ALBA-2021:1088 pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker never promotes a bundle until another transition unblocks it BZ1935240 pacemaker generate...

The vulnerability of the dockerd daemon, a deployment and application management automation tool in Docker-enabled environments, relates to a resource consumption control mechanism error. This vulnerability allows attackers to trigger service failures.

The vulnerability of the dockerd daemon, a tool for automating the deployment and management of applications in Docker containerized environments, is related to improper handling of the image manifest file. Exploiting this vulnerability allows an attacker to cause service interruptions...

The vulnerability of the Node.js software platform, related to the presence of localhost6 in the white list, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node.js software platform is related to the presence of localhost6 in the white list. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the SLURM resource manager involves bypassing authentication by using an alternative path or channel. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SLURM resource manager relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the implementation of the usbip_sockfd_store function in Linux kernel allows a hacker to induce a service failure.

The vulnerability in the implementation of the usbipsockfdstore function in Linux operating system kernels is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `srun --uid` command for SLURM resource managers stems from insecure privilege management. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the srun --uid command used by SLURM resource managers is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the implementation of the fifth-generation network division mechanism (5G networks) into multiple independent virtual networks through “Network Slicing” arises from the lack of correlation between identifiers at the application layer and the transport layer. This allows attackers to disclose information about arbitrary network segments or cause service failures.

The vulnerability of the 5G network segmentation mechanism, which involves dividing the network into multiple independent virtual networks, is related to the lack of correlation between identifiers at the application layer and the transport layer. Exploiting this vulnerability can allow a malicio...

The vulnerability of Cisco IOS XE routers in the Network Convergence System 520 Series allows a attacker to cause a service failure.

The vulnerability of Cisco IOS XE routers in the Network Convergence System 520 Series is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the salt-netapi component in the Configuration Management system and remote execution of Salt operations, due to insufficient input data validation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the salt-netapi component in the Configuration Management system and remote Salt execution operations is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and...

The vulnerability of the configuration management system and remote execution of operations, related to the lack of measures to neutralize special elements, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cau...

The vulnerability of the WebReports server lies in the improper limitation of XML links to external objects. This allows attackers to disclose protected information or cause service failures.

The vulnerability of the WebReports report server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

The vulnerability of the slapd process in the OpenLDAP package, which allows a hacker to trigger a service failure.

The vulnerability of the slapd process in the OpenLDAP package is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the unix_stream_recvmsg function in Linux operating system kernels, which allows a hacker to cause a service failure

The vulnerability of the unixstreamrecvmsg function in Linux operating system kernels is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to security flaws in service data protection. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Vulnerability of the check_output function in output.c. SUID in a isolated programming environment. Firejail, due to the lack of measures to neutralize special elements, allows a violator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the checkoutput function of output.c, with the SUID attribute and a isolated programming environment like Firejail, is related to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow an attacker to access confidential data, compromise i...

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism, related to integer overflow of the value, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Sympa mailing list manager, related to a bug in the resource consumption monitoring mechanism, allows a violator to trigger a service failure.

The vulnerability of the Sympa mailing list manager is related to the improper handling of incorrect parameters. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the DNS server service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the DNS server service for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the DNS server service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the DNS server service in Windows operating systems is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of Google Chrome’s SwiftShader component relates to the issue of allowing operations to exceed the permissible buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s SwiftShader component relates to the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability can allow remote attackers to gain access to confidential data, compromise its integrity, and cause service failures...