GSD-2022-1004367 lockdown: Fix kexec lockdown bypass with ima policy

lockdown: Fix kexec lockdown bypass with ima policy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.58 by commit...

GSD-2022-1004145 lockdown: Fix kexec lockdown bypass with ima policy

lockdown: Fix kexec lockdown bypass with ima policy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.15 by commit...

CVE-2022-21505

In the linux kernel, if IMA appraisal is used with the "imaappraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "imaappraise=log" from the boot param when Secure Boot is enabled, but this does not cover case...

Unbreakable Enterprise kernel security update

5.15.0-0.30.20.1 - lockdown: Fix kexec lockdown bypass with ima policy Eric Snowberg Orabug: 34386636 CVE-2022-21505...

Unbreakable Enterprise kernel security update

5.4.17-2136.309.5 - lockdown: Fix kexec lockdown bypass with ima policy Eric Snowberg Orabug: 34386637 CVE-2022-21505...

PT-2022-4442 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's IMA appraisal feature, which can be used to bypass lockdown mechanisms when Secure Boot is disabled or unavailable. This can be achieved by...

pcs security update

0.11.1-10.el90.1 - Updated bundled rubygems: sinatra, rack-protection - Resolves: rhbz2081333 0.11.1-10 - Fixed snmp client - Fixed translating resource roles in colocation constraint - Resolves: rhbz2048640 0.11.1-9 - Fixed cluster destroy in web ui - Fixed covscan issue in web ui - Resolves:...

Malicious code in skale-ima-owasp-helper-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 018f739b731e235df0faf551ead854b13f12d875c77e8919dd85f7799917d65f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6144 Malicious code in skale-ima-owasp-helper-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 018f739b731e235df0faf551ead854b13f12d875c77e8919dd85f7799917d65f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skale-ima-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 335c7d8cbd6dc8873cce6d99da97a8713ac1cbce2d0f87f6b9dade8d9a1cdaf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skale-ima-agent-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd18ac7da9ed610afeed6de1358accc71acf9fb4614fadb4ed04b8994eee17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6143 Malicious code in skale-ima-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 335c7d8cbd6dc8873cce6d99da97a8713ac1cbce2d0f87f6b9dade8d9a1cdaf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6145 Malicious code in skale-ima-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 441405035dfcd9d82a4d8fdc88a69a64c06e8ddc4a2ee0fe1936d0bc6ad2a23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skale-ima-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 441405035dfcd9d82a4d8fdc88a69a64c06e8ddc4a2ee0fe1936d0bc6ad2a23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6141 Malicious code in skale-ima-agent-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd18ac7da9ed610afeed6de1358accc71acf9fb4614fadb4ed04b8994eee17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skale-ima-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73ed8b713e42f9230f126e54e0a97463d4463f5da1e7eaa501ddd66bf512bf53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skale-ima (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 515276aa0020c8770ff1d64ed27bbf967bb9c01b6f4a96b006fa8121cfb71df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6142 Malicious code in skale-ima-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73ed8b713e42f9230f126e54e0a97463d4463f5da1e7eaa501ddd66bf512bf53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6140 Malicious code in skale-ima (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 515276aa0020c8770ff1d64ed27bbf967bb9c01b6f4a96b006fa8121cfb71df5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: ima-evm-utils

An update is available for ima-evm-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...