Security Bulletin: IBM MQ is affected by a privilege escalation vulnerability in IBM WebSphere Application Server Liberty (CVE-2025-14915)

Summary IBM WebSphere Application Server Liberty is used by IBM MQ as part of the IBM MQ Console and IBM MQ REST API functionality CVE-2025-14915 Vulnerability Details CVEID:CVE-2025-14915 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 7 (6.2.1-97)

This update provides stability fixes and support for cumulative updates. Clusters running version 6.2.1 or later can now upgrade directly to the latest available version in a single step. Vulnerability id: VSTOR-91715 Failed to retry updating the kernel. Vulnerability id: VSTOR-93149, VSTOR-10082...

Hotfix update for Exchange Server 2019 CU15: April 18, 2025 (KB5050672)

Hotfix update for Exchange Server 2019 CU15: April 18, 2025 KB5050672 Hotfix update for Microsoft Exchange Server 2019 CU15 was released on April 18, 2025. It includes fixes for non-security issues and introduces new features. These fixes and features will also be included in later cumulative...

April 8, 2025-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5055687)

April 8, 2025-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 KB5055687 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4.6.2 IMPORTANT This update is included in th...

February 11, 2025—KB5052038 (Monthly Rollup)

February 11, 2025—KB5052038 Monthly Rollup End of support information Windows Server 2008 Premium Assurance ends on January 13, 2026.Windows Server 2008 SP2 Extended Security Updates ESU ended on January 10, 2023. Additionally, Extended Security Updates on Azure only support ended on January 9,...

Hyper-V Resilient Change Tracking Performance Issues

Challenge General Hyper-V OS performance degradation can occur when using a backup solution to export Hyper-V VM snapshots during backup operations. Solution Based on investigations between Veeam and Microsoft, two underlying causes have been identified. Resilient Change Tracking Resilient Change...

January 14, 2025-Security Only Update for .NET Framework 4.6.2 for Windows Server 2008 SP2 (KB5050181)

January 14, 2025-Security Only Update for .NET Framework 4.6.2 for Windows Server 2008 SP2 KB5050181 Applies to: Microsoft .NET Framework 4.6.2 Summary Note Starting in July 2020, there will no longer be optional, non-security releases known as "C" releases for this operating system. Operating...

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

Description of the security update for SharePoint Server 2019: September 10, 2024 (KB5002639)

Description of the security update for SharePoint Server 2019: September 10, 2024 KB5002639 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability, and Microsoft SharePoint Server denial of service vulnerability. To learn more about the...

OPENSUSE-SU-2023:0384-1 Security update for python-django-grappelli

This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks boo1216481 - Fixed: Redirect with switch user. - Improved: Remove extra filtering in AutocompleteLookup. - Improved: Added impo...

Microsoft Exchange Server Security Vulnerability

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. The vulnerability is exploited by...

KB5031539: Servicing stack update for Windows 10, version 21H2 and 22H2: October 10, 2023

KB5031539: Servicing stack update for Windows 10, version 21H2 and 22H2: October 10, 2023 REMINDER Windows 10, version 2004 reached the end of servicing EOS on December 14, 2021 for all editions. For more information, see here. To continue receiving security and quality updates, we recommend that...

Released Updates for Microsoft Dynamics 365 Business Central 2019 Release Wave 2

None Summary This article lists cumulative updates which have been released for Microsoft Dynamics 365 Business Central.A cumulative update is a cumulative set of files that includes all hotfixes and regulatory features that have been released for Microsoft Dynamics 365 Business Central.The lates...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. The following products and versions a...

Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability

UPDATE July 12, 2022: As part of the response by Microsoft, a defense in depth variant has been found and fixed in the Windows July cumulative updates. Microsoft recommends installing the July updates as soon as possible. Windows Version Link to KB article LInk to Catalog Windows 8.1, Windows...

Vulnerabilities fixed in VMWare products

VMware has fixed two vulnerabilities in Workspace ONE Access, Identity Manager, vRealize Automation, Cloud Foundation and vRealize Suite Lifecycle Manager. An unauthenticated malicious person with access to the management environment could potentially exploit the vulnerabilities to gain gain...

Microsoft Exchange Server 权限许可和访问控制问题漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A vulnerability exists in Microsoft Exchange Server with privilege permission and access control...

Microsoft Releases Out-of-Band Security Updates for PrintNightmare

Microsoft has released out-of-band security updates to address a remote code execution RCE vulnerability—known as PrintNightmare CVE-2021-34527—in the Windows Print spooler service. According to the CERT Coordination Center CERT/CC, “The Microsoft Windows Print Spooler service fails to restrict...

KB3123299 - Cumulative update package 1 for SQL Server 2012 SP3

KB3123299 - Cumulative update package 1 for SQL Server 2012 SP3 This article describes cumulative update package 1 Build number: 11.0.6518.0 for Microsoft SQL Server 2012 Service Pack 3 SP3. This update contains fixes that were released after the release of SQL Server 2012 SP3. Notes Cumulative...

KB2979597 - SQL Server 2008 R2 Service Pack 3 release information

KB2979597 - SQL Server 2008 R2 Service Pack 3 release information Summary This article contains important information to read before you install Microsoft SQL Server 2008 R2 Service Pack 3 SP3. It describes how to obtain the service pack, the list of fixes included in the service pack, how to...