CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-4273)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4273 advisory. - A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the...

CVE-2023-4273 affecting package hyperv-daemons for versions less than 5.15.131.1-1

CVE-2023-4273 affecting package hyperv-daemons for versions less than 5.15.131.1-1. An upgraded version of the package is available that resolves this issue...

AZL-30054 CVE-2023-42753 affecting package hyperv-daemons for versions less than 5.15.133.1-1

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local...

AZL-31642 CVE-2023-4622 affecting package hyperv-daemons for versions less than 5.15.135.1-1

A use-after-free vulnerability in the Linux kernel's afunix component can be exploited to achieve local privilege escalation. The unixstreamsendpage function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unixstreamsendpage could...

CVE-2023-3439 affecting package hyperv-daemons for versions less than 5.15.126.1-1

CVE-2023-3439 affecting package hyperv-daemons for versions less than 5.15.126.1-1. A patched version of the package is available...

[SECURITY] Fedora 38 Update: libreswan-4.12-1.fc38

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

CVE-2023-1998 affecting package hyperv-daemons 5.10.188.1-1

CVE-2023-1998 affecting package hyperv-daemons 5.10.188.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-0386 affecting package hyperv-daemons 5.10.185.1-1

CVE-2023-0386 affecting package hyperv-daemons 5.10.185.1-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: hyperv-daemons / kernel (CVE-2023-38409)

The version of hyperv-daemons / kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38409 advisory. - An issue was discovered in setcon2fbmap in drivers/video/fbdev/core/fbcon.c in the Linux...

CVE-2023-38432 affecting package hyperv-daemons for versions less than 5.15.122.1-1

CVE-2023-38432 affecting package hyperv-daemons for versions less than 5.15.122.1-1. A patched version of the package is available...

CVE-2023-38409 affecting package hyperv-daemons for versions less than 5.15.122.1-1

CVE-2023-38409 affecting package hyperv-daemons for versions less than 5.15.122.1-1. A patched version of the package is available...

CVE-2023-1998 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-1998 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

CVE-2023-3359 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-3359 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

CVE-2023-1989 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-1989 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

CVE-2023-25012 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-25012 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

CVE-2023-21102 affecting package hyperv-daemons for versions less than 5.15.118.1-1

CVE-2023-21102 affecting package hyperv-daemons for versions less than 5.15.118.1-1. A patched version of the package is available...

SUSE-SU-2023:3043-1 Security update for libvirt

This update for libvirt fixes the following issues: Security fixes: - CVE-2023-3750: Fixed mproper locking in virStoragePoolObjListSearch that may lead to denial of service bsc1213447. Other fixes: - build library with support for modular daemons bsc1213352...

AZL-33496 CVE-2023-3773 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A flaw was found in the Linux kernel’s IP framework for transforming packets XFRM subsystem. This issue may allow a malicious user with CAPNETADMIN privileges to cause a 4 byte out-of-bounds read of XFRMAMTIMERTHRESH when parsing netlink attributes, leading to potential leakage of sensitive heap...

AZL-33497 CVE-2023-3772 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A flaw was found in the Linux kernel’s IP framework for transforming packets XFRM subsystem. This issue may allow a malicious user with CAPNETADMIN privileges to directly dereference a NULL pointer in xfrmupdateaeparams, leading to a possible kernel crash and denial of service...

AZL-27637 CVE-2023-33951 affecting package hyperv-daemons for versions less than 5.15.158.1-1

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...