Marcus Meissner

توجد ثغرة تسمح باجتياز المسار عبر المتغير `keyhint`.

توجد مشكلة تحرير مزدوج في تنفيذ خدمة التسليم الموثوق (RDS) في نواة Linux. عندما تفشل الدالة `iov iter get pages2()` داخل `rds message zcopy from user()`، يتم تحرير الصفحات المثبتة ومسح `rm->data.op mmp znotifier`، ولكن لا تتم إعادة تعيين المتغير `rm->data.op nents` بشكل صحيح. ونتيجة لذلك، عند استدعاء `rds message purge()` لاحقًا من `rds sendmsg()`، تتكرر حلقة التنظيف على القيمة غير الصحيحة غير الصفرية لـ `op nents`، مما يؤدي إلى محاولة ثانية لتحرير الموارد نفسها.

The issue allows attackers to manipulate the configuration of osc by injecting special files in .osc into the actual package sources, such as ` apiurl`. This enables the attacker to alter the osc configuration for the victim.

The OBS service obs-service-download url was vulnerable to a command injection issue. An attacker could provide a configuration to the service that allowed executing commands in later steps.

An Improper Privilege Management issue allows attackers to read arbitrary secrets if they gain access to the ServiceAccount `kubewarden-controller`.

A Cleartext Storage of Sensitive Information issue in supportutils of SUSE Linux Enterprise Server allows attackers that gain access to the support logs to obtain knowledge of the stored credentials.

The issue is related to a use-after-free in WISPR handling, which could be triggered by a man-in-the-middle attack against a WISPR HTTP query. This could lead to crashes or code execution. The vulnerability is associated with the implementation of WISPR support in the ConnMan connection manager, allowing a remote attacker to cause a denial of service or execute arbitrary code.

A local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall. This issue allows an attacker to potentially gain unauthorized access to sensitive data.

A vulnerability in SUSE Rancher Desktop allows attackers in the local network to connect to the "Dashboard API (steve)" to carry out arbitrary actions due to improper access control.

The issue is related to an improper authentication algorithm implementation in SaltStack Salt, allowing local attackers to execute arbitrary code via salt without specifying valid credentials. This can be exploited to gain unauthorized access.

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.10.11 Description: An issue in the Linux kernel allows local users to execute code in the kernel due to a use-after-free in PI futexes during fault handling. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Recommendations: For Linux kernel versions through 5.10.11, update to a version later than 5.10.11 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

A Improper Neutralization of Input During Web Page Generation issue allows remote attackers to store arbitrary JS code, causing XSS.

The issue is related to Insecure Temporary File Creation.

The issue concerns OpenStack nova base images having world-readable permissions.

The issue is related to insufficient authentication procedure using the HOST header in SUSE Linux Subscription Management Tool (SMT), allowing a remote attacker to spoof a server.

The issue allows authorized users to delete packages by sending a malicious request against projects with the OBS:InitializeDevelPackage attribute. This is similar to a previously identified issue.

The issue allows authenticated users to delete packages on specific projects with project links.

Name of the Vulnerable Software and Affected Versions: Open Build Service versions prior to 70d1aa4cc4d7b940180553a63805c22fc62e2cf0 Description: A path traversal vulnerability in obs-service-tar scm of Open Build Service allows remote attackers to access files not in the current build. The issue is related to incorrect restriction of directory path names with limited access. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information. Recommendations: For versions prior to 70d1aa4cc4d7b940180553a63805c22fc62e2cf0, update to a version that includes the fix for this issue to prevent unauthorized access to files. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

The issue concerns the set version script in obs-service-set version, which is a source validator for the Open Build Service (OBS). This script did not properly sanitize user input, allowing for code execution on the server.

The issue concerns the Open Build Service (OBS) where the CSRF protection is incorrectly disabled in the web interface. This allows for requests to be made without the user's consent.