Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
172
security advisorydenial of servicesudoUbuntu 22.10: USN-5811-1 Critical: Sudo Denial Of Service
Several security issues were fixed in Sudo.. =========================================================================Ubuntu Security Notice USN-5811-1 January 18, 2023 sudo vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Several security issues were fixed in Sudo. Software Description: - sudo: Provide limited super user privileges to specific users Details: Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoedit command. A local attacker that has permission to use the sudoedit command could possibly use this issue to edit arbitrary files. (CVE-2023-22809) It was discovered that the Protobuf-c library, used by Sudo, incorrectly handled certain arithmetic shifts. An attacker could possibly use this issue to cause Sudo to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-33070) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: sudo 1.9.11p3-1ubuntu1.1 sudo-ldap 1.9.11p3-1ubuntu1.1 Ubuntu 22.04 LTS: sudo 1.9.9-1ubuntu2.2 sudo-ldap 1.9.9-1ubuntu2.2 Ubuntu 20.04 LTS: sudo 1.8.31-1ubuntu1.4 sudo-ldap 1.8.31-1ubuntu1.4 Ubuntu 18.04 LTS: sudo 1.8.21p2-3ubuntu1.5 sudo-ldap 1.8.21p2-3ubuntu1.5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5811-1 CVE-2022-33070, CVE-2023-22809 Package Information: https://launchpad.net/ubuntu/+source/sudo/1.9.11p3-1ubuntu1.1 https://launchpad.net/ubuntu/+source/sudo/1.9.9-1ubuntu2.2 https://launchpad.net/ubuntu/+source/sudo/1.8.31-1ubuntu1.4 https://launchpad.net/ubuntu/+source/sudo/1.8.21p2-3ubuntu1.5 . Recent patches released for various Ubuntu iterations rectify urgent vulnerabilities within Sudo, which were identified on January 18, 2023.. Ubuntu Security,Sudo Issues,System Update,Privileges Management. . Severity: Critical. LinuxSecurity.com Team
Jan 18, 2023
•Critical
Ubuntu
98
security advisorysecurity updatered hatRed Hat Enterprise Linux 8 RHSA-2021:0705-01 Important Podman Security Fix
An update for the container-tools:1.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: container-tools:1.0 security update Advisory ID: RHSA-2021:0705-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2021:0705 Issue date: 2021-03-02 CVE Names: CVE-2021-20188 ==================================================================== 1. Summary: An update for the container-tools:1.0 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fix(es): * podman: container users permissions are not respected in privileged containers (CVE-2021-20188) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1915734 - CVE-2021-20188 podman: container users permissions are not respected in privileged containers 6. Package List: Red Hat EnterpriseLinux AppStream (v.8): Source: buildah-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.src.rpm container-selinux-2.124.0-1.gitf958d0c.module+el8.3.0+10171+12421f43.src.rpm containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.src.rpm criu-3.12-9.module+el8.3.0+10171+12421f43.src.rpm fuse-overlayfs-0.3-5.module+el8.3.0+10171+12421f43.src.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.src.rpm oci-umount-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.src.rpm podman-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.src.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.src.rpm skopeo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.src.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.src.rpm aarch64: buildah-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.aarch64.rpm buildah-debuginfo-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.aarch64.rpm buildah-debugsource-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.aarch64.rpm containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.aarch64.rpm containernetworking-plugins-debuginfo-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.aarch64.rpm containernetworking-plugins-debugsource-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.aarch64.rpm containers-common-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.aarch64.rpm crit-3.12-9.module+el8.3.0+10171+12421f43.aarch64.rpm criu-3.12-9.module+el8.3.0+10171+12421f43.aarch64.rpm criu-debuginfo-3.12-9.module+el8.3.0+10171+12421f43.aarch64.rpm criu-debugsource-3.12-9.module+el8.3.0+10171+12421f43.aarch64.rpm fuse-overlayfs-0.3-5.module+el8.3.0+10171+12421f43.aarch64.rpm fuse-overlayfs-debuginfo-0.3-5.module+el8.3.0+10171+12421f43.aarch64.rpm fuse-overlayfs-debugsource-0.3-5.module+el8.3.0+10171+12421f43.aarch64.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.aarch64.rpm oci-systemd-hook-debuginfo-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.aarch64.rpm oci-systemd-hook-debugsource-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.aarch64.rpm oci-umount-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.aarch64.rpm oci-umount-debuginfo-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.aarch64.rpm oci-umount-debugsource-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.aarch64.rpm podman-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.aarch64.rpm podman-debuginfo-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.aarch64.rpm podman-debugsource-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.aarch64.rpm python3-criu-3.12-9.module+el8.3.0+10171+12421f43.aarch64.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.aarch64.rpm runc-debuginfo-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.aarch64.rpm runc-debugsource-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.aarch64.rpm skopeo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.aarch64.rpm skopeo-debuginfo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.aarch64.rpm skopeo-debugsource-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.aarch64.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.aarch64.rpm slirp4netns-debuginfo-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.aarch64.rpm slirp4netns-debugsource-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.aarch64.rpm noarch: container-selinux-2.124.0-1.gitf958d0c.module+el8.3.0+10171+12421f43.noarch.rpm podman-docker-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.noarch.rpm ppc64le: buildah-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.ppc64le.rpm buildah-debuginfo-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.ppc64le.rpm buildah-debugsource-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.ppc64le.rpm containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.ppc64le.rpm containernetworking-plugins-debuginfo-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.ppc64le.rpm containernetworking-plugins-debugsource-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.ppc64le.rpm containers-common-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.ppc64le.rpm crit-3.12-9.module+el8.3.0+10171+12421f43.ppc64le.rpm criu-3.12-9.module+el8.3.0+10171+12421f43.ppc64le.rpm criu-debuginfo-3.12-9.module+el8.3.0+10171+12421f43.ppc64le.rpm criu-debugsource-3.12-9.module+el8.3.0+10171+12421f43.ppc64le.rpm fuse-overlayfs-0.3-5.module+el8.3.0+10171+12421f43.ppc64le.rpm fuse-overlayfs-debuginfo-0.3-5.module+el8.3.0+10171+12421f43.ppc64le.rpm fuse-overlayfs-debugsource-0.3-5.module+el8.3.0+10171+12421f43.ppc64le.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.ppc64le.rpm oci-systemd-hook-debuginfo-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.ppc64le.rpm oci-systemd-hook-debugsource-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.ppc64le.rpm oci-umount-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.ppc64le.rpm oci-umount-debuginfo-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.ppc64le.rpm oci-umount-debugsource-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.ppc64le.rpm podman-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.ppc64le.rpm podman-debuginfo-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.ppc64le.rpm podman-debugsource-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.ppc64le.rpm python3-criu-3.12-9.module+el8.3.0+10171+12421f43.ppc64le.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.ppc64le.rpm runc-debuginfo-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.ppc64le.rpm runc-debugsource-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.ppc64le.rpm skopeo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.ppc64le.rpm skopeo-debuginfo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.ppc64le.rpm skopeo-debugsource-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.ppc64le.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.ppc64le.rpm slirp4netns-debuginfo-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.ppc64le.rpm slirp4netns-debugsource-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.ppc64le.rpm s390x: buildah-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.s390x.rpm buildah-debuginfo-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.s390x.rpm buildah-debugsource-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.s390x.rpm containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.s390x.rpm containernetworking-plugins-debuginfo-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.s390x.rpm containernetworking-plugins-debugsource-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.s390x.rpm containers-common-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.s390x.rpm crit-3.12-9.module+el8.3.0+10171+12421f43.s390x.rpm criu-3.12-9.module+el8.3.0+10171+12421f43.s390x.rpm criu-debuginfo-3.12-9.module+el8.3.0+10171+12421f43.s390x.rpm criu-debugsource-3.12-9.module+el8.3.0+10171+12421f43.s390x.rpm fuse-overlayfs-0.3-5.module+el8.3.0+10171+12421f43.s390x.rpm fuse-overlayfs-debuginfo-0.3-5.module+el8.3.0+10171+12421f43.s390x.rpm fuse-overlayfs-debugsource-0.3-5.module+el8.3.0+10171+12421f43.s390x.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.s390x.rpm oci-systemd-hook-debuginfo-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.s390x.rpm oci-systemd-hook-debugsource-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.s390x.rpm oci-umount-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.s390x.rpm oci-umount-debuginfo-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.s390x.rpm oci-umount-debugsource-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.s390x.rpm podman-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.s390x.rpm podman-debuginfo-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.s390x.rpm podman-debugsource-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.s390x.rpm python3-criu-3.12-9.module+el8.3.0+10171+12421f43.s390x.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.s390x.rpm runc-debuginfo-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.s390x.rpm runc-debugsource-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.s390x.rpm skopeo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.s390x.rpm skopeo-debuginfo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.s390x.rpm skopeo-debugsource-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.s390x.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.s390x.rpm slirp4netns-debuginfo-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.s390x.rpm slirp4netns-debugsource-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.s390x.rpm x86_64: buildah-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.x86_64.rpm buildah-debuginfo-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.x86_64.rpm buildah-debugsource-1.5-8.gite94b4f9.module+el8.3.0+10171+12421f43.x86_64.rpm containernetworking-plugins-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.x86_64.rpm containernetworking-plugins-debuginfo-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.x86_64.rpm containernetworking-plugins-debugsource-0.7.4-4.git9ebe139.module+el8.3.0+10171+12421f43.x86_64.rpm containers-common-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.x86_64.rpm crit-3.12-9.module+el8.3.0+10171+12421f43.x86_64.rpm criu-3.12-9.module+el8.3.0+10171+12421f43.x86_64.rpm criu-debuginfo-3.12-9.module+el8.3.0+10171+12421f43.x86_64.rpm criu-debugsource-3.12-9.module+el8.3.0+10171+12421f43.x86_64.rpm fuse-overlayfs-0.3-5.module+el8.3.0+10171+12421f43.x86_64.rpm fuse-overlayfs-debuginfo-0.3-5.module+el8.3.0+10171+12421f43.x86_64.rpm fuse-overlayfs-debugsource-0.3-5.module+el8.3.0+10171+12421f43.x86_64.rpm oci-systemd-hook-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.x86_64.rpm oci-systemd-hook-debuginfo-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.x86_64.rpm oci-systemd-hook-debugsource-0.1.15-2.git2d0b8a3.module+el8.3.0+10171+12421f43.x86_64.rpm oci-umount-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.x86_64.rpm oci-umount-debuginfo-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.x86_64.rpm oci-umount-debugsource-2.3.4-2.git87f9237.module+el8.3.0+10171+12421f43.x86_64.rpm podman-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.x86_64.rpm podman-debuginfo-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.x86_64.rpm podman-debugsource-1.0.0-8.git921f98f.module+el8.3.0+10171+12421f43.x86_64.rpm python3-criu-3.12-9.module+el8.3.0+10171+12421f43.x86_64.rpm runc-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.x86_64.rpm runc-debuginfo-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.x86_64.rpm runc-debugsource-1.0.0-56.rc5.dev.git2abd837.module+el8.3.0+10171+12421f43.x86_64.rpm skopeo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.x86_64.rpm skopeo-debuginfo-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.x86_64.rpm skopeo-debugsource-0.1.32-6.git1715c90.module+el8.3.0+10171+12421f43.x86_64.rpm slirp4netns-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.x86_64.rpm slirp4netns-debuginfo-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.x86_64.rpm slirp4netns-debugsource-0.1-5.dev.gitc4e1bc5.module+el8.3.0+10171+12421f43.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2021-20188 https://access.redhat.com/security/updates/classification/#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBYD6GktzjgjWX9erEAQg/Pw//RDTnmvYbQD1+Xmaiwl/PaN4F5QNa4EDj B/NzlT+0icLhU+0yva3kWlgp9jHOs3cOb0PrRDv5RF0t03bHsfyuMAIFlT4UEUu/ YwwpIIApOKXLxiJsQ8hnmO5OeNltNovurrtQJKuIiS6F+d7Tx+q8QjE4sm0PB4gg 7wYKLVt5N+XXzcQCX8C6s1tNmYR5yXOx3v4FFwPtUlUPbur/ZGpBovTFqMTFb25A pvPC+Gj0EFpw/YQThnSaB5UgLZqmBIFIGlc/SMIKsAffgcRlWj65sEuvEbUbJeES WuywnHIk/dZlwjpNGBq+B37+D1Thf+6Phgff322ygoGKkOoEGQpA16OZiKW0tqGp iVPQXLSwZNdQWVoiJd2kjuhnpu0Gm1deoet9XNdTsffufsRHqN+c/A7He0TMAEY8 1uwDVolxp0Z3f3oQ+MTpe020cq/HfWpowq35hPwJI3fXz4j5vhmVMoH6i2TbkmSk 2xVlmEtC8zcU9AG+VxbLRYuDnmwFBwPdiKoL5BwXfKjSahyf94I31ppBeGIGEs9H A4roDfDtWLgyvN1O2TthL/n2x6/snSPw2FF/51vMbT10rTQCmiqQHcZDHmPy7o3Z NHSt8YdX++UJkwPcJsP0O8xy1WP0jmJcYcZLcEVBfcaIdG1KChSXOk/VPFBCMh8G 6XOL5GAhAJ0=3LNr -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Mar 02, 2021
•Important
Red Hat
100
security advisoryimportantuser permissionsSUSE: 2020:2200-1 Critical: Google-Compute-Engine Update for Key Issues
An update that fixes three vulnerabilities is now available. . SUSE Security Update: Security update for google-compute-engine ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:2200-1 Rating: important References: #1169978 #1173258 Cross-References: CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 Affected Products: SUSE Linux Enterprise Module for Public Cloud 12 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for google-compute-engine fixes the following issues: - Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups if they exist (bsc#1173258). - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Public Cloud 12: zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2020-2200=1 Package List: - SUSE Linux Enterprise Module for Public Cloud 12 (aarch64 ppc64le s390x x86_64): google-compute-engine-oslogin-20190801-54.1 google-compute-engine-oslogin-debuginfo-20190801-54.1 - SUSE Linux Enterprise Module for Public Cloud 12 (noarch): google-compute-engine-init-20190801-54.1 References: https://www.suse.com/security/cve/CVE-2020-8903.html https://www.suse.com/security/cve/CVE-2020-8907.html https://www.suse.com/security/cve/CVE-2020-8933.html https://bugzilla.suse.com/1169978 https://bugzilla.suse.com/1173258 _______________________________________________ sle-security-updates mailinglist
Aug 11, 2020
•Important
SuSE
200
security advisorymoderatebug fixSciLinux: SLSA-2020-1084-1 Moderate: Samba Path Escaping Issue
samba: Combination of parameters and permissions can allow user to escape from the share path definition * samba: smb client vulnerable to filenames containing path separators SL7 x86_64 samba-libs-4.10.4-10.el7.i686.rpm samba-krb5-printing-4.10.4-10.el7.x86_64.rpm libsmbclient-4.10.4-10.el7.i686.rpm samba-common-tools-4.10.4-10.el7.x86_64.rpm samba-libs-4.10.4-1 [More...]. Synopsis: Moderate: samba security, bug fix, and enhancement update Advisory ID: SLSA-2020:1084-1 Issue Date: 2020-04-07 CVE Numbers: CVE-2019-10197 CVE-2019-10218 -- * samba: Combination of parameters and permissions can allow user to escape from the share path definition * samba: smb client vulnerable to filenames containing path separators-- SL7 x86_64 samba-libs-4.10.4-10.el7.i686.rpm samba-krb5-printing-4.10.4-10.el7.x86_64.rpm libsmbclient-4.10.4-10.el7.i686.rpm samba-common-tools-4.10.4-10.el7.x86_64.rpm samba-libs-4.10.4-10.el7.x86_64.rpm samba-winbind-clients-4.10.4-10.el7.x86_64.rpm libwbclient-4.10.4-10.el7.x86_64.rpm samba-python-4.10.4-10.el7.x86_64.rpm samba-common-4.10.4-10.el7.noarch.rpm samba-client-libs-4.10.4-10.el7.i686.rpm samba-winbind-modules-4.10.4-10.el7.x86_64.rpm samba-winbind-4.10.4-10.el7.x86_64.rpm samba-client-libs-4.10.4-10.el7.x86_64.rpm samba-python-4.10.4-10.el7.i686.rpm libsmbclient-4.10.4-10.el7.x86_64.rpm samba-client-4.10.4-10.el7.x86_64.rpm samba-4.10.4-10.el7.x86_64.rpm samba-common-libs-4.10.4-10.el7.x86_64.rpm libwbclient-4.10.4-10.el7.i686.rpm samba-winbind-modules-4.10.4-10.el7.i686.rpm samba-debuginfo-4.10.4-10.el7.i686.rpm samba-debuginfo-4.10.4-10.el7.x86_64.rpm libsmbclient-devel-4.10.4-10.el7.i686.rpm libsmbclient-devel-4.10.4-10.el7.x86_64.rpm libwbclient-devel-4.10.4-10.el7.i686.rpm libwbclient-devel-4.10.4-10.el7.x86_64.rpm samba-dc-4.10.4-10.el7.x86_64.rpm samba-dc-libs-4.10.4-10.el7.x86_64.rpm samba-devel-4.10.4-10.el7.i686.rpm samba-devel-4.10.4-10.el7.x86_64.rpm samba-python-test-4.10.4-10.el7.x86_64.rpm samba-test-4.10.4-10.el7.x86_64.rpm samba-test-libs-4.10.4-10.el7.i686.rpm samba-test-libs-4.10.4-10.el7.x86_64.rpm samba-vfs-glusterfs-4.10.4-10.el7.x86_64.rpm samba-winbind-krb5-locator-4.10.4-10.el7.x86_64.rpm noarch samba-common-4.10.4-10.el7.noarch.rpm samba-pidl-4.10.4-10.el7.noarch.rpm - Scientific Linux Development Team . Samba security update addresses intermediate vulnerabilities, patches, and revisions for Scientific Linux. Strengthen your defenses today.. samba security, scilinux advisory, samba update, samba risk, samba permissions. . LinuxSecurity.com Team
Apr 20, 2020
Scientific Linux
202
security advisorysecurity updateprivilege escalationopenSUSE: 2018:2806-1 Important: sambashare Privilege Escalation
An update that contains security fixes can now be installed.. openSUSE Security Update: Security update for nemo-extensions ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:2806-1 Rating: important References: #1084703 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for nemo-extensions fixes the following issues: The following security vulnerability was fixed: - Prevent unprivileged users from adding other users to sambashare (boo#1084703) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-882=1 Package List: - openSUSE Backports SLE-15 (x86_64): nemo-extension-dropbox-3.6.0-bp150.2.3.1 nemo-extension-fileroller-3.6.0-bp150.2.3.1 nemo-extension-gtkhash-3.6.0-bp150.2.3.1 nemo-extension-image-converter-3.6.0-bp150.2.3.1 nemo-extension-preview-3.6.0-bp150.2.3.1 nemo-extension-repairer-3.6.0-bp150.2.3.1 nemo-extension-seahorse-3.6.0-bp150.2.3.1 nemo-extension-share-3.6.0-bp150.2.3.1 python-nemo-3.6.0-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): nemo-extension-audio-tab-3.6.0-bp150.2.3.1 nemo-extension-compare-3.6.0-bp150.2.3.1 nemo-extension-emblems-3.6.0-bp150.2.3.1 nemo-extension-pastebin-3.6.0-bp150.2.3.1 nemo-extension-rabbitvcs-3.6.0-bp150.2.3.1 nemo-extension-terminal-3.6.0-bp150.2.3.1 References: https://bugzilla.suse.com/1084703 -- . Crucial notice for Fedora addresses accesscontrol flaw in file-browser. Apply suggested updates immediately.. openSUSE Backports,nemo-extensions,user privilege fixes,security update. . Severity: Important. LinuxSecurity.com Team
Sep 22, 2018
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!