BlackLotus Malware Hijacks Windows Secure Boot Process

Researchers have discovered malware that "can hijack a computer’s boot process even when Secure Boot and other advanced protections are enabled and running on fully updated versions of Windows." Dubbed BlackLotus, the malware is whats known as a UEFI bootkit. These sophisticated pieces of malware...

Important Photon OS Security Update - PHSA-2023-4.0-0315

Updates of 'e2fsprogs' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-0314

Updates of 'apache-tomcat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0310

Updates of 'squid', 'systemd' packages of Photon OS have been released...

New UFEI Rootkit

Kaspersky is reporting on a new UFEI rootkit that survives reinstalling the operating system and replacing the hard drive. From an article: The firmware compromises the UEFI, the low-level and highly opaque chain of firmware required to boot up nearly every modern computer. As the software that...

CVE-2022-30621 Cellinx NVT – IP PTZ Camera local file inclusion

Allows a remote user to read files on the camera's OS "GetFileContent.cgi". Reading arbitrary files on the camera's OS as root user...

CVE-2022-32212

CVE-2022-32212 is a Node.js OS Command Injection due to an insufficient IsAllowedHost validation, enabling rebinding attacks. Affected versions are Node.js <14.20.0, <16.20.0, and

June 14, 2022—KB5014697 (OS Build 22000.739)

None None...

Important Photon OS Security Update - PHSA-2022-0192

Updates of 'ncurses' packages of Photon OS have been released...

frr bug fix and enhancement update

An update is available for frr. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...

Security Bulletin: Publicly disclosed vulnerability (CVE-2021-4034) in Polkit affects IBM Netezza PDA OS Security

Summary Polkit is shipped with PDA OS Security kits. This Bulletin provides mitigation for the reported CVE Vulnerability Details CVEID: CVE-2021-4034 DESCRIPTION: Polkit could allow a local authenticated attacker to gain elevated privileges on the system, caused by incorrect handling of the...

November 9, 2021—KB5007206 (OS Build 17763.2300)

None None...

Important Photon OS Security Update - PHSA-2021-4.0-0112

Updates of 'kubernetes' packages of Photon OS have been released...

ROS-2-985

2.985 Denial of Service in Libxml2 CVE-2021-3541 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to insufficient validation of user input. A remote attacker can pass specially crafted input data to an...

Important Photon OS Security Update - PHSA-2021-0084

Updates of 'ruby' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2021-0424

Updates of 'util-linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0036

Updates of 'apache-ant' packages of Photon OS have been released...

Unnamed Vulnerability in Juniper Networks Junos OS (CNVD-2021-37737)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for use with Juniper Networks hardware devices. The operating system provides a secure programming interface and the Junos SDK.Junos OS Evolved is an upgraded version of Junos OS. Junos OS has a security...

Moderate Photon OS Security Update - PHSA-2021-0230

Updates of 'binutils' packages of Photon OS have been released...

Arbitrary Code Execution

u-boot is vulnerable to arbitrary ry code execution. The boot loader in Das U-Boot mishandles a modified FIT and allows an attacker to execute arbitrary code on the host OS...