Important Photon OS Security Update - PHSA-2021-0373

Updates of 'nodejs10' packages of Photon OS have been released...

CVE-2018-16864

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate privileges...

Security update for connman (moderate)

openSUSE Security Update: Security update for connman Announcement ID: openSUSE-SU-2021:0452-1 Rating: moderate References: 1181751 Cross-References: CVE-2021-26675 CVE-2021-26676 CVSS scores: CVE-2021-26675 NVD : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-26676 NVD : 6.5...

openSUSE Security Update : connman (openSUSE-2021-416)

This update for connman fixes the following issues : Update to 1.39 boo1181751 : - Fix issue with scanning state synchronization and iwd. - Fix issue with invalid key with 4-way handshake offloading. - Fix issue with DNS proxy length checks to prevent buffer overflow. CVE-2021-26675 - Fix issue...

Security update for connman (moderate)

openSUSE Security Update: Security update for connman Announcement ID: openSUSE-SU-2021:0416-1 Rating: moderate References: 1181751 Cross-References: CVE-2021-26675 CVE-2021-26676 CVSS scores: CVE-2021-26675 NVD : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-26676 NVD : 6.5...

Important Photon OS Security Update - PHSA-2021-0370

Updates of 'bindutils' packages of Photon OS have been released...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2021-1534)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

systemd:fuzz-systemctl-parse-argv: Heap-use-after-free in user_and_machine_equivalent

Detailed Report: https://oss-fuzz.com/testcase?key=5876397522419712 Project: systemd Fuzzing Engine: afl Fuzz Target: fuzz-systemctl-parse-argv Job Type: aflasansystemd Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6040001fdf20 Crash State: userandmachineequivalent...

EulerOS Virtualization for ARM 64 3.0.6.0 : systemd (EulerOS-SA-2021-1534)

According to the version of the systemd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits...

Security Bulletin: IBM MQ Appliance is affected by a systemd vulnerability (CVE-2019-20386)

Summary IBM MQ Appliance has resolved a systemd vulnerability. Vulnerability Details CVEID: CVE-2019-20386 DESCRIPTION: systemd is vulnerable to a denial of service, caused by a memory leak in the buttonopen function in login/logind-button.c. By executing the udevadm trigger command, a local...

openSUSE Security Update : nghttp2 (openSUSE-2021-341)

This update for nghttp2 fixes the following issues : nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of stati...

OPENSUSE-SU-2021:0341-1 Security update for nghttp2

This update for nghttp2 fixes the following issues: nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static...

Security update for nghttp2 (moderate)

openSUSE Security Update: Security update for nghttp2 Announcement ID: openSUSE-SU-2021:0341-1 Rating: moderate References: 1159003 1166481 Cross-References: CVE-2019-18802 CVSS scores: CVE-2019-18802 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-18802 SUSE: 7.5...

PT-2021-28100

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue is related to a heap-double-free crash. Technical details about the crash include the mfree function, parse path argument function, and systemctl parse argv function. Recommendation...

systemd:fuzz-systemctl-parse-argv: Heap-double-free in mfree

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=6252008602468352 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-systemctl-parse-argv Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-double-free Crash Address:...

dbxtool bug fix and enhancement update

An update is available for dbxtool. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dbxtool packages provide a command line utility and a one-shot systemd...

PT-2021-1012

Name of the Vulnerable Software and Affected Versions: dbxtool affected versions not specified Description: The issue concerns the dbxtool packages, which provide a command line utility and a one-shot systemd service for applying UEFI Secure Boot DBX updates. A bug has been identified where dbxto...

Privilege Escalation

snapd is vulnerable to privilege escalation. When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daem...

USN-4728-1 snapd vulnerability

Gilad Reti and Nimrod Stoler discovered that snapd did not correctly specify cgroup delegation when generating systemd service units for various container management snaps. This could allow a local attacker to escalate privileges via access to arbitrary devices of the container host from within a...

UBUNTU-CVE-2020-27352

When generating the systemd service units for the docker snap and other similar snaps, snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and managed by these snaps into the cgroup of the main daemon within the snap itself when reloading syst...