Fedora 42 : rust-zincati (2025-19fabb2ca6)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-19fabb2ca6 advisory. New upstream release v0.0.30 see: https://github.com/coreos/zincati/releases/tag/v0.0.30 Tenable has extracted the preceding description block...

Fedora: Security Advisory (FEDORA-2025-19fabb2ca6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-cc269f80fa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : rust-zincati (2025-cc269f80fa)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cc269f80fa advisory. New upstream release v0.0.30 see: https://github.com/coreos/zincati/releases/tag/v0.0.30 ---- Backport polkit rules patch for CVE-2025-27512 -...

CVE-2025-27512

creationtimestamp| type| source ---|---|--- 2025-03-17 17:28:05+00:00| published-proof-of-concept| https://t.me/cvedetector/20474 2025-03-17 17:45:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lklphu7xkg2j 2025-08-12 13:33:28+00:00| seen| MISP/02fb130c-7874-4693-9b66-81ed91a2e9...

CVE-2025-27512

Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the zincati system user to use the actions org.projectatomic.rpmostree1.deploy to deploy updates to the system and org.projectatomic.rpmostree1.finalize-deployment to reboot the system into the...

CVE-2025-27512

CVE-2025-27512 affects Zincati’s polkit rule for Fedora CoreOS. A logic error in Zincati v0.0.24–v0.0.29 broadens access to the actions org.projectatomic.rpmostree1.deploy and org.projectatomic.rpmostree1.finalize-deployment to any unprivileged user with system D-Bus access, allowing deployment o...

CVE-2025-27512 Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods

Zincati is an auto-update agent for Fedora CoreOS hosts. Zincati ships a polkit rule which allows the zincati system user to use the actions org.projectatomic.rpmostree1.deploy to deploy updates to the system and org.projectatomic.rpmostree1.finalize-deployment to reboot the system into the...