[SECURITY] [DLA 3377-1] systemd security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3377-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 31, 2023 https://wiki.debian.org/LTS -...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in systemd (CVE-2022-3821)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in systemd caused by an off-by-one error in formattimespan function of time-util.c. CVE-2022-3821. systemd is included as part of the Base OS used by our service images. Please read the...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in systemd (CVE-2022-2526)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in systemd caused by a use-after-free flaw CVE-2022-2526. systemd is included as part of the Base OS used by our service images. Please read the details for remediation below...

DLA-3377-1 systemd - security update

Bulletin has no description...

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Freedesktop D-Bus is used by IBM Robotic Process Automation as part of container base images CVE-2022-42010, CVE-2022-42011, CVE-2022-42012. GNU Libtasn1 is used by IBM Robotic Process Automation as...

SUSE SLES12 Security Update : systemd (SUSE-SU-2023:1622-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1622-1 advisory. - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in whi...

SUSE-SU-2023:1622-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2023-26604: Fixed a privilege escalation via the less pager. bsc1208958...

SUSE: Security Advisory (SUSE-SU-2023:1622-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-12

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-12. A patched version of the package is available...

Medium: systemd

Issue Overview: A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp. CVE-2021-3997 A vulnerability was found in systemd. This security flaw can cause a local information leak d...

Amazon Linux 2023 : pesign (ALAS2023-2023-118)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-118 advisory. A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to...

Amazon Linux 2023 : systemd, systemd-container, systemd-devel (ALAS2023-2023-025)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-025 advisory. A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp. CVE-2021-3997 A...

CLSA-2023-1679350567 systemd: Fix of CVE-2023-26604

CVE-2023-26604: prevent a priveledge escalation in a pager sub-process - testlogin was updated...

CLSA-2023-1679350239 systemd: Fix of CVE-2023-26604

CVE-2023-26604: prevent a priveledge escalation in a pager sub-process - testlogin was updated...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2023-1542)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: systemd (CVE-2022-4415)

The version of systemd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-4415 advisory. - A vulnerability was found in systemd. This security flaw can cause a local information leak due to...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2023-1567)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: systemd (CVE-2022-3821)

The version of systemd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3821 advisory. - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker...

CBL Mariner 2.0 Security Update: systemd (CVE-2022-45873)

The version of systemd installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-45873 advisory. - systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that ha...

EulerOS 2.0 SP10 : systemd (EulerOS-SA-2023-1542)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the...