4645 matches found
SUSE SLED15 / SLES15 Security Update : open-iscsi (SUSE-SU-2021:0127-1)
This update for open-iscsi fixes the following issues : Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc1179908, including : - uip: check for TCP urgent pointer past end of frame - uip: check for u8 overflow when processing TCP options - uip: check for header length underflow during...
SUSE-SU-2021:0127-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: - Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc1179908, including: uip: check for TCP urgent pointer past end of frame uip: check for u8 overflow when processing TCP options uip: check for header length underflow during checksum...
Linux: Get journald.conf (KB)
The file configures various parameters of the systemd journal service. Note: This script only stores information for other Policy Controls. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Systemd init process Confidential Data Access
The vulnerability of the loginctl process in the initialization and service management subsystem of Systemd is related to security configuration errors. Exploiting this vulnerability can allow an attacker to access confidential data...
systemd Input Validation Data Compromise
The vulnerability of the Linux systemd’s initialization and service management subsystems is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
SUSE-SU-2021:0040-1 Security update for tomcat
This update for tomcat fixes the following issues: Security issues fixed: - CVE-2020-13943: Fixed a HTTP/2 Request mix-up bsc1177582. - CVE-2020-17527: Fixed a HTTP/2 request header mix-up bsc1179602. Non-security issue fixed: - Removed tomcat-9.0.init and /usr/lib/tmpfiles.d/tomcat.conf from...
systemd Resource Leak
The vulnerability of the initialization and service management subsystems in Linux’s systemd relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...
container-tools:1.0 bug fix and enhancement update
An update is available for fuse-overlayfs, container-selinux, oci-umount, runc, skopeo, slirp4netns, oci-systemd-hook, containernetworking-plugins, buildah, criu. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
systemd bug fix and enhancement update
The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...
Information Disclosure
jupyterhub-systemdspawner is vulnerable to information disclosure. User API tokens that are issued to single-user servers are specified in the environment of systemd units and are accessible to all users...
CVE-2020-26261 user-readable api tokens in systemd units
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users...
CVE-2020-26261
CVE-2020-26261 affects jupyterhub-systemdspawner. Before v0.15, user API tokens issued to single-user notebook servers were exposed in the environment of systemd units, making them accessible to all users. The fix is in jupyterhub-systemdspawner v0.15. The-littlest-jupyterhub is affected by defau...
CVE-2020-26261
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users...
user-readable api tokens in systemd units for JupyterHub
Impact user API tokens issued to single-user servers are specified in the environment of systemd units, which are accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. Patches Patched in jupyterhub-systemdspawner v0.15 Workarounds No...
GHSA-CG54-GPGR-4RM6 user-readable api tokens in systemd units for JupyterHub
Impact user API tokens issued to single-user servers are specified in the environment of systemd units, which are accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. Patches Patched in jupyterhub-systemdspawner v0.15 Workarounds No...
CVE-2020-26261: Exposure of Resource to Wrong Sphere
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users...
PT-2020-16385
Name of the Vulnerable Software and Affected Versions jupyterhub-systemdspawner versions prior to 0.15 Description jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner, user API tokens issued to single-user servers are...
SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3155-1)
This update for salt fixes the following issues : Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846 Fix disk.blkid to avoid unexpected keyword argument 'pubuser'. bsc1177867 Ensure...
