SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3933-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3933-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: ...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3941-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3941-1 advisory. The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: ...

The vulnerability of the parse_reg_exp function in the glibc library, which allows a hacker to cause a service failure

The vulnerability of the parseregexp function in the glibc library is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

SUSE SLES12: kernel-default / kernel-default-base / kernel-default-devel / etc (SUSE-SU-2021:3929-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3929-1 advisory. The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...

Virtuozzo Hybrid Infrastructure 4.6 Update 2.1

This update provides bug fixes for the upgrade procedure with the deployed compute cluster. Vulnerability id: VSTOR-48639, VSTOR-45993 Entering maintenance fails due to VM migration errors...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.6 and fixes at least the following security issues: A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video card physically without power-off,...

Omicron Phishing Scam Already Spotted in UK

The global pandemic has provided cover for all sorts of phishing scams over the past couple of years, and the rise in alarm over the spread of the latest COVID-19 variant, Omicron, is no exception. As public health professionals across the globe grapple with what they fear could be an even more...

OPENSUSE-SU-2021:1524-1 Security update for tor

This update for tor fixes the following issues: tor 0.4.6.8: Improving reporting of general overload state for DNS timeout errors by relays Regenerate fallback directories for October 2021 Bug fixes for onion services CVE-2021-22929: do not log v2 onion services access attempt warnings on disk...

The vulnerability of the Adobe Experience Manager content and media management system, related to authentication errors, allows a perpetrator to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

SUSE SLED12: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3877-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3877-1 advisory. The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs...

The vulnerability of the Modbus analyzer component in Wireshark allows a hacker to trigger a service failure.

The vulnerability of the Modbus analyzer component in Wireshark relates to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to cause service failures by injecting specially created packets...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3876-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3876-1 advisory. The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were...

SUSE SLES12: kernel-azure / kernel-azure-base / kernel-azure-devel / etc (SUSE-SU-2021:3848-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3848-1 advisory. The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs wer...

SUSE-SU-2021:14848-1 Security update for xen

This update for xen fixes the following issues: - CVE-2021-0089: Fixed Speculative Code Store Bypass XSA-375 bsc1186433. - CVE-2021-20255: Fixed stack overflow via infinite recursion in eepro100 bsc1182654. - CVE-2021-28690: Fixed x86 TSX Async Abort protections not restored after S3 XSA-377...

The vulnerability of the Mozilla Firefox browser, related to security configuration errors, allows a hacker to circumvent the established security restrictions.

The vulnerability of the Mozilla Firefox browser is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to circumvent established security restrictions...

The vulnerability of the Mozilla Firefox browser, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Mozilla Firefox browser is related to errors in the configuration of security rules for iframe-based tables in XSLT stylesheets. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions by using iframes to bypass limitations such as...

The vulnerability of the 3D viewer software, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of the 3D viewer software is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

The vulnerability in the implementation of the IE Mode feature of the Microsoft Edge browser on Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Microsoft Edge browser’s IE Mode implementation on Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to errors in code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to errors in code generation management. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

The vulnerability of the SINEMA Remote Connect VPN service allows a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the SINEMA Remote Connect VPN service lies in configuration errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or increase their privileges...