15 matches found
Security update for systemd
This update for systemd fixes the following issues: CVE-2025-4598: Race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump bsc1243935. CVE-2023-26604: Privilege escalation via the less pager bsc1208958. CVE-2022-4415: systemd-coredump wa...
systemd security update
252-51.0.2 - coredump: use %d in kernel core pattern - CVE-2025-4598...
DEBIAN-CVE-2024-42081
In the Linux kernel, the following vulnerability has been resolved: drm/xe/xedevcoredump: Check NULL before assignments Assign 'xedevcoredumpsnapshot ' and 'xedevice ' only if 'coredump' is not NULL. v2 - Fix commit messages. v3 - Define variables before code.Ashutosh/Jose v4 - Drop return check...
MGASA-2022-0266 Updated logrotate packages fix security vulnerability
Improved coredump handing for SUID binaries. bsc1192449...
Updated logrotate packages fix security vulnerability
Improved coredump handing for SUID binaries. bsc1192449...
SUSE-SU-2022:2547-2 Security update for logrotate
This update for logrotate fixes the following issues: Security issues fixed: - Improved coredump handing for SUID binaries bsc1192449. Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' bsc1200278, bsc1200802...
SUSE-SU-2022:2547-1 Security update for logrotate
This update for logrotate fixes the following issues: Security issues fixed: - Improved coredump handing for SUID binaries bsc1192449. Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' bsc1200278, bsc1200802...
PT-2022-37499
Name of the Vulnerable Software and Affected Versions logrotate affected versions not specified Description The issue concerns improved coredump handling for SUID binaries. No information is provided about the estimated number of potentially affected devices or real-world incidents where this iss...
PT-2022-37500
Name of the Vulnerable Software and Affected Versions logrotate affected versions not specified Description The issue concerns improved coredump handling for SUID binaries. There is no information provided about the estimated number of potentially affected devices worldwide or details about...
SUSE: Security Advisory (SUSE-SU-2022:2398-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:2398-1 Security update for logrotate
This update for logrotate fixes the following issues: Security issues fixed: - Improved coredump handing for SUID binaries bsc1192449. Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' bsc1200278, bsc1200802...
SUSE-SU-2022:2396-1 Security update for logrotate
This update for logrotate fixes the following issues: Security issues fixed: - CVE-2022-1348: Fixed insecure permissions for state file creation bsc1199652. - Improved coredump handing for SUID binaries bsc1192449. Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword si...
PT-2022-37493
Name of the Vulnerable Software and Affected Versions logrotate affected versions not specified Description The issue concerns improved coredump handling for SUID binaries. There is no information provided about the estimated number of potentially affected devices worldwide or details about...
kernel: A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c allows for a DoS
A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest thre...
PT-2019-2821 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.10 Description: The issue is caused by errors in synchronization when using a shared resource in the Linux kernel's coredump implementation. This allows local users to obtain sensitive information, cause a...