ALPINE-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

AZL-6306 CVE-2016-1585 affecting package apparmor for versions less than 2.13-16

In all versions of AppArmor mount rules are accidentally widened when compiled...

Code injection

In all versions of AppArmor mount rules are accidentally widened when compiled...

UBUNTU-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585 AppArmor mount rules grant excessive permissions

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

CVE-2016-1585: The AppArmor policy compiler widens mount rules in all versions when compiled. Vulnerability is discussed in multiple sources; patches exist in AppArmor 2.13-16 (and earlier 2.13-12) with advisories noting updated packages. Debian/Ubuntu references indicate ongoing remediation; imp...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

PT-2019-7813 · Canonical +2 · Apparmor +3

Name of the Vulnerable Software and Affected Versions: AppArmor affected versions not specified Description: The issue affects AppArmor, where mount rules are accidentally widened when compiled. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

SUSE SLED15 / SLES15 Security Update : libvirt (SUSE-SU-2019:0936-1)

This update for libvirt provides the following fixes : Security issue fixed : CVE-2019-3840: Fixed a NULL pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues addressed: apparmor...

SUSE-SU-2019:0936-1 Security update for libvirt

This update for libvirt provides the following fixes: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. Other issues addressed: -...

CVE-2019-11190

The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs such as /bin/su because installexeccreds is called too late in loadelfbinary in fs/binfmtelf.c, and thus the ptracemayaccess check has a race condition when reading /proc/pid/stat...

openSUSE: Security Advisory for samba (openSUSE-SU-2019:1180-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1180-1 Security update for samba

This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share bsc1131060. ldb was updated to version 1.2.4 bsc1125410 bsc1131686: - Out of bound read ...

Security update for samba (important)

openSUSE Security Update: Security update for samba Announcement ID: openSUSE-SU-2019:1180-1 Rating: important References: 1114407 1124223 1125410 1126377 1131060 1131686 Cross-References: CVE-2019-3880 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has 5 fixes ...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : QEMU vulnerabilities (USN-3923-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3923-1 advisory. Michael Hanselmann discovered that QEMU incorrectly handled the Media Transfer Protocol MTP. An attacker inside the guest could u...

USN-3923-1: QEMU vulnerabilities

Michael Hanselmann discovered that QEMU incorrectly handled the Media Transfer Protocol MTP. An attacker inside the guest could use this issue to read or write arbitrary files and cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.10. CVE-2018-16867...

openSUSE Security Update : the Linux Kernel (openSUSE-2019-893)

The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-18710: An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned...

openSUSE Security Update : haproxy (openSUSE-2019-824)

This update for haproxy to version 1.8.14 fixes the following issues : These security issues were fixed : - CVE-2018-14645: A flaw was discovered in the HPACK decoder what caused an out-of-bounds read in hpackvalididx that resulted in a remote crash and denial of service bsc1108683 -...