NewStart CGSL CORE 5.04 / MAIN 5.04 : dbus Vulnerability (NS-SA-2021-0017)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has dbus packages installed that are affected by a vulnerability: - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 and in some, less common, use...

EulerOS Virtualization 2.9.1 : dbus (EulerOS-SA-2021-1597)

According to the version of the dbus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when...

NewStart CGSL CORE 5.04 / MAIN 5.04 : ibus Vulnerability (NS-SA-2021-0019)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ibus packages installed that are affected by a vulnerability: - A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due ...

EulerOS Virtualization 3.0.6.6 : ibus (EulerOS-SA-2021-1483)

According to the version of the ibus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due t...

NewStart CGSL MAIN 6.02 : dbus Vulnerability (NS-SA-2021-0052)

The remote NewStart CGSL host, running version MAIN 6.02, has dbus packages installed that are affected by a vulnerability: - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon, leaks file descriptors when a message exceeds the per-message...

Huawei EulerOS: Security Advisory for ibus (EulerOS-SA-2021-1483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

virt:rhel and virt-devel:rhel security update

An update is available for libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, netcf, perl-Sys-Virt, seabios, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SUSE SLES15 Security Update : rpmlint (SUSE-SU-2021:0658-1)

This update for rpmlint fixes the following issues : Whitelist PAM modules and DBUS rules for cockpit bsc1169614 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE-SU-2021:0658-1 Security update for rpmlint

This update for rpmlint fixes the following issues: - Whitelist PAM modules and DBUS rules for cockpit bsc1169614...

SUSE SLED15 / SLES15 Security Update : rpmlint (SUSE-SU-2021:0597-1)

This update for rpmlint fixes the following issues : Whitelist PAM modules and DBUS rules for cockpit bsc1169614 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE-SU-2021:0597-1 Security update for rpmlint

This update for rpmlint fixes the following issues: - Whitelist PAM modules and DBUS rules for cockpit bsc1169614...

DEBIAN-CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

Fedora 32 : thunderbird (2021-93149af72b)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-93149af72b advisory. - This update fixes dependency filtering that caused thunderbird to inadvertently lose requires on dbus- glib. ---- Update to latest upstream version. ----...

EulerOS 2.0 SP5 : gdm (EulerOS-SA-2021-1192)

According to the version of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner on...

flatpak: sandbox escape via spawn portal

A flaw was found in Flatpak. The Flatpak portal D-Bus service passes caller-specified environment variables to non-sandboxed processes on the host system, and in particular to the flatpak run command that is used to launch the new sandbox instance. A malicious or compromised Flatpak app could set...

CentOS 8 : dbus (CESA-2020:3014)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3014 advisory. - dbus: denial of service via file descriptor leak CVE-2020-12049 Note that Nessus has not tested for this issue but has instead relied only on the application'...

CentOS 8 : dbus (CESA-2019:3707)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3707 advisory. - dbus: DBusServer DBUSCOOKIESHA1 authentication bypass CVE-2019-12749 Note that Nessus has not tested for this issue but has instead relied only on the...

openSUSE Security Update : rpmlint (openSUSE-2021-45)

This update for rpmlint fixes the following issues : - Whitelist PAM modules and DBUS rules for cockpit bsc1169614 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

OPENSUSE-SU-2021:0045-1 Security update for rpmlint

This update for rpmlint fixes the following issues: - Whitelist PAM modules and DBUS rules for cockpit bsc1169614 This update was imported from the SUSE:SLE-15:Update update project...

Security update for rpmlint (moderate)

openSUSE Security Update: Security update for rpmlint Announcement ID: openSUSE-SU-2021:0045-1 Rating: moderate References: 1169614 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for rpmlint fixes the following issues: -...