Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2020:0917-1 Rating: important References: Cross-References: CVE-2020-6464 CVE-2020-6831 Affected Products: openSUSE Leap 15.2:NonFree An update that fixes two vulnerabilities is now available. Description: This updat...

Citrix Workspace app 2006.1 for Windows takes long time to launch ICA session

Citrix Workspace app 2006.1 for Windows takes long time to launch ICA session, comparing toCitrix Workspace app 1912 for Windows. In a Fiddler trace captured during session launch, you will see wfica32 attempting to connect tolocus.analytics.cloud.com:443 but failing...

openSUSE Security Update : opera (openSUSE-2020-709)

This update for opera fixes the following issues : Opera was updated to version 68.0.3618.104 - CHR-7909 Update chromium on desktop-stable-81-3618 to 81.0.4044.138 - CVE-2020-6831, CVE-2020-6464 - DNA-85609 Mac Tabs shrinking & disappearing - DNA-85629 Crash at...

PYSEC-2020-149

The encodeinvalidchars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service CPU consumption because of an inefficient algorithm. The percentencodings array contains all matches of percent encodings. It is not deduplicated. For a URL of length ...

Control domain memory leak issue on Citrix Hypervisor 8.0 when GPU in use

1. Any operation on VMs start, shutdown, creating and removing snapshot etc. with GPU are extremely slow 2. Citrix Hypervisor 8.0 freezing when GPU in use...

PYSEC-2019-12

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to the behaviour of the underlying HTMLParser, django.utils.html.striptags would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities...

PYSEC-2019-82

An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. Due to the behaviour of the underlying HTMLParser, django.utils.html.striptags would be extremely slow to evaluate certain inputs containing large sequences of nested incomplete HTML entities...

openSUSE Security Update : spice (openSUSE-2019-167)

This update for spice fixes the following issues : Security issue fixed : - CVE-2019-3813: Fixed a out-of-bounds read in the memslotgetvirt function that could lead to denial-of-service or code-execution bsc1122706. Non-security issue fixed : - Include spice-server tweak to compensate for...

GHSA-GX96-VGF7-HWFG In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

DEBIAN-CVE-2018-8005

When there are multiple ranges in a range request, Apache Traffic Server ATS will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgra...

High CPU Utilization on PVS 7.6 Servers

PVS 7.6: High CPU Utilization...

SUSE-SU-2018:0582-1 Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP2)

This update for the Linux Kernel 4.4.103-9256 fixes several issues. The following security issue was fixed: - CVE-2017-18075: crypto/pcrypt.c in the Linux kernel mishandled freeing instances, allowing a local user able to access the AFALG-based AEAD interface CONFIGCRYPTOUSERAPIAEAD and pcrypt...

Windows 10 PVS target devices experience poor performance

After capturing a Windows 10 vdisk you might experience below par performance when streaming the vdisk to the target device. The issue can manifest in a number of ways, for example: 1. Long time to capture the vdisk. 2. Slow boot/login times. 3. Slow file transfer speeds compared to other...

VMs Freezing or Poor Performance (xenvbd event ID 129)

VMs are encountering hang or poor performance issue related with disk I/O. xenvbd event ID 129 . From VM event log: ++++++++++ xenvbd event ID 129 \Device\RaidPort0 reset ++++++++++ - From XenServer messages log: ++++++++++ messages.1: Mar 8 14:11:35 MXVDIS01X tap-ctl1481: tap-err:tapctlreadraw:...

RDS redirected resources showing degraded performance in Windows 8.1 or Windows Server 2012 R2

RDS redirected resources showing degraded performance in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs on a Remote Desktop Session host that‘s running Windows 8.1 or Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you...

Security update for the Linux Kernel (important)

The openSUSE 13.1 kernel was updated to 3.12.67 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2013-5634: arch/arm/kvm/arm.c in the Linux kernel on the ARM platform, when KVM is used, allowed host OS users to cause a denial of service NULL pointer...

Bad performance over SSL protocol on NetScaler VPX 11.0 and VPX 10.5 release

Symptoms: Customer experiencing performance over SSL protocol on NetScaler VPX 11.62.10 in one arm deployment. Environment: We have NS VPX 1000 Platinum license no packet drops caused by rate limiting and it's config spec is 4vCPUs and 4GB of RAM, NIC 1000E full duplex speed. The NS appliance is...

openSUSE Security Update : curl (openSUSE-2016-1124)

This update for curl fixes the following issues : Security issues fixed : - CVE-2016-5419: TLS session resumption client cert bypass bsc991389 - CVE-2016-5420: Re-using connections with wrong client cert bsc991390 - CVE-2016-5421: use of connection struct after free bsc991391 - CVE-2016-7141: Fix...

Ovs-vswitchd daemon showing high CPU usage

XenServer 6.5 SP1 heavy IO traffic/ CPU utilization with open vswitch technology. Ovs-vswitchd daemon running on the XS was showing high CPU usage and performance tab shows heavy CPU usage...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2016:2330-1)

This update for curl fixes the following issues: Security issues fixed : - CVE-2016-5419: TLS session resumption client cert bypass bsc991389 - CVE-2016-5420: Re-using connections with wrong client cert bsc991390 - CVE-2016-5421: use of connection struct after free bsc991391 - CVE-2016-7141: Fixe...