Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont

This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to version 1.62.0: Release notes:...

EUVD-2012-0457

Malware in sbrugna...

SUSE CVE-2012-0425

LanItems.ycp in savey2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the 1 WIRELESSWPAPASSWORD or 2 WIRELESSCLIENTKEYPASSWORD field...

CVE-2012-0425

LanItems.ycp in savey2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the 1 WIRELESSWPAPASSWORD or 2 WIRELESSCLIENTKEYPASSWORD field...

SuSE YaST模块搜索路径本地特权提升漏洞

SuSE YaST是一款中心管理和安全工具。 SuSE YaST处理搜索路径存在问题，本地攻击者可以利用漏洞提升特权。 SuSE YaST允许本地攻击者提供恶意的yast2模块给Yast2，可导致以ROOT特权执行，要触发此漏洞，需要root在不安全的/tmp之类的目录中执行yast2，因此模块最开始是搜索当前工作目录。 S.u.S.E. YaST2 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x8664 + S.u.S.E. Linux Personal 9.0 +...

SuSE YaST symbolic links problem

Symbolic links problem with YOU/onlineupdate...

SuSEs YaST Online Update - possible symlink attack

author:l0om - l0omatexcluded.org - www.excluded.org date:05.04.2004 product:SuSE 9.0 maybe lower possible symlink attack in SuSEs YOU YaST Online Update in SuSE linux you can use YOU to auto update your system. you can do this by YaST or by hand with the command "onlineupdate". as a normal user y...