Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tun: avoid double free in tunfreenetdev CVE-2022-4744 ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 kernel: net: CPU soft lockup in TC mirred...

Context Propagation with Project Reactor 1 - The Basics

This post is a part of a series: 1. The Basics 2. The bumpy road of Spring Cloud Sleuth 3. Unified Bridging between Reactive and Imperative Spring Boot 3 and Spring Framework 6 brought us a unified and consistent way to enable Observability in applications that use Micrometer. The evolution from...

SUSE-SU-2023:1572-1 Security update for dpdk

This update of dpdk fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-17860 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue allows for local escalation of privilege due to a missing warning to the user, enabling the device to boot with a hidden debug policy. This can be exploited by preparing the...

PT-2023-36129 · Dpdk · Dpdk

Name of the Vulnerable Software and Affected Versions: dpdk affected versions not specified Description: The issue is related to the rebuild of the package with a new secure boot key. There is no information provided about the estimated number of potentially affected devices or real-world inciden...

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

SUSE-SU-2023:0884-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:0882-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:0881-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

SUSE-SU-2023:0880-1 Security update for grub2

This update of grub2 fixes the following issues: - rebuild the package with the new secure boot key bsc1209188...

PT-2023-36125 · Grub2 · Grub2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: The issue with grub2 is related to rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...

PT-2023-36128 · Grub2 · Grub2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: The issue with grub2 is related to secure boot. The package has been rebuilt with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that...

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

PT-2023-36126 · Grub2 · Grub2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: The issue concerns a problem with the secure boot key in grub2, which has been addressed by rebuilding the package with a new secure boot key. Recommendations: At the moment, there is no...

CVE-2023-20082 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

A Bootiful Podcast: Mark Thomas, Apache Tomcat contributor extraordinaire

Hi, Spring fans! Welcome to another installment of A Bootiful Podcast! In this installment, Josh Long talks to longtime Apache Tomcat contributor extraordinaire Mark Thomas I wrote a free white paper on using Spring Boot 3 AOT and GraalVM. Learn the secrets to working with Spring Boot 3 and Graal...

CVE-2023-20082

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...

Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This...