CVE-2024-34027 f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover reserve,releasecompressblocks w/ cprwsem lock It needs to cover reserve,releasecompressblocks w/ cprwsem lock to avoid racing with checkpoint, otherwise, filesystem metadata including blkaddr in dnode...

[SECURITY] Fedora 36 Update: golang-github-containerd-continuity-0.2.2-4.fc36

A transport-agnostic, filesystem metadata manifest system...

Fedora: Security Advisory for golang-github-containerd-continuity (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-containerd-continuity-0.2.2-2.fc36

A transport-agnostic, filesystem metadata manifest system...

[SECURITY] Fedora 34 Update: golang-github-containerd-continuity-0.2.2-2.fc34

A transport-agnostic, filesystem metadata manifest system...

Privilege Escalation

samba is vulnerable to privilege escalation. The vulnerability exists due to a symlink race to allow filesystem metadata to be accessed in an area of the server file system not exported under the share definition...

USN-3752-3 linux-azure, linux-oem, linux-gcp vulnerabilities

It was discovered that, when attempting to handle an out-of-memory situation, a null pointer dereference could be triggered in the Linux kernel in some circumstances. A local attacker could use this to cause a denial of service system crash. CVE-2018-1000200 Wen Xu discovered that the XFS...

DEBIAN-CVE-2018-12088

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is...

CVE-2018-12088: Improper Input Validation

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is...

PT-2018-11001

Name of the Vulnerable Software and Affected Versions S3QL versions prior to 2.27 Description The issue is related to mishandling of checksumming, allowing replay attacks. An attacker controlling the backend can present old versions of the filesystem metadata database as up-to-date, inject...