Security update for cacti, cacti-spine (moderate)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2020:1060-1 Rating: moderate References: 1115436 1154087 1173090 Cross-References: CVE-2020-11022 CVE-2020-11023 CVE-2020-13625 CVE-2020-14295 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 SUS...

SUSE-SU-2020:1970-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: cobbler: - Calculate relative path for kernel and inited when generating grub entry bsc1170231 Added: fix-grub2-entry-paths.diff - Fix os-release version detection for SUSE Modified: sles15.patch - Jinja2 template library fix bsc1141661 - Removes string...

SUSE SLES12 Security Update : systemd (SUSE-SU-2020:1842-1)

This update for systemd fixes the following issues : CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command bsc1161436. Renamed the persistent link for ATA devices bsc1164538 shared/install: try harder to find enablement symlinks when disabling a unit bsc1157315 tmpfiles:...

systemd:fuzz-network-parser: Index-out-of-bounds in config_parse_ets_prio

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5756666201767936 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-network-parser Job Type: libfuzzerubsansystemd Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

systemd:fuzz-network-parser: Heap-buffer-overflow in config_parse_ets_prio

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6247961001197568 Project: systemd Fuzzing Engine: honggfuzz Fuzz Target: fuzz-network-parser Job Type: honggfuzzasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

SUSE-SU-2020:1842-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command bsc1161436. - Renamed the persistent link for ATA devices bsc1164538 - shared/install: try harder to find enablement symlinks when disabling a unit bsc1157315 -...

SUSE-SU-2020:1828-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command bsc1161436. - Renamed the persistent link for ATA devices bsc1164538 - shared/install: try harder to find enablement symlinks when disabling a unit bsc1157315 -...

Access Control

cri-o is vulnerable to denial of service DoS. The infra container reparented to systemd following OOM Killer killing its conmon...

CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

Security Bulletin: Vulnerability in Ubuntu affects IBM Workload Scheduler 9.5

Summary Vulnerability CVE-2019-14899 has been found in Ubuntu and potentially affects container images of IBM Workload Scheduler 9.5 Vulnerability Details CVEID: CVE-2019-14899 DESCRIPTION: Multiple Linux distributions could allow a remote attacker to bypass security restrictions, caused by issue...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0301

An update of 'systemd', 'openssh', 'expat', 'perl', 'elasticsearch', 'kibana' packages of Photon OS has been released...

Photon OS 1.0: Systemd PHSA-2020-1.0-0301

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0301. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 31 : libvirt (2020-5cd83efda7)

Fix iptables No chain/target/match by that name bz 1813830 - systemd: start libvirtd after firewalld/iptables services bz 1697636 - CVE-2020-12430: memory leak in domstats may allow read-only user to perform DoS attack bz 1828216, bz 1828190 - CVE-2020-10703: Potential denial of service via...

Systemd Input Validation Error Vulnerability

systemd is a Linux-based system and service manager from the German software developers Lennart Poettering. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A security vulnerability exists in systemd v245 a...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...