SUSE SLES15 Security Update : Salt (SUSE-SU-2020:3244-1)

This update fixes the following issues : salt : Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3243-1)

This update for salt fixes the following issues : Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3155-1)

This update for salt fixes the following issues : Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846 Fix disk.blkid to avoid unexpected keyword argument 'pubuser'. bsc1177867 Ensure...

Unauthorized access vulnerability in Lenovo Filez Enterprise Web Drive (CNVD-2020-73276)

Lenovo Filez Enterprise Web Disk is an enterprise file collaboration and management platform based on cloud storage. An unauthorized access vulnerability exists in Lenovo Filez Enterprise NetDrive, which can be exploited by attackers to obtain sensitive information...

Denail Of Service (DoS)

Polygen is vulnerable to denial of service. Precompiled grammar objects with world-writable permissions that are generated allows local users to cause a denial of service disk consumption and possibly perform other unauthorized activities...

Yifang Cloud Web Disk has Elevation of Privilege Vulnerability

Yifang Cloud Web Disk is a file cloud storage software. A privilege elevation vulnerability exists in Yifang Cloud Web Disk. An attacker can exploit the vulnerability to elevate privileges...

Driver Disk for Cisco enic 4.0.0.11 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Cisco's enic driver and wish to use the latest version of the following: Driver Module| Version ---|--- enic| 4.0.0.11 Issues Resolved In this Driver Disk Includes general enhancements and bug fixes...

Driver Disk for Intel i40e 2.9.21 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Intel's i40e driver and wish to use the latest version of the following: Driver Module| Version ---|--- i40e| 2.9.21 Issues Resolved In this Driver Disk This driver disk contains mitigations for the...

Driver Disk for Broadcom bnxt_en 1.10.1-216.1.123.0 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Bnxt's en driver and wish to use the latest version of the following: Driver Module| Version ---|--- bnxten| 1.10.1216.1.123.0 Issues Resolved In this Driver Disk Includes general enhancements and bug...

Driver Disk for Cisco fnic 2.0.0.59 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Cisco's fnic driver and wish to use the latest version of the following: Driver Module| Version ---|--- fnic| 2.0.0.59 Issues Resolved In this Driver Disk Includes general enhancements and bug fixes...

Driver Disk for Qlogic netxtreme2 7.14.71.1 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Qlogic's netxtreme2 driver and wish to use the latest version of the following: Driver Module| Version ---|--- bnx2| 2.2.5z bnx2fc| 2.12.13 bnx2i| 2.11.25.0 bnx2x| 1.715.4.2 cnic| 2.5.21a Issues Resolve...

Driver Disk for LSI megaraid sas 07.701.18.00+rc1 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer 7.x Current Release who use LSI's megaraid-sas driver and wish to use the latest version of the following: Driver Module| Version ---|--- megaraid-sas| 07.701.18.00+rc1 Issues Resolved In this Driver Disk Includes general...

Driver Disk for QLogic netxtreme2-7.14.29.1 (bnx2x) - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer 7.x Current Release who use QLogic's netxtreme2 bnx2x driver and wish to use the latest version of the following: Driver Module| Version ---|--- netxtreme2 bnx2x| 7.14.29.1 Issues Resolved In this Driver Disk Includes gener...

Driver Disk for Broadcom bnxt_en 1.10.0_216.0.119.0 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Broadcomm's bnxten driver and wish to use the latest version of the following: Driver Module| Version ---|--- bnxten| 1.10.0216.0.119.0 Issues Resolved In this Driver Disk Includes general enhancements...

Driver Disk for Qlogic qede 8.30.13.0 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer 7.x. Current Release who use qlogic's qede driver and wish to use the latest version of the following: Driver Module| Version ---|--- qede| 8.30.13.0 Issues Resolved In this Driver Disk Includes general enhancements and bug...

Oracle GraalVM Resource Management Error Vulnerability

Oracle GraalVM is the United States Oracle Oracle company's set of instant compilers written in the Java language. The product supports multiple programming languages and execution modes. A resource management error vulnerability exists in Oracle GraalVM Enterprise Edition of Oracle GraalVM, whic...

Data race and memory safety issue in `Index`

The appendix crate implements a key-value mapping data structure called Index that is stored on disk. The crate allows for any type to inhabit the generic K and V type parameters and implements Send and Sync for them unconditionally. Using a type that is not marked as Send or Sync with Index can...

RUSTSEC-2020-0149 Data race and memory safety issue in `Index`

The appendix crate implements a key-value mapping data structure called Index that is stored on disk. The crate allows for any type to inhabit the generic K and V type parameters and implements Send and Sync for them unconditionally. Using a type that is not marked as Send or Sync with Index can...

openGauss: Configuring the Maximum Disk Space Occupied by All Audit Log Files

The parameter auditspacelimit specifies the maximum disk space occupied by all audit log files. When the total size of audit log files exceeds the maximum value, the system writes the warning information to the database logs, deletes the earliest audit log files, and records the deletion to the...

CVE-2020-8276

The implementation of Brave Desktop's privacy-preserving analytics system P3A between 1.1 and 1.18.35 logged the timestamp of when the user last opened an incognito window, including Tor windows. The intended behavior was to log the timestamp for incognito windows excluding Tor windows. Note that...