July 9, 2019—KB4507456 (Security-only update)

None None...

July 9, 2019—KB4507458 (OS Build 10240.18275)

None None...

CVE-2018-20073

Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem...

June 11, 2019—KB4503293 (OS Build 18362.175)

None None...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service DoS attacks. The vulnerability exists in the function procpidstack of the file fs/proc/base.c when a user able to mount FUSE filesystems creating a process such that when another process attempting to read its command line will be blocked for a long...

EulerOS 2.0 SP2 : php (EulerOS-SA-2019-1332)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented,...

Information Disclosure

Linux kernel is vulnerable to information disclosure. This vulnerability exists in the Linux kernel where filesystems mounted with data=ordered mode. An attacker to read stale data from recently allocated blocks in new files after a system 'reset' by abusing ext4 mechanics of delayed allocation...

April 9, 2019—KB4493458 (Security-only update)

None None...

April 9, 2019—KB4493450 (Security-only update)

None None...

March 12, 2019—KB4489878 (Monthly Rollup)

None None...

March 12, 2019—KB4489891 (Monthly Rollup)

None None...

CVE-2019-9637

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...

CVE-2019-9637

Removed by vendor...

CVE-2019-9637

An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...

Linux: Mounting of hfsplus filesystems

The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS X filesystems. Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is not needed, disable it. SPDX-FileCopyrightText:...

Linux: Mounting of hfs filesystems

The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS X filesystems. Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is not needed, disable it. SPDX-FileCopyrightText: 2019 Greenbone AG Some text...

Linux: Mounting of jffs2 filesystems

The jffs2 journaling flash filesystem 2 filesystem type is a log-structured filesystem used in flash memory devices. Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is not needed, disable it. SPDX-FileCopyrightText: 2019...

Linux: Mounting of vfat filesystems

Older Windows systems and portable USB drives or flash modules use the FAT filesystem. The vfat module supports FAT12, FAT16 and FAT32. Linux kernel modules which implement filesystems that are not needed by the local system should be disabled. Note: This script looks for entry...

Linux: Mounting of udf filesystems

The udf filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is an open vendor filesystem type for data storage on a broad range of media. This filesystem type is necessary to support writing DVDs and newer optical disc formats. Removing...

Linux: Mounting of cramfs filesystems

The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can be used without having to first decompress the image. Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem typ...