NewStart CGSL MAIN 6.06 : qemu Multiple Vulnerabilities (NS-SA-2025-0227)

The remote NewStart CGSL host, running version MAIN 6.06, has qemu packages installed that are affected by multiple vulnerabilities: - A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPIC...

AZL-66800 CVE-2025-38691 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function exttreepreparecommit reallocates a larger buffer to retry encoding extents, the "layoutupdatepages" page arr...

The vulnerability of the bfq_bio_merge() function in the block/bfq-iosched.c module exposes the block-level kernel support of the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the bfqbiomerge function in the block/bfq-iosched.c module relates to the reutilization of previously released memory in Linux’s kernel-level block storage mechanism. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Secure Your Data with Automated Local Compute Disk & Block Storage Volume Encryption

...

HPESBST04822 rev.2 - HPE GreenLake for Block Storage OS, HPE Alletra 9000 OS, HPE 3PAR OS, and HPE Primera OS, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE GreenLake for Block Storage OS - Prior to 10.4.8 HPE Alletra 9000 - Prior to 9.6.3 - Operating System HPE 3PAR Operating System Software - Prior ...

RHEL 7 : openstack-cinder, openstack-glance, and openstack-nova update (Moderate) (RHSA-2016:2991)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:2991 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute...

vdo bug fix update

An update is available for vdo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The vdo packages provide Virtual Data Optimizer VDO, which is a block...

HPESBST04764 rev.1 - HPE Alletra MP OS, Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage MP B10000 - Prior to v10.4.5 HPE GreenLake for Block Storage MP OS - Prior to v10.4.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

RHEL 7 : openstack-cinder, openstack-glance, and openstack-nova (RHSA-2017:0282)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0282 advisory. The Oslo concurrency library has utilities for safely running multi-thread, multi-process applications using locking mechanisms, and for running...

How to Evaluate the Read Speeds on the Block Type Storage Repositories for XenServer

This article describes how to evaluate theread speedsof the Storage Repository SR of block device, including LVM, LVM over HBA, iSCSI, NetApp and Dell EqualLogic. Requirements Ensure that the SR is configured properly and for NetApp or Dell EqualLogic type, at least one virtual disk is created...

Critical: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.6 security update

An update for openstack-cinder, openstack-glance, and openstack-nova is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 8 : Red Hat OpenStack Platform 16.2.6 (RHSA-2024:4273)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4273 advisory. Cinder is the replacement of nova-volume in Folsom and beyond, use d for block storage. OpenStack Image Service code-named Glance provides...

CLSA-2024-1714073393 Fix of 16 CVEs

Jammy update: v5.15.81 upstream stable release LP: 2003130 // CVE-url: https://ubuntu.com/security/CVE-2023-1382 - tipc: set con sock in tipcconnalloc - tipc: add an extra connget in tipcconnalloc CVE-url: https://ubuntu.com/security/CVE-2023-1998 - x86/speculation: Allow enabling STIBP with lega...

Virtuozzo Hybrid Infrastructure 5.4 Update 3 (5.4.3-100)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover core storage, the system configuration, updates, documentation, and the compute services. Additionally, this release delivers stability improvements and addresses issues found in previous releases...

[SECURITY] Fedora 36 Update: ceph-16.2.12-1.fc36

Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...

kmod-kvdo bug fix and enhancement update

An update is available for kmod-kvdo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kmod-kvdo packages provide the kernel module for Virtual Data Optimizer...

[SECURITY] Fedora 37 Update: ceph-17.2.5-1.fc37

Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...

[SECURITY] Fedora 36 Update: ceph-16.2.10-1.fc36

Ceph is a massively scalable, open-source, distributed storage system that ru ns on commodity hardware and delivers object, block and file system storage...

GHSA-V3M2-PG96-W33M Openstack cinder Improper handling of ScaleIO backend credentials

An insecure-credentials flaw was found in all openstack-cinder versions before openstack-cinder 14.1.0, all openstack-cinder 15.x.x versions before openstack-cinder 15.2.0 and all openstack-cinder 16.x.x versions before openstack-cinder 16.1.0. When using openstack-cinder with the Dell EMC ScaleI...

QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure

A heap buffer overflow flaw was found in the iSCSI support of QEMU. This flaw could lead to an out-of-bounds read access and possible information disclosure from the QEMU process memory to a malicious guest. The highest threat from this vulnerability is to data confidentiality...