4024 matches found
Security update for conmon, fuse-overlayfs, libcontainers-common, podman (moderate)
openSUSE Security Update: Security update for conmon, fuse-overlayfs, libcontainers-common, podman Announcement ID: openSUSE-SU-2020:1552-1 Rating: moderate References: 1162432 1164090 1165738 1171578 1174075 1175821 1175957 Cross-References: CVE-2020-1726 Affected Products: openSUSE Leap 15.1 An...
systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)
...
SUSE-SU-2020:2731-1 Security update for conmon, fuse-overlayfs, libcontainers-common, podman
This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues: podman was updated to v2.0.6 bsc1175821 - install missing systemd units for the new Rest API bsc1175957 and a few man-pages that where missing before - Drop varlink API related bits in favor of the ne...
How to manually collect recovery media logs for Veeam Agent for Linux
Challenge You cannot collect recovery media logs for Veeam Agent for Linux from the repository. In such a case, you can still manually collect recovery media logs from the Linux machine where the bare-metal restore is performed. Cause If the bare-metal restore is not completed, the recovery media...
CVE-2018-15686 affecting package systemd 239-44
CVE-2018-15686 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-16865 affecting package systemd 239-44
CVE-2018-16865 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-21029 affecting package systemd 239-44
CVE-2018-21029 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-15688 affecting package systemd 239-44
CVE-2018-15688 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-16866 affecting package systemd 239-44
CVE-2018-16866 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-15687 affecting package systemd 239-44
CVE-2018-15687 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-16864 affecting package systemd 239-44
CVE-2018-16864 affecting package systemd 239-44. A patched version of the package is available...
Systemd journald Privilege Escalation (CVE-2018-16864)
A privilege escalation vulnerability exists in Systemd-journald. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Vulnerabilities in the initialization and service management of Linux Systemd, related to incorrect default permissions, allow attackers to access confidential data, compromise its integrity, and cause service failures.
Vulnerabilities in the initialization and service management of Linux’s systemd are related to incorrect standard permissions for low-security administrators. Exploiting these vulnerabilities can allow remote attackers to access sensitive data, compromise its integrity, and cause service failures...
SUSE-SU-2020:14454-1 Security update for python-azure-agent
This update for python-azure-agent fixes the following issues: + Properly set the dhcp configuration to push the hostname to the DHCP server bsc1173866 + Do not bring the interface down to push the hostname, just use ifup + Set the hostname using hostnamectl to ensure setting is properly applied...
Out-of-Bounds write in systemd-networkd dhcpv6 option handling
...
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future when the UID/GID will be recycled.
...
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future when the GID will be recycled.
...
An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command a memory leak may occur.
...
An allocation of memory without limits that could result in the stack clashing with another memory region was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
...