[SECURITY] Fedora 42 Update: rust-sigul-pesign-bridge-0.5.0-3.fc42

Drop-in replacement for pesign's daemon that bridges pesign-client requests to a Sigul server...

[SECURITY] Fedora 43 Update: rust-sigul-pesign-bridge-0.5.0-3.fc43

Drop-in replacement for pesign's daemon that bridges pesign-client requests to a Sigul server...

OPENSUSE-SU-2026:20148-1 Security update for dpdk

This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver PMD allows an attacker on a VM in the system to leak information and cause a denial of service on the network interface bsc1254161. Other issues fixed...

SUSE-SU-2026:20218-1 Security update for dpdk

This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver PMD allows an attacker on a VM in the system to leak information and cause a denial of service on the network interface bsc1254161. Other issues fixed...

MiracleLinux 7 : pesign-0.109-11.el7 (AXSA:2023-5211:03)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5211:03 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the MiracleLin...

MiracleLinux 9 : pesign-115-6.el9.ML.1 (AXSA:2023-5201:02)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5201:02 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the MiracleLin...

MiracleLinux 8 : pesign-0.112-27.el8 (AXSA:2023-5253:04)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5253:04 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the MiracleLin...

EUVD-2022-42926

Malicious code in bioql PyPI...

EUVD-2022-24582

Malicious code in bioql PyPI...

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.

...

A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.

...

Linux Distros Unpatched Vulnerability : CVE-2022-1249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation fro...

TencentOS Server 2: pesign (TSSA-2023:0033)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0033 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 3: pesign (TSSA-2023:0039)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0039 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Alibaba Cloud Linux 3 : 0034: pesign (ALINUX3-SA-2023:0034)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0034 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-3560: A flaw was found in pesign. The pesi...

Linux Distros Unpatched Vulnerability : CVE-2022-3560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for...

CVE-2022-1249 affecting package pesign 0.112-32

CVE-2022-1249 affecting package pesign 0.112-32. No patch is available currently...

CVE-2022-3560 affecting package pesign 0.112-32

CVE-2022-3560 affecting package pesign 0.112-32. No patch is available currently...

RHSA-2023:1829 Red Hat Security Advisory: pesign security update

Bulletin has no description...

RHSA-2023:1572 Red Hat Security Advisory: pesign security update

Bulletin has no description...