TI-2019-02854 CVE-2019-3842 · GHSA-c23j-qp89-q76c
Improper authorization in systemd
Priority LOW 33
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable.
RHSA-2021:3900
systemd security update
Released 2021-10-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) systemd-239-31.el8_2.7, systemd-container-239-31.el8_2.7, systemd-devel-239-31.el8_2.7 +5
Fixes 2 records
TI-2020-10770 CVE-2020-13776 · GHSA-g2fm-j5p3-x5h7
systemd through v245 mishandles numerical usernames such as ones composed of decimal…
Priority LOW 32
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended.