Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.linux-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS when parsing X509 certificates...

Important Photon OS Security Update - PHSA-2023-5.0-91-0170

Updates of 'linux-secure', 'linux-rt', 'linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0158

Updates of 'linux-secure', 'linux-rt', 'linux', 'linux-esx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0148

Updates of 'linux', 'linux-esx', 'linux-secure', 'linux-rt', 'openssl' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0135

Updates of 'coredns', 'linux', 'linux-esx', 'linux-secure', 'linux-rt', 'traceroute' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0101

Updates of 'linux-secure', 'linux-rt', 'linux', 'linux-esx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0046

Updates of 'linux', 'linux-esx', 'linux-secure', 'linux-rt', 'falco' packages of Photon OS have been released...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE. A vulnerability exists in .NET source generator for P/Invokes that can lead to generated code freeing uninitialized memory and crashing. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to version...

Privilege Escalation

Overview Affected versions of this package are vulnerable to Privilege Escalation. A vulnerability exists in .NET when deserializing a DataSet or DataTable from XML which may result in elevation of privileges. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to version 6.0.18, 7.0.7 or...

Privilege Escalation

Overview Affected versions of this package are vulnerable to Privilege Escalation. A vulnerability exists in .NET using extracting the contents of a Tar file which may result in elevation of privileges. Remediation Upgrade Microsoft.NETCore.App.Runtime.linux-x64 to version 6.0.18, 7.0.7 or higher...

Critical Photon OS Security Update - PHSA-2023-5.0-91-0009

Updates of 'vim', 'linux-esx', 'linux', 'haproxy', 'influxdb', 'linux-secure', 'linux-rt', 'tcpdump' packages of Photon OS have been released...

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.linux-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS via excess memory allocations...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

.NET Core 3.1 security and bugfix update

3.1.423-1.0.1 - Add missing Oracle Linux Runtime IDs 3.1.423-1 - Update to .NET SDK 3.1.423 and Runtime 3.1.29 - Resolves: RHBZ2123785...

.NET Core 3.1 security, bug fix, and enhancement update

3.1.422-1.0.1 - Add missing Oracle Linux Runtime IDs 3.1.422-1 - Update to .NET SDK 3.1.422 and Runtime 3.1.28 - Resolves: RHBZ2115351...

.NET Core 3.1 security and bugfix update

3.1.417-1.0.1 - Add missing Oracle Linux Runtime IDs 3.1.417-1 - Update to .NET SDK 3.1.417 and Runtime 3.1.23 - Resolves: RHBZ2060567...

CVE-2016-0959

Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flas...