Product update: Virtuozzo 6.0 Update 12 Hotfix 27 (6.0.12-3708)

This hotfix provides stability and usability fixes. Vulnerability id: PSBM-80032 prlvzvncserverapp did not honor the --listen parameter that forced VNC server to listen on a specific IP address. Vulnerability id: PSBM-84831 Unable to install Virtuozzo 6 guest tools in a VM running Centos 7 with...

Zip Slip Vulnerability

Challenge Veeam is aware of the Zip Slip Vulnerability, which affects jobs with the guest file system indexing option enabled. Zip Slip is an arbitrary file overwrite vulnerability in multiple ZIP decompression algorithm implementations that affects thousands of software products across many...

Citrix XenServer Local Memory Disclosure Vulnerability (CTX235225)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by a local memory disclosure vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110265; scriptversion"1.7";...

Important product update: Virtuozzo 7.0 Update 7 Hotfix 3 (7.0.7-461)

The Hotfix 3 for Virtuozzo 7.0 Update 7 provides security and stability fixes. Vulnerability id: CVE-2018-1087 A flaw was found in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack switch...

Important product update: Fixes for CVE-2018-3639 and CVE-2018-1087 in virtual machines; Virtuozzo 6.0 Update 12 Hotfix 26 (6.0.12-3707)

This hotfix provides security fixes for the hypervisor part of Virtuozzo 6.0 Update 12. Vulnerability id: CVE-2018-1087 A flaw was found in the way the Linux kernel's KVM hypervisor handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions. During the stack...

Tools update: Virtuozzo 6.0 Update 12 Hotfix 24 (6.0.12-3704)

This update provides new packages with a stability fix for Virtuozzo 6.0. Vulnerability id: PSBM-84570 After upgrading guest OS to CentOS 7.5, ploop-based containers with enabled second-level quotas could fail to start due to the failure of the 'quotacheck' binary from the updated 'quota' package...

Citrix XenServer Multiple Vulnerabilities (CTX234679)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109725; scriptversion"1.9";...

Snapshot Summary report Sort by size hotfix

Challenge The "Sort by Size" option does not work in the following reports properly: 1. Virtual Machines. Snapshot Summary Veeam VMware Analysis Reports pack 2. Virtual Machines. Checkpoint Summary Veeam Hyper-V Analysis Reports pack Cause This is a known issue with the sorting function. Solution...

Kernel update: new kernel 3.10.0-693.21.1.vz7.46.7, Virtuozzo 7.0 Update 7 Hotfix 2 (7.0.7-453)

The Hotfix 2 for Virtuozzo 7.0 Update 7 provides a new kernel 3.10.0-693.21.1.vz7.46.7 that introduces stability and usability bug fixes. In addition, this kernel was recompiled by the updated gcc with retpolines support. Retpolines are a technique used by the kernel to reduce overhead of...

Description of the ISA Server 2006 hotfix package: July 14, 2009

Describes the ISA Server 2006 hotfix package that is dated July 14, 2009.INTRODUCTIONThis article describes the Microsoft Internet Security and Acceleration ISA Server 2006 hotfix package that is dated July 14, 2009. This hotfix package fixes some issues in ISA Server 2006. For more information...

Product update: Virtuozzo 7.0 Update 7 Hotfix 1 (7.0.7-445)

The Hotfix 1 for Virtuozzo 7.0 Update 7 provides stability and usability bug fixes. Vulnerability id: PSBM-82558 Container migration could sometimes fail due to a CRIU issue. Vulnerability id: PSBM-82711 'prlctl qemu-update' could fail due to unnamed dirty bitmaps. This could result in backups no...

Dell EMC Avamar / Integrated Data Protection Missing Access Control Vulnerability

The Dell EMC Avamar Installation Manager component, within Dell EMC Avamar Server and Integrated Data Protection Appliance, is affected by a missing access control vulnerability. Dell EMC Avamar Server versions 7.3.1, 7.4.1, 7.50 and Dell EMC Integrated Data Protection Appliance versions 2.0 and...

Citrix XenServer Multiple Vulnerabilities (CTX232655)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108887; scriptversion"1.6";...

Citrix XenServer Multiple Vulnerabilities (CTX232096)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108886; scriptversion"1.5";...

Security Advisory 0033

Security Advisory 0033 PDF Date: April 5th, 2018 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | April 5th, 2018 | Initial Release Affected Platforms: All EOS platforms Affected Software Version: EOS-4.20.1F release. The CVE-ID tracking this issue is CVE-2018-5254 CVSS v3: 5.0...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 5 (VA MN: 7.0.2-597, VA Agent: 7.0.2-320)

This hotfix for Virtuozzo Automator 7.0.2 provides a new feature as well as stability and usability bug fixes. Vulnerability id: PVA-35645 Systemd reported the 'va-agent/va-mn' service as started before it had been initialized. Vulnerability id: PVA-37260 Scheduled backup of a large VM could fail...

Navarino Infinity web interface is affected by multiple vulnerabilities.

Overview Navarino Infinity web interface up to version 2.2 is affected by multiple vulnerabilities. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' - CVE-2018-5384| Navarino Infinity exposes an unauthenticated script that is prone to blind sq...

Security Advisory 0032

Security Advisory 0032 PDF Date: March 1st, 2018 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | March 1st, 2018 | Initial Release Affected Platforms: All EOS platforms Affected Software Version: This issue was introduced in EOS-4.19.0F release. The CVE-ID tracking this issue is...

Microsoft Teams help & learning

None None...

Microsoft Windows Internet Explorer Multiple RCE Vulnerabilities (KB4074736)

This host is missing a critical security update according to Microsoft KB4074736 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...