4024 matches found
SUSE SLED15 / SLES15 Security Update : open-iscsi (SUSE-SU-2021:0127-1)
This update for open-iscsi fixes the following issues : Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc1179908, including : - uip: check for TCP urgent pointer past end of frame - uip: check for u8 overflow when processing TCP options - uip: check for header length underflow during...
SUSE-SU-2021:0127-1 Security update for open-iscsi
This update for open-iscsi fixes the following issues: - Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc1179908, including: uip: check for TCP urgent pointer past end of frame uip: check for u8 overflow when processing TCP options uip: check for header length underflow during checksum...
Linux: Get journald.conf (KB)
The file configures various parameters of the systemd journal service. Note: This script only stores information for other Policy Controls. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
The vulnerability of the init process of the loginctl subsystem of Systemd, related to security configuration errors, allows a perpetrator to access confidential data.
The vulnerability of the loginctl process in the initialization and service management subsystem of Systemd is related to security configuration errors. Exploiting this vulnerability can allow an attacker to access confidential data...
The vulnerability of the Linux systemd initialization and service management subsystem, related to the lack of a mechanism for input data validation, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Linux systemd’s initialization and service management subsystems is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
SUSE-SU-2021:0040-1 Security update for tomcat
This update for tomcat fixes the following issues: Security issues fixed: - CVE-2020-13943: Fixed a HTTP/2 Request mix-up bsc1177582. - CVE-2020-17527: Fixed a HTTP/2 request header mix-up bsc1179602. Non-security issue fixed: - Removed tomcat-9.0.init and /usr/lib/tmpfiles.d/tomcat.conf from...
The vulnerability of the initialization and service management subsystem in Linux’s systemd lies in the fact that resources are not released after their useful period has ended. This allows a malicious actor to trigger a service failure.
The vulnerability of the initialization and service management subsystems in Linux’s systemd relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...
container-tools:1.0 bug fix and enhancement update
An update is available for fuse-overlayfs, container-selinux, oci-umount, runc, skopeo, slirp4netns, oci-systemd-hook, containernetworking-plugins, buildah, criu. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
systemd bug fix and enhancement update
The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...
Information Disclosure
jupyterhub-systemdspawner is vulnerable to information disclosure. User API tokens that are issued to single-user servers are specified in the environment of systemd units and are accessible to all users...
CVE-2020-26261 user-readable api tokens in systemd units
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users...
CVE-2020-26261
CVE-2020-26261 affects jupyterhub-systemdspawner. Before v0.15, user API tokens issued to single-user notebook servers were exposed in the environment of systemd units, making them accessible to all users. The fix is in jupyterhub-systemdspawner v0.15. The-littlest-jupyterhub is affected by defau...
GHSA-CG54-GPGR-4RM6 user-readable api tokens in systemd units for JupyterHub
Impact user API tokens issued to single-user servers are specified in the environment of systemd units, which are accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. Patches Patched in jupyterhub-systemdspawner v0.15 Workarounds No...
user-readable api tokens in systemd units for JupyterHub
Impact user API tokens issued to single-user servers are specified in the environment of systemd units, which are accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. Patches Patched in jupyterhub-systemdspawner v0.15 Workarounds No...
SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3155-1)
This update for salt fixes the following issues : Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846 Fix disk.blkid to avoid unexpected keyword argument 'pubuser'. bsc1177867 Ensure...
CVE-2019-3843 affecting package systemd 239-44
CVE-2019-3843 affecting package systemd 239-44. A patched version of the package is available...
CVE-2019-6454 affecting package systemd 239-44
CVE-2019-6454 affecting package systemd 239-44. A patched version of the package is available...
CVE-2019-20386 affecting package systemd 239-44
CVE-2019-20386 affecting package systemd 239-44. A patched version of the package is available...