Sander Bos

Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update

Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server

Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an unprivileged user.

Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root

Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update

Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server

eXtplorer exposes /usr and /etc/extplorer over HTTP

Apport treats the container PID as the global PID when /proc/<global_pid>/ is missing

Byobu apport hook uploads user's ~/.screenrc

Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges.