[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

255116

 
 

909

 
 

198683

 
 

282

Paid content will be excluded from the download.


Download | Alert*


oval:org.secpod.oval:def:507562
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fix: * pesign: Local privilege escalation on pesign systemd service For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related ...

oval:org.secpod.oval:def:507593
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fix: * pesign: Local privilege escalation on pesign systemd service For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related ...

oval:org.secpod.oval:def:19500109
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symb ...

oval:org.secpod.oval:def:2501033
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.

oval:org.secpod.oval:def:1506498
[0.112-27.0.1] - Update Oracle Linux test certificates [Orabug: 31928433] - Apply pesigcheck-Mark-the-imported-certificate-as-trusted.patch [Orabug: 31928433] - update Oracle Linux certificates - remove obsoletes of pesign-rh-test-certs [Orabug 29222572] [0.112-27] - Deprecate pesign-authorize and ...

oval:org.secpod.oval:def:1506466
[115-6.0.1] - Update Oracle Linux test certificates [Orabug: 31928433] [115-6] - Fix chmod invocation - Resolves: CVE-2022-3560 [115-5] - Deprecate pesign-authorize and drop ACL use - Resolves: CVE-2022-3560

oval:org.secpod.oval:def:1506469
[0.109-11.0.1] - RPM macro fix - updates for Oracle Linux test certificate - update Oracle Linux certificates [0.109-11] - Backport newer, deprecated pesign-authorize - Resolves: CVE-2022-3560

oval:org.secpod.oval:def:5800002
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fix: * pesign: Local privilege escalation on pesign systemd service For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related ...

oval:org.secpod.oval:def:2600168
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.

oval:org.secpod.oval:def:4501403
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fix: * pesign: Local privilege escalation on pesign systemd service For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related ...

oval:org.secpod.oval:def:124968
This package contains the pesign utility for signing UEFI binaries as well as other associated tools.

oval:org.secpod.oval:def:206016
Security Fix: pesign: Local privilege escalation on pesign systemd service For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.

oval:org.secpod.oval:def:124967
This package contains the pesign utility for signing UEFI binaries as well as other associated tools.

oval:org.secpod.oval:def:89048620
This update for pesign fixes the following issues: * CVE-2022-3560: Fixed pesign-authorize ExecStartPost script allowing privilege escalation from pesign to root .

oval:org.secpod.oval:def:508188
The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fix: pesign: Local privilege escalation on pesign systemd service For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related in ...

CPE    1
cpe:/o:redhat:enterprise_linux:7.0
CWE    1
CWE-22
*CVE
CVE-2022-3560

© SecPod Technologies