Unbreakable Enterprise kernel-container security update

5.4.17-2136.334.6.el7 - loop: Fix a race between loop detach and loop open Gulam Mohamed Orabug: 36197800 - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs Alexandre Chartre Orabug: 36672495 - x86/bhi: Avoid warning in DB handler due to BHI mitigation Alexandre Chartre...

CVE-2023-43527

Information disclosure while parsing dts header atom in Video...

CVE-2023-43527 Buffer Over-read in Video

Information disclosure while parsing dts header atom in Video...

CVE-2023-43527

CVE-2023-43527 is an information-disclosure issue arising from parsing the dts header atom in Video. The vulnerability affects Qualcomm-related components (including closed-source parts) and is referenced across multiple sources (Red Hat, NVD, CVE lists, and Pixel advisories) without explicit exp...

CVE-2023-43527 Buffer Over-read in Video

Information disclosure while parsing dts header atom in Video...

PT-2024-13100 · Video · Video

Name of the Vulnerable Software and Affected Versions: Video affected versions not specified Description: The issue is related to information disclosure while parsing the dts header atom in Video. There is no information about the estimated number of potentially affected devices worldwide or...

SUSE CVE-2023-52561

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved Adding a reserved memory region for the framebuffer memory the splash memory region set up by the bootloader. It fixes a kernel panic arm-smmu: Unhandled...

CVE-2023-52561 arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved Adding a reserved memory region for the framebuffer memory the splash memory region set up by the bootloader. It fixes a kernel panic arm-smmu: Unhandled...

PT-2024-14629

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to v5.10.y Description The issue is related to the Linux kernel, where a reserved memory region for the framebuffer memory the splash memory region set up by the bootloader was not properly marked. This led to a...

CVE-2023-33269

An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...

CVE-2023-33269

An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...

CVE-2023-33270

An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection blind...

CVE-2023-33269

An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...

CVE-2023-33270

An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection blind...

CVE-2023-33271

An issue was discovered in DTS Monitoring 3.57.0. The parameter commonname within the SSL Certificate check function is vulnerable to OS command injection blind...

CVE-2023-33271

An issue was discovered in DTS Monitoring 3.57.0. The parameter commonname within the SSL Certificate check function is vulnerable to OS command injection blind...

CVE-2023-33273

An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection blind...

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...

CVE-2023-33272

An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection blind...