EulerOS 2.0 SP3 : fence-agents (EulerOS-SA-2019-2577)

According to the version of the fence-agents packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would...

The vulnerability of the e2fsprogs utility for working with ext2, ext3, and ext4 file systems lies in the ability to write beyond the cluster boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of the e2fsprogs utility for working with ext2, ext3, and ext4 file systems is related to writing beyond the cluster boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

December 10, 2019—KB4530730 (Security-only update)

None None...

December 10, 2019—KB4530698 (Security-only update)

None None...

December 10, 2019—KB4530681 (OS Build 10240.18427)

None None...

December 10, 2019—KB4530702 (Monthly Rollup)

None None...

NewStart CGSL CORE 5.04 / MAIN 5.04 : fence-agents Vulnerability (NS-SA-2019-0214)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has fence-agents packages installed that are affected by a vulnerability: - A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause...

Taking Reputation to Scale: An Iterative Journey with an Agile Approach (Part 2)

In Part 1 of this blog, we shared with you the challenges we had in balancing latency, scalability, and cost for our reputation services. In this blog, we’ll give you some insights into each major iteration along that journey, from the beginning to where we are now. 100 requests per second. Befor...

November 19, 2019—KB4525242 (Preview of Monthly Rollup)

None None...

[SECURITY] [DSA 4572-1] slurm-llnl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4572-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 18, 2019 https://www.debian.org/security/faq -...

Wallarm Launches Support of Envoy Proxy/ Envoy API Protection

Wallarm can protect North-South API in the applications that use Envoy as an alternative Ingress controller at the front end of a Kubernetes cluster. Wallarm can also protect edge traffic and also East-West Envoy API for Service-Mesh and Istio. The post Wallarm Launches Support of Envoy Proxy/...

USN-4194-1: postgresql-common vulnerability

Rich Mirch discovered that the postgresql-common pgctlcluster script incorrectly handled directory creation. A local attacker could possibly use this issue to escalate privileges...

October 8, 2019—KB4519990 (Security-only update)

None None...

November 12, 2019—KB4525246 (Monthly Rollup)

None None...

November 12, 2019—KB4525232 (OS Build 10240.18395)

None None...

October 8, 2019—KB4520007 (Monthly Rollup)

None None...

CVE-2019-2822

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Shell: Admin / InnoDB Cluster. Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...

Amazon Linux 2 : fence-agents (ALAS-2019-1348)

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fencerhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to...

CVE-2019-18780

An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator. These Veritas products are affected: Access 7.4.2 and earlier, Access Appliance 7.4.2 and earlier, Fl...

CVE-2019-18780

An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator. These Veritas products are affected: Access 7.4.2 and earlier, Access Appliance 7.4.2 and earlier, Fl...