openSUSE: Security Advisory for libqb (openSUSE-SU-2019:1752-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

libqb security and bug fix update

1.0.3-10 Avoid deadlock in IPC connections Resolves: rhbz1718773 1.0.3-9 Improve security of SHM files used for IPCs Resolves: rhbz1714854 1.0.3-8 - Add RHEL-8.1 gating tests Resolves: rhbz1682119...

Arbitrary File Overwrite

libqb is vulnerable to arbitrary file overwrite. An attacker is able to overwrite arbitrary files via a symlink attack due to the usage of predictable filenames under /dev/shm and /tmp without OEXCL...

RHEL 8 : libqb (RHSA-2019:3610)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3610 advisory. The libqb packages provide a library with the primary purpose of providing high performance client/server reusable features, such as high performance...

Moderate: Red Hat Security Advisory: libqb security and bug fix update

An update for libqb is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

OPENSUSE-SU-2019:1891-1 Security update for libqb

This update for libqb fixes the following issue: Security issue fixed: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835. This update was imported from the SUSE:SLE-15-SP1:Update update...

Security update for libqb (moderate)

openSUSE Security Update: Security update for libqb Announcement ID: openSUSE-SU-2019:1891-1 Rating: moderate References: 1137835 Cross-References: CVE-2019-12779 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update for...

openSUSE Security Update : libqb (openSUSE-2019-1718)

This update for libqb fixes the following issues : Security issue fixed : - CVE-2019-12779: Fixed an issue where a local attacker could overwrite privileged system files bsc1137835. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security...

openSUSE Security Update : libqb (openSUSE-2019-1752)

This update for libqb fixes the following issue : Security issue fixed: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835. This update was imported from the SUSE:SLE-15-SP1:Update update...

OPENSUSE-SU-2019:1752-1 Security update for libqb

This update for libqb fixes the following issue: Security issue fixed: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835. This update was imported from the SUSE:SLE-15-SP1:Update update...

openSUSE: Security Advisory for libqb (openSUSE-SU-2019:1718-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libqb (moderate)

openSUSE Security Update: Security update for libqb Announcement ID: openSUSE-SU-2019:1752-1 Rating: moderate References: 1137835 Cross-References: CVE-2019-12779 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for libqb fixe...

OPENSUSE-SU-2019:1718-1 Security update for libqb

This update for libqb fixes the following issues: Security issue fixed: - CVE-2019-12779: Fixed an issue where a local attacker could overwrite privileged system files bsc1137835. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libqb (moderate)

openSUSE Security Update: Security update for libqb Announcement ID: openSUSE-SU-2019:1718-1 Rating: moderate References: 1137835 Cross-References: CVE-2019-12779 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for libqb fixe...

SUSE SLED15 / SLES15 Security Update : libqb (SUSE-SU-2019:1812-1)

This update for libqb fixes the following issues : Security issue fixed : CVE-2019-12779: Fixed an issue where a local attacker could overwrite privileged system files bsc1137835. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2019:1812-1 Security update for libqb

This update for libqb fixes the following issues: Security issue fixed: - CVE-2019-12779: Fixed an issue where a local attacker could overwrite privileged system files bsc1137835...

SUSE-SU-2019:1806-1 Security update for libdlm, libqb

This update for libdlm, libqb fixes the following issues: libqb to version 1.0.3: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835. - Enabled use of filesystem sockets for linux fate32341...

SUSE SLED15 / SLES15 Security Update : libqb (SUSE-SU-2019:1791-1)

This update for libqb fixes the following issue : Security issue fixed : CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835. Note that Tenable Network Security has extracted the preceding...

SUSE-SU-2019:1791-1 Security update for libqb

This update for libqb fixes the following issue: Security issue fixed: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835...

CVE-2019-12779

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames under /dev/shm and /tmp without OEXCL...