EulerOS Virtualization 2.10.1 : systemd (EulerOS-SA-2022-2067)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too...

PT-2022-24287

Name of the Vulnerable Software and Affected Versions Systemd affected versions not specified Description An off-by-one Error issue was discovered in the format timespan function of time-util.c. An attacker could supply specific values for time and accuracy that lead to a buffer overrun in format...

Debian: Security Advisory (DLA-3063-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3063-1] systemd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3063-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 30, 2022 https://wiki.debian.org/LTS -...

DLA-3063-1 systemd - security update

Bulletin has no description...

Debian DLA-3063-1 : systemd - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3063 advisory. - A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local...

SUSE: Security Advisory (SUSE-SU-2022:2165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2134-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2139-1 Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: Update golang-github-prometheus-alertmanager from version 0.21.0 to version 0.23.0 bsc1196338, jscSLE-24077 - CVE-2022-21698: Denial of service using InstrumentHandlerCounter - Update vendor tarball with...

SUSE-SU-2022:2134-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Adapted to build on Enterprise Linux. - Fix build for RedHat 7 - Require Go = 1.14 also for CentOS - Add support for CentOS - Replace %?systemdrequires with %?systemdordering...

systemd:fuzz-network-parser: Heap-double-free in config_parse_nft_set_context

Detailed Report: https://oss-fuzz.com/testcase?key=5385039841460224 Project: systemd Fuzzing Engine: afl Fuzz Target: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6030000001c0 Crash State: configparsenftsetcontext...

systemd:fuzz-network-parser: Heap-double-free in nft_set_context_free_many

Detailed Report: https://oss-fuzz.com/testcase?key=6326353730863104 Project: systemd Fuzzing Engine: afl Fuzz Target: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x6040000002a0 Crash State: nftsetcontextfreemany networkunref...

systemd:fuzz-network-parser: Heap-double-free in nft_set_context_free_many

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6592078156529664 Project: systemd Fuzzing Engine: honggfuzz Fuzz Target: fuzz-network-parser Job Type: honggfuzzasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address:...

SUSE: Security Advisory (SUSE-SU-2022:1853-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:1853-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2022-23303, CVE-2022-23304: Fixed SAE/EAP-pwd side-channel attacks bsc1194732, bsc1194733 - CVE-2021-0326: Fixed P2P group information processing vulnerability bsc1181777 - Fix systemd device ready dependencies in...

systemd chown_one Privilege Escalation

The vulnerability of the chownone function in the system initialization and systemd service management subsystem is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to increase their privileges...

org.jenkins-ci.main:jenkins-test-harness (1.523), org.jenkins-ci.main:jenkins-war (1.523) +6 more potentially affected by CVE-2019-10403 via org.jenkins-ci.main:jenkins-core (1.523)

org.jenkins-ci.main:jenkins-core MAVEN version 1.523 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.523 - org.jenkins-ci.main:jenkins-war 1.523 -...

org.jenkins-ci.main:jenkins-test-harness (1.523), org.jenkins-ci.main:jenkins-war (1.523) +6 more potentially affected by CVE-2019-10404 via org.jenkins-ci.main:jenkins-core (1.523)

org.jenkins-ci.main:jenkins-core MAVEN version 1.523 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.523 - org.jenkins-ci.main:jenkins-war 1.523 -...

org.jenkins-ci.main:jenkins-test-harness (1.523), org.jenkins-ci.main:jenkins-war (1.523) +6 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.523)

org.jenkins-ci.main:jenkins-core MAVEN version 1.523 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.523 - org.jenkins-ci.main:jenkins-war 1.523 -...

org.jenkins-ci.main:jenkins-test-harness (1.523), org.jenkins-ci.main:jenkins-war (1.523) +6 more potentially affected by CVE-2021-21685 via org.jenkins-ci.main:jenkins-core (1.523)

org.jenkins-ci.main:jenkins-core MAVEN version 1.523 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.523 - org.jenkins-ci.main:jenkins-war 1.523 -...