8157 matches found
USN-6839-1: MariaDB vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description A security issue was discovered in MariaDB and this update includes new upstream MariaDB versions to fix the issue. MariaDB has been updated to 10.6.18 in Ubuntu 22.04 LTS and to 10.11.8 in Ubuntu 23.10 a...
USN-6852-1: Wget vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Wget incorrectly handled semicolons in the userinfo subcomponent of a URI. A remote attacker could possibly trick a user into connecting to a different host than expected. Update...
USN-6853-1: Ruby vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Ruby incorrectly handled the ungetbyte and ungetc methods. A remote attacker could use this issue to cause Ruby to crash, resulting in a denial of service, or possibly obtain...
How Can Deliberately Flawed APIs Help In Mastering API Security?
In our recent webinar recent webinar title 'A CISO’s Checklist for Securing APIs and Applications', we delved into the concept of creating an API security playground tailored for both developer and security teams. The core idea revolves around utilizing intentionally vulnerable APIs as training...
CVE-2024-0760
A flaw was found in the bind9 package, where a malicious client may send many DNS messages over the TCP protocol, leading to instabilities on the server side and potentially causing a denial of service. The server will recover automatically once the attack ceases. Mitigation Mitigation for this...
Security Bulletin: Multiple IBM® Db2® security vulnerability fixes
Summary If you use IBM® Db2® as your database in your IBM Datacap deployment, please follow the Db2 security bulletins referred here to remedy the vulnerabilities. IBM® Db2® is affected by a vulnerability in the open source zlib library CVE-2023-45853 and IBM® Db2® is vulnerable to sensitive...
CVE-2024-21144
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Concurrency. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability...
CVE-2024-21145
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1;...
Error: Unable to Create Deployment in StoreFront
When creating a new deployment in StoreFront, the deployment fails with the following error: "Unable to Create Deployment " This error is logged in Event Viewer: New Server Deployment Citrix.DeliveryServices.PowerShell.Command.Runner.Exceptions.PowerShellExecutionException: An error occured runni...
Targets Booting Very Slowly - Windows Splash Seen for over 10 Minutes
New deployment targets taking over 10 minutes to boot. Background Target device gets to the Windows splash and then it takes over 15 minutes to load Windows. After Windows loads, there is no performance problem...
Troubleshooting 1003 and 1004 Terminal Server Licensing Errors
Summary This article contains information on troubleshooting 1003 and 1004 Terminal Server licensing errors. Users attempting to connect to a XenApp server might experience the following Terminal Services related errors in the Event Log: Event ID: 1003 Source: TermService Type:Information The...
How to Deploy Secure Mail Test Tool
This article details how to deploy Secure Mail Test Tool and also covers some of the frequently asked question about this tool...
Recommended Install Order for Preparing Target Device Captured by Provisioning Server to Deploy vDisk
This article contains the recommended order to install or prepare a target device that must be captured by the Provisioning Services Sever to deploy a virtual disk...
LDAP Communication Error on XenMobile Device Manager
The following LDAP communication error appears on XenMobile Device Manager: javax.naming.CommunicationException: simple bind failed: xxxx-xxx-xxx.xxx.xxx.com:666Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed:...
Vulnerability fixed in GitLab CE/EE
GitLab has fixed a vulnerability in GitLab CE/EE A malicious person could exploit the vulnerability under certain circumstances to start a Continuous Integration/Continuous Deployment CI/CD pipeline process as any other user. GitLab has released updates to fix the vulnerability in GitLab CE/EE...
GitLab CE/EE Security Vulnerabilities
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE version 17.0 up to and includi...
Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 8
Package name: xms10.15.0.10808.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: July 2024 Languages...
Description of the security update for SharePoint Server Subscription Edition: July 9, 2024 (KB5002606)
None None...