Miloslav Trmač

Em plataformas Unix, ao listar o conteúdo do diretório usando `File.ReadDir` ou `File.Readdir`, o `FileInfo` retornado poderia referenciar um arquivo fora do diretório raiz no qual o arquivo foi aberto. Isso permite a leitura de metadados de locais arbitrários no sistema de arquivos usando `lstat`, sem permitir leitura ou escrita de arquivos fora da raiz. O problema impacta a stdlib em 27 imagens base do Lambda.

A vulnerabilidade está relacionada a um problema de uso após liberação de memória (use-after-free), que pode causar uma falha no sistema ou, potencialmente, permitir a execução de código durante a verificação da assinatura GPG. Isso se deve a um gerenciamento inadequado da memória, em que a memória passada para o C pode ser liberada antes de ser utilizada, levando a falhas no sistema ou à possível execução de código.

The issue allows arbitrary files on the system to be read due to a polkit policy in gnome-system-log.

The issue is related to information disclosure when the user's home directory is moved.

Name of the Vulnerable Software and Affected Versions: containers/image library used by Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 CRI-O in OpenShift Container Platform Description: The issue concerns the containers/image library, which does not enforce TLS connections to the container registry authorization service. This allows an attacker to launch a Man-in-the-Middle (MiTM) attack, potentially stealing login credentials or bearer tokens. The HTTP client used to connect to the container registry authorization service explicitly disables TLS verification, making it vulnerable to such attacks. Recommendations: For Red Hat Enterprise Linux version 8, update the containers/image library to a version that enforces TLS connections. For OpenShift Container Platform, update CRI-O to a version that enforces TLS connections. As a temporary workaround, consider restricting access to the container registry authorization service to minimize the risk of exploitation.

The issue allows local users to write to arbitrary files owned by the current user.

The issue allows local users to change the system timezone via a crafted D-Bus call due to the default configuration in mate-settings-daemon.

The issue is related to multiple vulnerabilities in various packages of the Automatic Bug Reporting Tool (ABRT) and libreport. These vulnerabilities can be exploited locally, potentially leading to a breach of confidentiality, integrity, and availability of protected information. According to the information provided, the exploitation can be carried out by modifying the PYTHONPATH environment variable to reference a malicious Python module, allowing local users to load and execute arbitrary Python modules.