https://security-tracker.debian.org/tracker/DSA-6556-1
https://security-tracker.debian.org/tracker/DSA-6308-1
Геймпад Speedlink Xeox Pro Analog Gamepad USB SL-6556-BK Black в наличии Цена: 1589.00 ₽ КУПИТЬ
lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because "Failed to open" often indicates that a file does not exist, whereas "does not refer to a network namespace path" often indicates that a file exists. NOTE: this is different from CVE-2018-6556 because the CVE-2018-6556 fix design was based on the premise that "we will report back to the user that the open() failed…