141 matches found
Rocky Linux 8 [CIQ] Security Update: pesign / pesign-debuginfo / pesign-debugsource (crlsa-2023_1572)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231572 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the CIQ security...
Rocky Linux 9 [CIQ] Security Update: pesign / pesign-debuginfo / pesign-debugsource (crlsa-2023_1067)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231067 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the CIQ security...
Rocky Linux 8.6 [CIQ] Security Update: pesign / pesign-debuginfo / pesign-debugsource (ciqsa-2026_0135)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260135 advisory. This advisory aggregates security fixes for the pesign SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2022-3560. Tenable has extracted the preceding description blo...
[SECURITY] Fedora 42 Update: rust-sigul-pesign-bridge-0.5.0-3.fc42
Drop-in replacement for pesign's daemon that bridges pesign-client requests to a Sigul server...
[SECURITY] Fedora 43 Update: rust-sigul-pesign-bridge-0.5.0-3.fc43
Drop-in replacement for pesign's daemon that bridges pesign-client requests to a Sigul server...
OPENSUSE-SU-2026:20148-1 Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver PMD allows an attacker on a VM in the system to leak information and cause a denial of service on the network interface bsc1254161. Other issues fixed...
SUSE-SU-2026:20218-1 Security update for dpdk
This update for dpdk fixes the following issues: Update to version 24.11.4. Security issues fixed: - CVE-2025-23259: issue in the Poll Mode Driver PMD allows an attacker on a VM in the system to leak information and cause a denial of service on the network interface bsc1254161. Other issues fixed...
MiracleLinux 8 : pesign-0.112-27.el8 (AXSA:2023-5253:04)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5253:04 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the MiracleLin...
MiracleLinux 9 : pesign-115-6.el9.ML.1 (AXSA:2023-5201:02)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5201:02 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the MiracleLin...
MiracleLinux 7 : pesign-0.109-11.el7 (AXSA:2023-5211:03)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5211:03 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the MiracleLin...
EUVD-2022-42926
Malicious code in bioql PyPI...
EUVD-2022-24582
Malicious code in bioql PyPI...
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
...
A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.
...
Linux Distros Unpatched Vulnerability : CVE-2022-1249
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation fro...
TencentOS Server 3: pesign (TSSA-2023:0039)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0039 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
TencentOS Server 2: pesign (TSSA-2023:0033)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0033 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
Alibaba Cloud Linux 3 : 0034: pesign (ALINUX3-SA-2023:0034)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0034 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-3560: A flaw was found in pesign. The pesi...
Linux Distros Unpatched Vulnerability : CVE-2022-3560
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for...
