rasdaemon bug fix and enhancement update

The rasdaemon packages provide a RAS Reliability, Availability and Serviceability logging tool, which records memory errors, using the EDAC tracing events. Bug Fixes and Enhancements: RFE latest rasdaemon hardware check for ROME and MILAN BZ1975506...

The vulnerability in the hw/net/e1000e_core.c component of the hardware emulation software QEMU allows a hacker to induce a system failure.

The vulnerability in the hw/net/e1000ecore.c component of the hardware emulation software QEMU is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a system failure...

[SECURITY] Fedora 35 Update: sdrpp-1.0.4-3.fc35

SDR++ is a cross-platform and open source SDR software with the aim of being bloat free and simple to use. Features - Wide hardware support both through SoapySDR and dedicated modules - SIMD accelerated DSP - Full waterfall update when possible. Makes browsing signals easier and more pleasant...

Fedora: Security Advisory for watchdog (FEDORA-2021-4cf4b682e8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 35 Update: watchdog-5.16-2.fc35

The watchdog program can be used as a powerful software watchdog daemon or may be alternately used with a hardware watchdog device such as the IPMI hardware watchdog driver interface to a resident Baseboard Management Controller BMC. watchdog periodically writes to /dev/watchdog; the interval...

[SECURITY] Fedora 35 Update: moby-engine-20.10.9-1.fc35

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...

CVE-2021-36315

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity...

2021 CWE Most Important Hardware Weaknesses

The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2021 Common Weakness Enumeration CWE Most Important Hardware Weaknesses List. The 2021 Hardware List is a compilation of the most frequent...

The vulnerability of the QEMU hardware emulation software lies in the lack of a necessary encryption step, which allows attackers to gain access to confidential data.

The vulnerability of the QEMU hardware emulation software is related to a implementation error in the handling of pointer authentication. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the hw/scsi/scsi-generic.c component of the QEMU hardware emulation software, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability of the hw/scsi/scsi-generic.c component of the QEMU hardware emulation software is related to reading data from within acceptable buffer limits. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the QEMU hardware emulation software, related to pointer swapping errors, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the hw/ppc/spapr.c component of the QEMU hardware emulation software, related to deficiencies in access control to ports, allows a perpetrator to gain access to confidential data.

The vulnerability in the hw/ppc/spapr.c component of the QEMU hardware emulation software is related to deficiencies in access control for ports. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the driver of the QEMU hardware emulation controller arises from reading data beyond the permissible buffer limits. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the driver of the QEMU hardware emulation controller lies in reading data from within allowable buffer limits. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the block/iscsi.c component of the QEMU hardware emulation software involves reading data beyond the allowed buffer limits, allowing an attacker to access confidential data.

The vulnerability in the block/iscsi.c component of the QEMU hardware emulation software involves reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...

The vulnerability in the hw/usb/hcd-xhci.c component of the QEMU hardware emulation software arises from the use of memory after it has been freed. This allows a malicious actor to trigger a service failure.

The vulnerability in the hw/usb/hcd-xhci.c component of the QEMU hardware emulation software is related to the lack of checking for the return value of usbpacketmap. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the oss_write component of the hardware emulation software based on QEMU, which stems from the lack of protection against division by zero, allows a malicious actor to trigger a service failure.

The vulnerability of the osswrite component of the QEMU hardware emulation software is related to the lack of protection against division by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the hw/display/ati_2d.c component in the hardware/display/ati_2d emulation software by QEMU, due to incorrect calculations, allows a hacker to trigger a service failure.

The vulnerability of the hw/display/ati2d.c component in the hardware/display/ati2d emulator of QEMU is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the sd_wp_addr component of the emulation software for hardware devices on other platforms, related to reading data beyond the buffer’s acceptable limits, allows a malicious actor to cause a service failure.

The vulnerability of the sdwpaddr component of the hardware emulation software for other platforms supported by QEMU lies in its ability to read data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the e1000e wireless bridge in the hardware emulation software QEMU, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability of the e1000e wireless bridge in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to cause a system failure...

Hardware-grade enterprise authentication without hardware: new SIM security solution for IAM

The average cost of a data breach, according to the latest research by IBM, now stands at USD 4.24 million, the highest reported. The leading cause? Compromised credentials, often caused by human error. Although these findings continue to show an upward trend in the wrong direction, the challenge...