[SECURITY] [DLA 3013-1] needrestart security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3013-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta May 18, 2022 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

Ubuntu: Security Advisory (USN-5426-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5137-1 : needrestart - security update

The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5137 advisory. Jakub Wilk discovered a local privilege escalation in needrestart, a utility to check which daemons need to be restarted after library upgrades. Regular expressions t...

CVE-2022-30688

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files...

CVE-2022-30688

CVE-2022-30688 affects needrestart versions 0.8–3.5; the vulnerability arises from unanchored regexes used to detect Perl, Python, and Ruby interpreters, enabling a local user to escalate privileges when needrestart checks interpreter sources. Documented impact is local privilege escalation with ...

CVE-2022-30688

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files...

CVE-2022-30688

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files...

CVE-2022-30688

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files...

[SECURITY] [DSA 5137-1] needrestart security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5137-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 17, 2022 https://www.debian.org/security/faq -...

CVE-2022-30688

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : needrestart vulnerability (USN-5426-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5426-1 advisory. Jakub Wilk discovered that needrestart incorrectly used some regular expressions. A local attacker could possibly use this issue to execut...