openSUSE Security Update : Mozilla Firefox (openSUSE-2018-1268)

This update for Mozilla Firefox to version 60.3.0esr fixes security issues and stability bugs. The following security issues were fixed MFSA 2018-27, boo1112852 : - CVE-2018-12392: Crash with nested event loops - CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript ...

Security update for Mozilla Firefox (important)

This update for Mozilla Firefox to version 60.3.0esr fixes security issues and stability bugs. The following security issues were fixed MFSA 2018-27, boo1112852: - CVE-2018-12392: Crash with nested event loops - CVE-2018-12393: Integer overflow during Unicode conversion while loading JavaScript -...

SUSE-SU-2018:2649-2 Security update for java-1_7_1-ibm

This update for java-171-ibm fixes the following issues: Security issues fixed: - CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may allow an attacker to inflict a denial-of-service attack with specially crafted String data. - CVE-2018-1656: Protect against path traversa...

Kernel update: Virtuozzo ReadyKernel patch 63.0 for Virtuozzo 7.0.4 to 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to all supported Virtuozzo kernels. Vulnerability id: PSBM-88809 Potential kernel crash in ext4closepfcache...

CVE-2018-18070

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route,...

CVE-2018-18070

An issue was discovered in Daimler Mercedes-Benz COMAND 17/13.0 50.12 on Mercedes-Benz C-Class 2018 vehicles. Defining or receiving a specific navigation route might cause the system to freeze and reboot after a few transmissions. When the system next starts, it tries to re-calculate the route,...

Servicing stack update for Windows 10, version 1809: October 9, 2018

None None...

Belkin Wemo-Enabled Crock-Pot Remote Control

This module acts as a simple remote control for Belkin Wemo-enabled Crock-Pots by implementing a subset of the functionality provided by the Wemo App. No vulnerabilities are exploited by this Metasploit module in any way. This module requires Metasploit: https://metasploit.com/download Current...

Critical product update: Virtuozzo Automator 7.0 Update 2 Hotfix 6 (VA MN: 7.0.2-612, VA Agent: 7.0.2-326)

This hotfix for Virtuozzo Automator 7.0.2 provides security and stability fixes. Vulnerability id: CWE-79, PVA-37373 The software did not neutralize or incorrectly neutralized user-controllable input before it was placed in output that was used as a web page that was served to other users...

389 security update

CentOS Errata and Security Advisory CESA-2018:2757 An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20180925)

Security Fixes : - 389-ds-base: race condition on reference counter leads to DoS using persistent search CVE-2018-10850 - 389-ds-base: ldapsearch with server side sort allows users to cause a crash CVE-2018-10935 - 389-ds-base: Server crash through modify command with large DN CVE-2018-14624 -...

Product update: Virtuozzo 7.0 Update 8 Hotfix 4 (7.0.8-524)

This update provides a stability fix. Vulnerability id: PSBM-88673 Windows VMs created on Virtuozzo versions prior to 7.0.6 could fail to boot after installing the latest update...

Kernel update: Virtuozzo ReadyKernel patch 61.0 for Virtuozzo 7.0.4 to 7.0.7 HF3

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.4 to 7.0.7 HF3. Vulnerability id: PSBM-88561 It was found that the implementation of ploop did not handle errors reported by kthreadcreate properly. This could lead to a kernel crash in...

Kernel update: Virtuozzo ReadyKernel patch 61.0 for Virtuozzo 7.0.8 and 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.8 and 7.0.8 HF1. Vulnerability id: PSBM-87836 It was discovered that a container with NFS mounts could keep the files /var/lib/nfs/rpcpipefs/nfs/clntX open, even if no NFS server was...

Product update: Virtuozzo 7.0 Update 8 Hotfix 3 (7.0.8-521)

This update provides stability fixes. Vulnerability id: PSBM-88084 Windows 2012R2 VMs could freeze due to virsh failing to create memory dumps. Vulnerability id: PSBM-88274 Container migration could fail due to a segmentation fault during CRIU restore. Vulnerability id: PSBM-88315 Host CPU could ...

Patch Tuesday, September 2018 Edition

Adobe and Microsoft today each released patches to fix serious security holes in their software. Adobe pushed out a new version of its beleaguered Flash Player browser plugin. Redmond issued updates to address at least 61 distinct vulnerabilities in Microsoft Windows and related programs, includi...

Servicing stack update for Windows 10, version 1803: September 11, 2018

None None...

Kernel update: Virtuozzo ReadyKernel patch 60.0 for Virtuozzo 7.0.4 to 7.0.7

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to Virtuozzo 7.0.4 to 7.0.7. Vulnerability id: PSBM-88082 File systems: insufficient error handling in sget could lead to excessive memory consumption...

Kernel update: Virtuozzo ReadyKernel patch 60.0 for Virtuozzo 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.8 HF1. Vulnerability id: PSBM-73001 sunrpc: potential kernel crash use after free in svcprocesscommon. Vulnerability id: PSBM-87649 Potential out-of-bounds read in fusedevsplicewrite...

Kernel update: Virtuozzo ReadyKernel patch 60.0 for Virtuozzo 7.0.7 to 7.0.8

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo 7.0.7 to 7.0.8. Vulnerability id: PSBM-87665 fusekiopcs: potential kernel crash NULL pointer dereference in pcsmapencodereq. Vulnerability id: PSBM-88082 File systems: insufficient error...