August 9, 2022—KB5016627 (OS Build 20348.887)

None None...

dbx-deploy (0.6.1), eflow (0.1.3) +1 more potentially affected by CVE-2021-32862 via nbconvert (5.6.0)

nbconvert PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - dbx-deploy 0.6.1 - eflow 0.1.3 - mltronsautodataprep =0.0.12, =0.0.13 Source cves: CVE-2021-32862 Source advisory: OSV:PYSEC-2022-249...

dbx-deploy (0.6.1), eflow (0.1.3) +1 more potentially affected by CVE-2021-32862 via nbconvert (5.6.0)

nbconvert PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - dbx-deploy 0.6.1 - eflow 0.1.3 - mltronsautodataprep =0.0.12, =0.0.13 Source cves: CVE-2021-32862 Source advisory: OSV:GHSA-9JMQ-RX5F-8JWQ...

MAL-2022-2365 Malicious code in dbx-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47973d5ed65da3c90ff6a8d35d99063b5d2ad514d36d3c9482537bd1b9e2d5a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dbx-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47973d5ed65da3c90ff6a8d35d99063b5d2ad514d36d3c9482537bd1b9e2d5a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-8291

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which occurred on Apple T2 Macs when attempting to read the db and dbx efi variables at early boot to load UEFI Secure Boot...

USN-5210-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that the Linux kernel did not properly...

batcave (37.0.0), dbx-deploy (0.6.1) +3 more potentially affected by CVE-2021-32559 via pywin32 (225.0.0)

pywin32 PYPI version 225.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pywin32 and may be impacted: - batcave 37.0.0 - dbx-deploy 0.6.1 - mltronsautodataprep =0.0.12, =0.0.1, =0.1.0, =0.1.11 Source cves: CVE-2021-32559 Source advisory:...

batcave (37.0.0), dbx-deploy (0.6.1) +3 more potentially affected by CVE-2021-32559 via pywin32 (225.0.0)

pywin32 PYPI version 225.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pywin32 and may be impacted: - batcave 37.0.0 - dbx-deploy 0.6.1 - mltronsautodataprep =0.0.12, =0.0.1, =0.1.0, =0.1.11 Source cves: CVE-2021-32559 Source advisory:...

Security update for shim (important)

openSUSE Security Update: Security update for shim Announcement ID: openSUSE-SU-2021:0598-1 Rating: important References: 1173411 1174512 1175509 1177315 1177404 1177789 1182057 1184454 Cross-References: CVE-2019-14584 CVSS scores: CVE-2019-14584 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A...

SUSE SLED15 / SLES15 Security Update : shim (SUSE-SU-2020:2629-1)

This update for shim fixes the following issues : This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...

DEBIAN-CVE-2020-26541

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c...

CVE-2020-26541

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c...

CVE-2020-26541: Undefined Security Weakness

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database aka dbx protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c...

SUSE-SU-2020:2629-1 Security update for shim

This update for shim fixes the following issues: This update addresses the 'BootHole' security issue master CVE CVE-2020-10713, by disallowing binaries signed by the previous SUSE UEFI signing key from booting. This update should only be installed after updates of grub2, the Linux kernel and if...

CVE-2020-7205

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

CVE-2020-7205

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

Information disclosure

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

CVE-2020-7205

CVE-2020-7205 affects HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting Toolkit. The root cause is insmod usage in GRUB2, enabling local code execution during the boot process. The issue is mitigated by HPE GRUB2 patches included in updated boot images (Intelligent Provis...

CVE-2020-7205

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...