SUSE: Security Advisory (SUSE-SU-2022:2658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: keylime-agent / keylime-config / keylime-firewalld / etc (SUSE-SU-2022:2658-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2658-1 advisory. Update to version 6.3.2, including fixes for: - CVE-2022-1053: Fixed Tenant and Verifier might n...

CVE-2022-31250

CVE-2022-31250 affects openSUSE Tumbleweed keylime prior to 6.4.2-1.1, describing a UNIX Symlink Following vulnerability in the post-install/scriptlet that allows local privilege escalation from the keylime user to root. Affected product/version: keylime on openSUSE Tumbleweed (prior to 6.4.2-1.1...

CVE-2022-31250 keylime %post scriplet allows for privilege escalation from keylime user to root

A UNIX Symbolic Link Symlink Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root. This issue affects: openSUSE Tumbleweed keylime versions prior to 6.4.2-1.1...

CVE-2022-31250

A UNIX Symbolic Link Symlink Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root. This issue affects: openSUSE Tumbleweed keylime versions prior to 6.4.2-1.1...