Most recent entries from all

ALSA-2023:0837 — Moderate: systemd security and bug fix update

Affected: AlmaLinux:8: systemd, AlmaLinux:8: systemd-container, AlmaLinux:8: systemd-devel, AlmaLinux:8: systemd-journal-remote, AlmaLinux:8: systemd-libs, AlmaLinux:8: systemd-pam, AlmaLinux:8: systemd-tests, AlmaLinux:8: systemd-udev

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

* systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting (CVE-2022-4415)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* systemd doesn't record messages to the journal during boot (BZ#2164049)

bdu:2023-07591

certfr-2023-avi-0210 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Elles permett…

certfr-2023-avi-0210

EUVD-2026-257692

fkie_cve-2022-4415

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

GHSA-x49m-v7mv-3wvx

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

gsd-2022-4415

ICSA-24-046-11 — Siemens SCALANCE XCM-/XRM-300

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.

This issue affects Apache HTTP Server 2.4.54 and earlier. A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability. An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create…

msrc_CVE-2022-4415 — A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not…

msrc_CVE-2022-4415

OESA-2023-1027 — systemd security update

Affected: openEuler:22.03-LTS-SP1: systemd

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fix(es): A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.(CVE-2022-4415)

openSUSE-SU-2024:12576-1 — libsystemd0-252.3-2.1 on GA media

libsystemd0-252.3-2.1 on GA media

RHSA-2024:1105 — Red Hat Security Advisory: systemd security update

systemd: buffer overrun in format_timespan() function systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting systemd: privilege escalation via the less pager

SUSE-SU-2022:4627-1 — Security update for systemd

Security update for systemd

UBUNTU-CVE-2022-4415

Affected: Ubuntu:Pro:16.04:LTS: systemd, Ubuntu:Pro:18.04:LTS: systemd, Ubuntu:20.04:LTS: systemd, Ubuntu:22.04:LTS: systemd

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

WID-SEC-W-2022-2384 — systemd: Schwachstelle ermöglicht Offenlegung von Informationen

Ein lokaler Angreifer kann eine Schwachstelle in systemd und Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.