CVE-2023-31436 affecting package hyperv-daemons for versions less than 5.15.111.1-1

CVE-2023-31436 affecting package hyperv-daemons for versions less than 5.15.111.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-23000 affecting package hyperv-daemons for versions less than 5.15.111.1-1

CVE-2023-23000 affecting package hyperv-daemons for versions less than 5.15.111.1-1. An upgraded version of the package is available that resolves this issue...

AZL-26872 CVE-2023-21102 affecting package hyperv-daemons for versions less than 5.15.118.1-1

In efirtasmwrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

Fedora: Security Advisory for libreswan (FEDORA-2023-30f824b8b8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: libreswan-4.11-1.fc37

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 38 Update: libreswan-4.11-1.fc38

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 36 Update: libreswan-4.11-1.fc36

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

CVE-2023-1652 affecting package hyperv-daemons 5.10.174.1-1

CVE-2023-1652 affecting package hyperv-daemons 5.10.174.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-1670 affecting package hyperv-daemons 5.10.174.1-1

CVE-2023-1670 affecting package hyperv-daemons 5.10.174.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-1855 affecting package hyperv-daemons 5.10.174.1-1

CVE-2023-1855 affecting package hyperv-daemons 5.10.174.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-1990 affecting package hyperv-daemons 5.10.174.1-1

CVE-2023-1990 affecting package hyperv-daemons 5.10.174.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-30772 affecting package hyperv-daemons 5.10.174.1-1

CVE-2023-30772 affecting package hyperv-daemons 5.10.174.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-1855 affecting package hyperv-daemons for versions less than 5.15.107.1-1

CVE-2023-1855 affecting package hyperv-daemons for versions less than 5.15.107.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-1670 affecting package hyperv-daemons for versions less than 5.15.107.1-1

CVE-2023-1670 affecting package hyperv-daemons for versions less than 5.15.107.1-1. An upgraded version of the package is available that resolves this issue...

AZL-26668 CVE-2023-31436 affecting package hyperv-daemons for versions less than 5.15.111.1-1

qfqchangeclass in net/sched/schqfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQMINLMAX...

AZL-28505 CVE-2023-31084 affecting package hyperv-daemons for versions less than 5.15.158.2-1

An issue was discovered in drivers/media/dvb-core/dvbfrontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASKRUNNING. In dvbfrontendgetevent, waiteventinterruptible is called; the condition is dvbfrontendtesteventfepriv,events. In dvbfrontendtestevent,...

AZL-34803 CVE-2023-31084 affecting package hyperv-daemons for versions less than 6.6.35.1-1

An issue was discovered in drivers/media/dvb-core/dvbfrontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASKRUNNING. In dvbfrontendgetevent, waiteventinterruptible is called; the condition is dvbfrontendtesteventfepriv,events. In dvbfrontendtestevent,...

[SECURITY] Fedora 38 Update: libreswan-4.10-1.fc38

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

[SECURITY] Fedora 37 Update: libreswan-4.10-1.fc37

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

AZL-26234 CVE-2023-1998 affecting package hyperv-daemons for versions less than 5.15.118.1-1

The Linux kernel allows userspace processes to enable mitigations by calling prctl with PRSETSPECULATIONCTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel still left the victim process exposed to...