OPENSUSE-SU-2022:0085-1 Security update for chromium

This update for chromium fixes the following issues: Update to version 99.0.4844.74 boo1197163 CVE-2022-0971: Use after free in Blink Layout CVE-2022-0972: Use after free in Extensions CVE-2022-0973: Use after free in Safe Browsing CVE-2022-0974: Use after free in Splitscreen CVE-2022-0975: Use...

Stable Channel Update for Desktop

The Stable channel has been updated to 98.0.4758.102 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 98.0.4758.102 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

The vulnerability of the application’s web interface for automated internal and external IT audits. McAfee Policy Auditor allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the application’s web interface for automating internal and external IT audits, as provided by McAfee Policy Auditor, is related to the failure to protect the structure of the web page when processing the profileNodeID parameter. Exploitation of this vulnerability allows a...

The vulnerability of the application’s web interface for automated internal and external IT audits. McAfee Policy Auditor allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the application’s web interface for automating internal and external IT audits, as provided by McAfee Policy Auditor, is related to the failure to protect the structure of the web page when processing the UID request parameter. Exploiting this vulnerability allows a malicious...

McAfee Policy Auditor Cross-Site Scripting Vulnerability

McAfee Policy Auditor is an agent-based IT assessment solution that leverages the Security Content Automation Protocol SCAP to automate the processes required for internal and external IT and security audits.A reflective cross-site scripting vulnerability exists in versions of McAfee Policy Audit...

Summer2021-No.110 操作系统安全漏洞扫描与报警项目

This is a Python script for a Linux operating system risk assessment tool called Euler Guardian. The script is designed to perform various checks on the system, including firewall configuration, open ports, and system information. It also includes a module for sending email notifications. The...

Stable Channel Update for Desktop

The Stable channel has been updated to 94.0.4606.71 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 94.0.4606.71 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

Stable Channel Update for Desktop

The Stable channel has been updated to 93.0.4577.82 for Windows, Mac and Linux which will roll out over the coming days/weeks A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

CVE-2021-35223

The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution...

How to prepare for CMMC compliance as a defense industrial base supplier using the Microsoft cloud

In 2020, the US Department of Defense DoD began the phased rollout of a new framework for protecting their supply chain, known as the defense industrial base DIB. This new Cybersecurity Maturity Model Certification1 CMMC system requires regular audits that will bolster the security of the DIB,...

OPENSUSE-SU-2021:1180-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 92.0.4515.159 boo1189490: CVE-2021-30598: Type Confusion in V8 CVE-2021-30599: Type Confusion in V8 CVE-2021-30600: Use after free in Printing CVE-2021-30601: Use after free in Extensions API CVE-2021-30602: Use after free in WebRTC...

OPENSUSE-SU-2021:1172-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 92.0.4515.159 boo1189490: CVE-2021-30598: Type Confusion in V8 CVE-2021-30599: Type Confusion in V8 CVE-2021-30600: Use after free in Printing CVE-2021-30601: Use after free in Extensions API CVE-2021-30602: Use after free in WebRTC...

Stable Channel Update for Desktop

The Stable channel has been updated to 92.0.4515.131 for Windows, Mac and Linux which will roll out over the coming days/weeks A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

OPENSUSE-SU-2021:1074-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 91.0.4472.164 boo1188373 CVE-2021-30559: Out of bounds write in ANGLE CVE-2021-30541: Use after free in V8 CVE-2021-30560: Use after free in Blink XSLT CVE-2021-30561: Type Confusion in V8 CVE-2021-30562: Use after free in WebSerial...

OPENSUSE-SU-2021:1073-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 91.0.4472.164 boo1188373 CVE-2021-30559: Out of bounds write in ANGLE CVE-2021-30541: Use after free in V8 CVE-2021-30560: Use after free in Blink XSLT CVE-2021-30561: Type Confusion in V8 CVE-2021-30562: Use after free in WebSerial...

CVE-2021-36383

Xen Orchestra with xo-web through 5.80.0 and xo-server through 5.84.0 mishandles authorization, as demonstrated by modified WebSocket resourceSet.getAll data is which the attacker changes the permission field from none to admin. The attacker gains access to data sets such as VMs, Backups, Audit,...

OPENSUSE-SU-2021:0881-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 91.0.4472.101 boo1187141 CVE-2021-30544: Use after free in BFCache CVE-2021-30545: Use after free in Extensions CVE-2021-30546: Use after free in Autofill CVE-2021-30547: Out of bounds write in ANGLE CVE-2021-30548: Use after free in...

Andrew Appel on New Hampshire’s Election Audit

Really interesting two part analysis of the audit conducted after the 2020 election in Windham, New Hampshire. Based on preliminary reports published by the team of experts that New Hampshire engaged to examine an election discrepancy, it appears that a buildup of dust in the read heads of...

Stable Channel Update for Desktop

The Stable channel has been updated to 90.0.4430.85 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...

Stable Channel Update for Desktop

The Stable channel has been updated to 89.0.4389.90 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...