SUSE-SU-2022:0539-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-3997: Fixed an uncontrolled recursion in systemd's systemd-tmpfiles bsc1194178. The following non-security bugs were fixed: - udev/netid: don't generate slot based names if multiple devices might claim the same slot bsc1192637 -...

OPENSUSE-SU-2022:0539-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2021-3997: Fixed an uncontrolled recursion in systemd's systemd-tmpfiles bsc1194178. The following non-security bugs were fixed: - udev/netid: don't generate slot based names if multiple devices might claim the same slot bsc1192637 -...

Security update for systemd (moderate)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2022:0539-1 Rating: moderate References: 1191826 1192637 1194178 Cross-References: CVE-2021-3997 CVSS scores: CVE-2021-3997 SUSE: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15...

systemd:fuzz-netdev-parser: Use-of-uninitialized-value in in_addr_is_null

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=4697395387039744 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

Redis Lua Sandbox Escape

This module exploits CVE-2022-0543, a Lua-based Redis sandbox escape. The vulnerability was introduced by Debian and Ubuntu Redis packages that insufficiently sanitized the Lua environment. The maintainers failed to disable the package interface, allowing attackers to load arbitrary libraries. On...

OPENSUSE-SU-2022:0036-1 Security update for zabbix

This update for zabbix fixes the following issues: - Updated to latest realease 4.0.37. Security issues fixed: - CVE-2022-23134: Fixed possible view of the setup pages by unauthenticated users if config file already exists boo1194681. - CVE-2021-27927: Fixed CSRF protection mechanism inside...

EulerOS Virtualization 3.0.6.6 : systemd (EulerOS-SA-2022-1149)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2022-1098)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for NetworkManager (EulerOS-SA-2022-1107)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2022-1149)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : NetworkManager (EulerOS-SA-2022-1107)

According to the versions of the NetworkManager packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can caus...

EulerOS Virtualization 3.0.6.0 : systemd (EulerOS-SA-2022-1098)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a...

AlmaLinux 8 : systemd (ALSA-2021:2717)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:2717 advisory. - basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a...

Rocky Linux 8 : systemd (RLSA-2021:2717)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:2717 advisory. - basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a...

AlmaLinux 8 : NetworkManager (ALSA-2021:4361)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4361 advisory. - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be...

AlmaLinux 8 : systemd (ALSA-2021:1611)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1611 advisory. - In systemd before v242-rc4, it was discovered that pamsystemd does not properly sanitize the environment before using the XDGSEAT variable. It is possib...

openSUSE: Security Advisory for systemd (openSUSE-SU-2022:0043-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security fix for the ALT Linux 9 package systemd version 1:247.11-alt1

1:247.11-alt1 built Feb. 4, 2022 Alexey Shabalin in task 293887 Jan. 28, 2022 Alexey Shabalin - 247.11 Fixes: CVE-2021-3997 - set default net-naming-scheme=v245...

openSUSE: Security Advisory for fetchmail (openSUSE-SU-2021:1591-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OESA-2022-1503 systemd security update

System and Service Manager. Security Fixes: A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.CVE-2021-3997...