DEBIAN-CVE-2020-14383

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again...

DEBIAN-CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

openSUSE Security Update : podman (openSUSE-2020-2063)

This update for podman fixes the following issues : Security issue fixed : - This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API bsc1176804. Non-security issues fixed : - add dependency to timezone package or podman...

openSUSE Security Update : podman (openSUSE-2020-2039)

This update for podman fixes the following issues : Security issue fixed : - This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API bsc1176804. Non-security issues fixed : - add dependency to timezone package or podman...

UBUNTU-CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:2034-1 Rating: important References: 1050549 1067665 1170630 1172873 1175306 1175721 1176855 1176983 1177397 1177703 1177819 1177820 1178182 1178393 1178589 1178686 1178765 1178782 1178838 1178853...

openGauss: Configuring Kerberos Authentication in openGauss

Use gsom to enable and disable Kerberos authentication in openGauss. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Denial of Service Vulnerability in ZDCC VisualField VFSimpleRpc.dll Component

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A denial-of-service vulnerability exists in the VisualField VFSimpleRpc.dll component of ZDAC, which can be exploited by an attacker to cause the RPC service to...

Driver Disk for Cisco enic 4.0.0.11 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Cisco's enic driver and wish to use the latest version of the following: Driver Module| Version ---|--- enic| 4.0.0.11 Issues Resolved In this Driver Disk Includes general enhancements and bug fixes...

Hotfix XS81E005 - For Citrix Hypervisor 8.1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.1. Note: Ensure that you use XenCenter 8.1.2 or later to install this hotfix. The latest version of XenCenter is available from theCitrix Hypervisor Download site. Information About this Hotfix Component|...

GaussDB Kernel: Setting the Number of Connections Used by System Administrators

sysadminreservedconnections indicates the minimum number of connections reserved for the GaussDB Kernel system administrator. The value of this parameter must be less than that of maxconnections. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

GaussDB Kernel: Setting the Maximum Number of Concurrent Connections to the Database

maxconnections specifies the maximum concurrent connections to the database. Increasing the value of this parameter may cause GaussDB Kernel to request System V to share more memory or semaphore. If this occurs, the shared memory or semaphore will exceed the default value allowed by the OS. When...

GaussDB Kernel: Configuring the WAL Information Recording Level

The parameter wallevel specifies the level of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

Hotfix XS82E008 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX284874 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

Cisco IOS Access Points DoS (cisco-sa-20190717-aironet-dos)

A denial of service DoS vulnerability exists in Cisco IOS Access Points due to a lack of complete error handling condition for client authentication requests sent to a targeted interface configured for FT. An unauthenticated, adjacent attacker can exploit this issue, by sending crafted...

GaussDB Kernel: Configuring the SSL Encryption Algorithm

sslciphers specifies the SSL encryption algorithms used for secure connections. GaussDB Kernel supports the following algorithms: - DHE-RSA-AES128-GCM-SHA256 - DHE-RSA-AES256-GCM-SHA384 - DHE-RSA-AES128-CCM - DHE-RSA-AES256-CCM You are advised to set sslciphers to ALL. Then, GaussDB Kernel uses...

PT-2020-5862 · Containerd +5 · Kubernetes Containerd +4

Name of the Vulnerable Software and Affected Versions: containerd versions prior to 1.3.9 and 1.4.3 Description: The issue is related to the improper exposure of the containerd-shim API to host network containers. Access controls for the shim's API socket verified that the connecting process had ...

CVE-2020-15783

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC TDC CPU555 All versions, SINUMERIK 840D sl All versions. Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port...

CVE-2020-15783

A vulnerability has been identified in SIMATIC S7-300 CPU family incl. related ET200 CPUs and SIPLUS variants All versions, SIMATIC TDC CPU555 All versions, SINUMERIK 840D sl All versions. Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port...

CVE-2020-15783

CVE-2020-15783 affects Siemens devices: SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC TDC CPU555, and SINUMERIK 840D sl (all versions). The issue is described as an Uncontrolled Resource Consumption vulnerability where sending multiple specially crafted packets...