Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)

Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)

Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)

Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

RUSTSEC-2021-0113 AtomicBucket<T> unconditionally implements Send/Sync

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

AtomicBucket<T> unconditionally implements Send/Sync

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

PT-2021-7757 · Red Hat +6 · 389 Directory Server +7

Name of the Vulnerable Software and Affected Versions: 389 Directory Server versions affected versions not specified Description: The issue is related to a NULL pointer dereference error. An authenticated attacker can cause a crash by using a specially crafted query with a sync repl client in...

March 29, 2021—KB5000842 (OS Builds 19041.906 and 19042.906) Preview

None None...

Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)

Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)

Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)

Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

CVE-2021-28147: Undefined Security Weakness

The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated...

CVE-2021-28146: Incorrect Authorization

The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team...

@eik/core (>=1.0.0-alpha.19, <=1.2.6), @eik/service (>=1.0.0-alpha.13, <=1.2.32) +2 more potentially affected by CVE-2021-27290 via ssri (8.0.0)

ssri NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ssri and may be impacted: - @eik/core =1.0.0-alpha.19, =1.0.0-alpha.13, =26.4.0, =2.4.7, =2.5.4 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

byte-common (1.0.0), registry-sync (>=2.4.1, <=2.4.6) potentially affected by CVE-2021-27290 via ssri (>=7.0.0, <=7.1.0)

ssri NPM version =7.0.0, =2.4.1, =2.4.6 Source cves: CVE-2021-27290 Source advisory: OSV:GHSA-VX3P-948G-6VHQ...

Unspecified Vulnerability in Rust (CNVD-2021-17257)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in internment crate before 0.4.2 for Rust, which stems from an unconditional implementation of Sync that results in memory-corrupted data contention. No detailed vulnerability...

CVE-2021-28037

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern...

Memory corruption

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern...

CVE-2021-28037

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern...

CVE-2021-28037: Undefined Security Weakness

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.19 and fixes at least the following security issues: An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An...