rsync could be made to crash or run programs if it received specially crafted input.
Archive for August 18th, 2022
RedHat: RHSA-2022-6051:01 Important: Logging Subsystem 5.5.0 – Red Hat
An update is now available for RHOL-5.5-RHEL-8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability
RedHat: RHSA-2022-6113:01 Important: Red Hat Application Interconnect 1.0
Red Hat Application Interconnect 1.0 introduces a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables communication between services running in different network locations or sites.
Ubuntu 5572-1: Linux kernel (AWS) vulnerabilities
Several security issues were fixed in the Linux kernel.
Ubuntu 5571-1: PostgreSQL vulnerability
PostgreSQL could be made to run programs when creating or updating extensions.
Debian: DSA-5213-1: schroot security update
Julian Gilbey discovered that schroot, a tool allowing users to execute commands in a chroot environment, had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.