CVE-2023-49721

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot...

UBUNTU-CVE-2023-48733

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot...

PT-2024-13784 · Canonical · Lxd

Name of the Vulnerable Software and Affected Versions: LXD affected versions not specified Description: The issue is related to an insecure default setting that allows the UEFI Shell in EDK2, which was left enabled in LXD. This setting enables an OS-resident attacker to bypass Secure Boot...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Boot arbitrary denial of service vulnerability ( CVE-2023-34055)

Summary Potential VMware Tanzu Spring Boot arbitrary denial of service vulnerability CVE-2023-34055 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details...

February 13, 2024—KB5034767 (OS Build 14393.6709) - EXPIRED

None None...

February 13, 2024—KB5034774 (OS Build 10240.20469) - EXPIRED

None None...

February 13, 2024—KB5034769 (OS Build 25398.709)

None None...

February 13, 2024—KB5034770 (OS Build 20348.2322)

None None...

February 13, 2024—KB5034766 (OS Build 22000.2777)

None None...

February 13, 2024—KB5034768 (OS Build 17763.5458) - EXPIRED

None None...

PT-2024-2694 · Intel · Intel One Boot Flash Update

Name of the Vulnerable Software and Affected Versions: Intel One Boot Flash Update OFU versions prior to 14.1.31 Description: The issue is related to a protection mechanism failure in the Intel One Boot Flash Update OFU software, which may allow an authenticated user to potentially enable...

KB5034862: Servicing stack update for Windows Server 2016: February 13, 2024

None None...

This Week in Spring - February 14th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! Friends, tomorrow is Valentine's day, and I love Spring. So, it's a very exciting thing indeed to be able to share this week's jam-packed roundup. Let's dive right into it! Spring Tools 4.21.1 is now available In the latest...

KB5034864: Servicing stack update for Windows 10: February 13, 2024

None None...

KB5034868: Servicing stack update for Windows Server 2012: February 13, 2024

KB5034868: Servicing stack update for Windows Server 2012: February 13, 2024 REMINDER Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until the final date...

KB5034866: Servicing stack update for Windows Server 2012 R2: February 13, 2024

KB5034866: Servicing stack update for Windows Server 2012 R2: February 13, 2024 REMINDER Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend upgrading the...

PT-2024-7718 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the handling of quirks applicable to ACPI-based platforms in the Linux kernel. While refactoring the way the ITSs are probed, the handling of these quirks was...

PT-2024-1819 · Lenovo · Lenovo Thinksystem Sr670V2

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 Description: The issue is related to Lenovo ThinkSystem SR670V2 servers being left in Manufacturing Mode, which could allow an attacker with privileged...

The vulnerability of the Grub2 operating system loader, related to writing beyond the boundary during the processing of split HTTP headers, allows a hacker to cause a service failure.

The vulnerability of the Grub loader is related to writing beyond the boundaries during the processing of split HTTP headers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the shim_lock component in the Grub2 operating system allows a hacker to break the trust chain of secure loading.

The vulnerability of the shimlock component in the Grub2 operating system is related to the loading of non-atomic files into the secure boot mechanism that supports shim. Exploiting this vulnerability can allow an attacker to break the trust chain of the secure boot mechanism...