version of the package is available...

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-15

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-15. A patched version of the package is available...

CVE-2023-52613

In the Linux kernel, the following vulnerability has been resolved: drivers/thermal/loongson2thermal: Fix incorrect PTRERR judgment PTRERR returns -ENODEV when thermal-zones are undefined, and we need -ENODEV as the right value for comparison. Otherwise, tz-type is NULL when thermal-zones is...

DEBIAN-CVE-2021-47119

In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4fillsuper Buffer head references must be released before calling killbdev; otherwise the buffer head and its page referenced by bdata will not be freed by killbdev, and subsequently that bh will be...