83 matches found
Libosinfo: osinfo-install-script option leaks password via command line argument
A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin passwords via command line arguments. This could allow guest passwords to leak to other system users via a process listing...
Low: Red Hat Security Advisory: libosinfo security and bug fix update
An update for libosinfo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
Huawei EulerOS: Security Advisory for libosinfo (EulerOS-SA-2019-1821)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libosinfo (EulerOS-SA-2019-2003)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libosinfo (EulerOS-SA-2019-1952)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libosinfo (EulerOS-SA-2019-1888)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libosinfo (EulerOS-SA-2019-1854)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
osinfo-db and libosinfo security and bug fix update
gnome-boxes 3.28.5-7 - Bump the release to 3.28.5-7 - Related: 1739897 3.28.5-7 - Filter off unsupported architectures - Related: 1739897 3.28.5-6 - Revert 'Add 3D acceleration option powered by virgl' - Related: 1647004 3.28.5-5 - Add 3D acceleration option powered by virgl - Resolves: 1647004...
Information Disclosure
Libosinfo is vulnerable to information disclosure. It is due to the osinfo-install-script option which leaks password via command line argument...
RHEL 8 : osinfo-db and libosinfo (RHSA-2019:3387)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3387 advisory. The osinfo-db package contains a database that provides information about operating systems and hypervisor platforms to facilitate the automated...
Low: Red Hat Security Advisory: osinfo-db and libosinfo security and bug fix update
An update for osinfo-db, osinfo-db-tools, libosinfo, and gnome-boxes is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
Libosinfo: osinfo-install-script option leaks password via command line argument
A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin passwords via command line arguments. This could allow guest passwords to leak to other system users via a process listing...
EulerOS 2.0 SP3 : libosinfo (EulerOS-SA-2019-2003)
According to the version of the libosinfo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin...
EulerOS Virtualization for ARM 64 3.0.2.0 : libosinfo (EulerOS-SA-2019-1952)
According to the version of the libosinfo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations,...
EulerOS 2.0 SP2 : libosinfo (EulerOS-SA-2019-1854)
According to the version of the libosinfo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin...
EulerOS 2.0 SP5 : libosinfo (EulerOS-SA-2019-1888)
According to the version of the libosinfo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin...
SUSE SLES12 Security Update : libosinfo (SUSE-SU-2019:2273-1)
This update for libosinfo fixes the following issues : Security issue fixed : CVE-2019-13313: Fixed a information leak where a local user could gather credentials from the osinfo-install-script bsc1140749. Non-security issues fixed: Fixed OS detection for multiple versions of SLE12, SLE15 and...
EulerOS 2.0 SP8 : libosinfo (EulerOS-SA-2019-1821)
According to the version of the libosinfo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin...
