CVE-2014-9770: Undefined Security Weakness

tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under 1 /run/log/journal/%m and 2 /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files...

openSUSE Security Update : systemd (openSUSE-2016-488)

This update for systemd fixes several issues : e5e362a udev: exclude MD from block device ownership event locking 8839413 udev: really exclude device-mapper from block device ownership event locking 66782e6 udev: exclude device-mapper from block device ownership event locking bsc972727 1386f57...

openSUSE Security Update : systemd (openSUSE-2016-487)

This update for systemd fixes several issues. These security issues were fixed : - CVE-2014-9770, CVE-2015-8842: Don't allow read access to journal files to users boo972612 These non-security issues were fixed : - Import commit 523777609a04fe9e590420e89f94ef07e3719baa: e5e362a udev: exclude MD fr...

CVE-2015-8842: Undefined Security Weakness

tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file...

Security update for systemd (important)

This update for systemd fixes several issues. These security issues were fixed: - CVE-2014-9770, CVE-2015-8842: Don't allow read access to journal files to users boo972612 These non-security issues were fixed: - Import commit 523777609a04fe9e590420e89f94ef07e3719baa: e5e362a udev: exclude MD from...

PT-2016-4042

Name of the Vulnerable Software and Affected Versions systemd versions prior to 229 Description The issue concerns weak permissions for the /var/log/journal/%m/system.journal file, allowing local users to read the file and obtain sensitive information. Recommendations For versions prior to 229,...

PT-2016-3516

Name of the Vulnerable Software and Affected Versions systemd versions prior to 214 Description The issue concerns weak permissions for journal files under /run/log/journal/%m and /var/log/journal/%m, allowing local users to obtain sensitive information by reading these files. Recommendations For...

systemd journald information disclosure vulnerability

systemd is a Linux-based system and service manager developed by German software developer Lennart Poettering and others. journald is one of the log files. An information disclosure vulnerability exists in systemd's journald, which can be exploited by a local attacker to obtain sensitive system l...

CVE-2015-5969

The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise SLE 12.1 and openSUSE Leap 42.1...

CVE-2015-5969: Exposure of Sensitive Information to an Unauthorized Actor

The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise SLE 12.1 and openSUSE Leap 42.1...

[SECURITY] Fedora 24 Update: proftpd-1.3.5b-1.fc24

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 23 Update: proftpd-1.3.5b-1.fc23

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 22 Update: proftpd-1.3.5b-1.fc22

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

SUSE-SU-2016:0806-1 Security update for ceph

This update provides Ceph 0.8.11, which fixes the following security issue: - CVE-2015-5245: A CRLF injection vulnerability in the Ceph Object Gateway aka radosgw or RGW could allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket...

PT-2017-7774

Name of the Vulnerable Software and Affected Versions systemd versions prior to v229 Description A flaw in the systemd timers feature caused world-writable suid files to be created, allowing local attackers to escalate their privileges to root. The issue is related to the /src/basic/fs-util.c fil...

Fedora 22 : knot-1.6.6-1.fc22 (2015-b5a8f09e32)

New upstream release: - security fix: out-of-bound read in packet parser for malformed NAPTR record - fix: systemd startup notifications Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

PT-2016-3701

Name of the Vulnerable Software and Affected Versions mysql-community-server versions prior to 5.6.28-2.17.1 mysql-community-server versions prior to 5.6.28-13.1 mariadb versions prior to 10.0.22-2.21.2 mariadb versions prior to 10.0.22-3.1 Description The issue allows local users to discover...

Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20151119)

A flaw was found in the way pacemaker, a cluster resource manager, evaluated added nodes in certain situations. A user with read-only access could potentially assign any other existing roles to themselves and then add privileges to other users as well. CVE-2015-1867 The pacemaker packages have be...

Ubuntu Privilege Escalation

The vulnerability of the systemd daemon in the Ubuntu operating system is related to deficiencies in access control for files. Exploiting this vulnerability can allow a malicious actor, operating locally, to increase their privileges...

[SECURITY] Fedora 22 Update: proftpd-1.3.5a-5.fc22

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...