A systemd utility, systemd-tmpfiles, has a vulnerability (CVE-2021-3997) that allows uncontrolled recursion. This issue can be exploited to create a denial of service during system boot by generating a large number of nested subdirectories in the \/tmp directory. A patch is currently available to address this. Package updates that resolve the issue have been proposed in Ubuntu and SUSE, but they are not yet available in Debian, RHEL, and Fedora (fixes are in testing). <\/p>\n
T\u00f6bb ezer be\u00e1gyazott k\u00f6nyvt\u00e1r l\u00e9trehoz\u00e1sakor a \u201esystemd-tmpfiles --remove\u201d m\u0171velet v\u00e9grehajt\u00e1sa a stack kimer\u00fcl\u00e9se miatt \u00f6sszeoml\u00e1shoz vezet. \u00c1ltal\u00e1ban a systemd-tmpfiles eszk\u00f6z egy h\u00edv\u00e1sban hajtja v\u00e9gre a k\u00f6nyvt\u00e1rak t\u00f6rl\u00e9s\u00e9t \u00e9s l\u00e9trehoz\u00e1s\u00e1t (az \u201esystemd-tmpfiles --create --remove --boot --exclude-prefix=\/dev\u201d paranccsal), ahol el\u0151sz\u00f6r a t\u00f6rl\u00e9s, majd a l\u00e9trehoz\u00e1s t\u00f6rt\u00e9nik, teh\u00e1t a t\u00f6rl\u00e9si szakaszban bek\u00f6vetkez\u0151 hiba azt eredm\u00e9nyezi, hogy a \/usr\/lib\/tmpfiles.d\/*.conf f\u00e1jlok l\u00e9tre nem j\u00f6nnek, ami a m\u0171k\u00f6d\u00e9shez sz\u00fcks\u00e9ges. <\/p>\n
A more dangerous attack vector on Ubuntu 21.04 is also mentioned: due to the crash of systemd-tmpfiles, the file \/run\/lock\/subsys is not created, and the \/run\/lock directory is writable by all users. An attacker could create the \/run\/lock\/subsys directory under their own ID and organize overwriting of system files by creating symbolic links that overlap with lock files from system processes. <\/p>\n
Additionally, new releases of the Flatpak, Samba, FreeRDP, Clamav, and Node.js projects have been published, in which vulnerabilities have been addressed: <\/p>\n
\n
A Flatpak \u00f6n\u00e1ll\u00f3 csomagok k\u00e9sz\u00edt\u00e9s\u00e9re szolg\u00e1l\u00f3 eszk\u00f6zk\u00e9szlet\u00e9nek 1.10.6 \u00e9s 1.12.3 verzi\u00f3iban k\u00e9t s\u00e9r\u00fcl\u00e9kenys\u00e9get orvosoltak: Az els\u0151 s\u00e9r\u00fcl\u00e9kenys\u00e9g (CVE-2021-43860) lehet\u0151v\u00e9 teszi, hogy a nem ellen\u0151rz\u00f6tt t\u00e1rol\u00f3b\u00f3l val\u00f3 csomag let\u00f6lt\u00e9sekor a metaadatok manipul\u00e1l\u00e1s\u00e1val elrejts\u00e9k bizonyos kiterjesztett jogosults\u00e1gok megjelen\u00edt\u00e9s\u00e9t a telep\u00edt\u00e9si folyamat sor\u00e1n. A m\u00e1sodik s\u00e9r\u00fcl\u00e9kenys\u00e9g (CVE n\u00e9lk\u00fcl) lehet\u0151v\u00e9 teszi, hogy a \u201eflatpak-builder --mirror-screenshots-url\u201d paranccsal k\u00f6nyvt\u00e1rakat hozzanak l\u00e9tre a f\u00e1jlrendszer azon ter\u00fcletein, amelyek a build k\u00f6nyvt\u00e1rain k\u00edv\u00fcl tal\u00e1lhat\u00f3k.\n