Fedora Update for systemd FEDORA-2019-18b3a10c7f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for systemd FEDORA-2019-8434288a24

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for systemd FEDORA-2018-c402eea18b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 8 : systemd (RHSA-2019:0990)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0990 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...

(Vulnerability) The vulnerability of the binary system for storing service information via systemd-journald, caused by operations that go beyond the buffer in memory, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the systemd-journald binary storage system of service information arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure...

(Vulnerability) The vulnerability of the binary system for storing service information via systemd-journald arises from operations that go beyond the buffer in memory. This allows an attacker to trigger a service failure or execute code with journald privileges.

The vulnerabilities of the binary system for storing service information, systemd-journald and systemd-journal-remote, are due to operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow an attacker to cause a service failure or execute code with...

EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-1345)

According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864.CVE-2019-3815 Note that Tenable Network Security has extracted the...

EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1344)

According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - systemd: Spoofing of XDGSEAT allows for actions to be checked against 'allowactive' instead of 'allowany'.CVE-2019-3842 Note that Tenable Network...

Fedora 30 : 1:grub2 / systemd (2019-616045ca76)

In systemd: backport of bunch of patches from the v242 release. Most important : - kernel-install will not create the boot loader entry automatically - a memory leak is fixed. In grub2 : - 10linuxbls: don't add --users option to generated menu entries 1693515 - Only set blsdir if...

Fedora 30 : systemd (2019-7322053e74)

Fix hang in flushaccept 1702358 - Fix handling of RUN keys in udevd - Some documentation and minor logging fixes - Backport the addition of RestrictSUIDSGID= from systemd-242 and enable RestrictSUIDSGID=yes for systemd services which use DynamicUser=yes 1703356, CVE-2019-3843. The defaults in...

Fedora 30 : systemd (2019-3fa5db9e19)

Backport more patches : - shared/install: Preserve escape characters for escaped unit names https://github.com/coreos/bugs/issues/2569 - timedate: fix emitted value when ntp client is enabled/disabled 1696586 - udev: run programs in the specified order 1696784 - core: add...

EulerOS 2.0 SP3 : NetworkManager (EulerOS-SA-2019-1322)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Out-of-bounds heap write in systemd-networkd dhcpv6 option handling CVE-2018-15688 Note that Tenable Network Security has extracted the...

[SECURITY] Fedora 30 Update: systemd-241-8.git9ef65cb.fc30

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

CVE-2019-3844

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that wil...

Design/Logic Flaw

It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially...

Code injection

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that wil...

UBUNTU-CVE-2019-3843

It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially...

UBUNTU-CVE-2019-3844

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that wil...

CVE-2019-3844

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that wil...

CVE-2019-3844

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that wil...