This Week in Spring - July 12th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you? This week Im writing you from sunny Seattle, Washington, where were having our next installment of the SpringOne Tour series. Its been a ton of fun seeing all these fun and friendly faces again and getting to see...

PT-2022-3640 · Lenovo · Systemloaddefaultdxe Driver

Name of the Vulnerable Software and Affected Versions: Lenovo Notebook products affected versions not specified Description: A buffer overflow in the SystemLoadDefaultDxe driver may allow an attacker with local privileges to execute arbitrary code. The issue is related to the SystemLoadDefaultDxe...

The vulnerability of AMD’s microprogramming software for processors, related to the reordering of load instructions, allows attackers to gain unauthorized access to protected information.

The vulnerability of AMD’s microprogrammed software for processors is related to the reordering of load instructions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

h2: Loading of custom classes from remote servers through JNDI

A flaw was found in the H2 Console. This flaw allows remote attackers to execute arbitrary code via a JDBC URL, concatenating with a substring that allows remote code execution by using a script...

Fedora: Security Advisory for dnscrypt-proxy (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

How to Configure RDP Load Balancing by Using Remote Desktop Gateway Server on NetScaler Appliance

This article describes how to configure the Remote Desktop Protocol RDP server load balancing by using a Remote Desktop Gateway server on a NetScaler appliance. Background A Remote Desktop Gateway server is a gateway that enables authorized users to connect to remote computers on a corporate...

CLSA-2022-1656959440 Fixed CVE-2016-10009 in openssh-5.3p1

CVE-2016-10009: add whitelist of paths which may ssh-agent load from in order to prevent execution of arbitrary local pkcs11...

[SECURITY] Fedora 36 Update: dnscrypt-proxy-2.1.1-4.fc36

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2. Features: - DNS traffic encryption and authentication. Supports DNS-over-HTTPS DoH and DNSCrypt. - DNSSEC compatible - DNS query monitoring, with separate log files for regular and...

Deserialization Of Untrusted Data

opensearch-ruby is vulnerable to deserialization of untrusted data. The vulnerability exists due to the unsafe deserialization of response.body data in YAML.load functionality in the verifyopensearch function of pensearch.rb...

ruby:2.6 security, bug fix, and enhancement update

ruby 2.6.10-109 - Upgrade to Ruby 2.6.10. Resolves: rhbz2088415 - Fix buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9...

The vulnerability of the `load_elf_binary()` function in the Linux operating system’s kernel allows a hacker to bypass the ASLR protection and expose the protected information.

The vulnerability of the loadelfbinary function in the Linux operating system’s kernel arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism and disclose the protected information...

RSSHub 资源管理错误漏洞

RSSHub is an RSS feed generator written in Node.js, distributed under the MIT license and maintained by DIYgod and other GitHub users. A resource management error vulnerability exists in versions of RSSHub prior to 2020-02-09, which stems from the fact that parameters such as filter and filterout...

GSD-2022-1003375 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1002816 drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo

drm/amdgpu/ucode: Remove firmware load type check in amdgpuucodefreebo This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

The vulnerability of the Yandex Browser, related to errors in processing symbolic links, allows attackers to escalate their privileges.

The vulnerability of the Yandex Browser is related to errors in processing symbolic links when loading the installation file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Malicious code in load-date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5e61507806967bd7bdac762e3f0f48883157def37151eacca646713cd2fc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-exif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4338 Malicious code in load-image-exif (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c314aa9b8893f20f40e6ab9b53ab508347aa09e376589762f1a429e1cdd33a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4339 Malicious code in load-image-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c70a04dee1e95def698964376115865ad76594c55a641097c8d07afaaa9b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in load-image-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c70a04dee1e95def698964376115865ad76594c55a641097c8d07afaaa9b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...