CVE-2021-32571

CVE-2021-32571 affects OSS-RC systems (release 18B and older). The issue arises during data migration, where files containing usernames and passwords are left undeleted yet reside in folders accessible by top-privileged accounts. Impact is described as exposure to partially confidential data due ...

PT-2021-19786 · Ericsson · Ericsson Network Manager +1

Name of the Vulnerable Software and Affected Versions: OSS-RC versions 18B and older Description: The issue affects OSS-RC systems during data migration procedures, where files containing usernames and passwords are left undeleted in folders accessible by top privileged accounts only. This issue...

UBUNTU-CVE-2021-39886

Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references...

CVE-2021-41616 Apache ddlutils 1.0 readobject vulnerability

Apache DB DdlUtils 1.0 included a BinaryObjectsHelper that was intended for use when migrating database data with a SQL data type of BINARY, VARBINARY, LONGVARBINARY, or BLOB between databases using the ddlutils features. The BinaryObjectsHelper class was insecure and used...

Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.6.0 security & bugfix update

The Migration Toolkit for Containers MTC 1.6.0 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Virtuozzo Hybrid Server 7.5 Update 2 (7.5.2-436)

Virtuozzo Hybrid Server 7.5 Update 2 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.41.1.vz7.183.5. Vulnerability id: PSBM-130799 The rate set with the '--rate' option could not be unset. Vulnerability id: PSBM-132757 pcompact...

To the Left: Your Guide to Infrastructure as Code for Shifting Left

It's the cloud's world now, and we're all just living in it. The mass migration of organizational infrastructure to the cloud isn't slowing down any time soon — and really, why would it? Cloud computing has allowed developers to move at vastly greater speeds than ever before. And this in turn let...

SUSE-SU-2021:3170-1 Security update for SUSE Manager Server 4.2

This update fixes the following issues: branch-network-formula: - Use kernel parameters from PXE formula also for local boot cobbler - security issues fixed: - CVE-2021-40323: Fixed an arbitrary file disclosure/Template Injection bsc1189458 - CVE-2021-40324: Fixed an arbitrary file write bsc11894...

Migration Toolkit For Containers 数据伪造问题漏洞

Red Hat Migration Toolkit For Containers Mtc is a container migration toolkit from Red Hat, Inc. It is used to provide a web console and Api based on Kubernetes custom resources to help control migration and minimize application downtime. Migration Toolkit For Containers is vulnerable to a data...

Moderate: Red Hat Security Advisory: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.8]

An update for cockpit-ovirt, ovirt-host, ovirt-hosted-engine-ha, ovirt-hosted-engine-setup, and vdsm is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...

What are the storage space requirements for successful VM migration across Storage repositories?

When performing storage xenmotion moving of disks from one SR to another while it is attached to a VM that is running, it fails with insufficient space...

NOTICE of STATUS CHANGE ANNOUNCEMENT FOR NETSCALER Traffic Domain BASED FEATURES & FUNCTIONALITIES

Citrix Systems, Inc. announces a Notice of Status Change NSC for Citrix ADC Traffic Domain features and functionalities.Table 1 below explains Citrix ADC life cycle management milestones as well as important information about dates and options during this period. The dates and milestones provided...

August 26, 2021—KB5005103 (OS Build 18363.1766) Preview

None None...

Xen 竞争条件问题漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that can be...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. effect is a software package for adding...

Migrating content from traditional SIEMs to Azure Sentinel

In part two of this three-part series, we covered the five types of side-by-side security information and event management SIEM configurations commonly used during a long-term migration to Microsoft Azure Sentinel. For part three, we’ll be looking at best practices for migrating your data and...

Migrating content from traditional SIEMs to Azure Sentinel

In part two of this three-part series, we covered the five types of side-by-side security information and event management SIEM configurations commonly used during a long-term migration to Microsoft Azure Sentinel. For part three, we’ll be looking at best practices for migrating your data and...

ansi_term is Unmaintained

The maintainer has advised that this crate is deprecated and will not receive any maintenance. The crate does not seem to have much dependencies and may or may not be ok to use as-is. Last release seems to have been three years ago. Possible Alternatives The below list has not been vetted in any...

Virtuozzo Hybrid Server 7.5 Update 1 Hotfix 5 (7.5.1-742)

The Hotfix 5 for Virtuozzo Hybrid Server 7.5 Update 1 provides stability and usability bug fixes. Vulnerability id: PSBM-131042 OACI After upgrading the host from Virtuozzo Hybrid Server 7.0.14, virtual machines could fail to start due to incorrect firewall settings. Vulnerability id: PSBM-132009...

CVE-2021-38199

A flaw was found in the hanging of mounts in the Linux kernel's NFS4 subsystem where remote servers are unreachable for the client during migration of data from one server to another during trunking detection. This flaw allows a remote NFS4 server if the client is connected to starve the resource...