Sander Bos

Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update

Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server

Byobu apport hook uploads user's ~/.screenrc

eXtplorer exposes /usr and /etc/extplorer over HTTP

apport created lock file in wrong directory

Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an unprivileged user.

Race condition between reading current working directory and writing a core dump

Insecure temporary file use in base-files

Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root