Unbreakable Enterprise kernel security update

5.4.17-2102.201.3uek - locking/qrwlock: Fix ordering in queuedwritelockslowpath Ali Saidi Orabug: 32805544 5.4.17-2102.201.2uek - md/bitmap: wait for external bitmap writes to complete during tear down Sudhakar Panneerselvam Orabug: 32764237 - ocfs2: fix deadlock between setattr and dioendiowrite...

PT-2024-11072 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A resource leak has been identified in the Linux kernel, specifically in the remove function of the mmc: uniphier-sd module. The issue arises from a missing tmio mmc host free call in...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.501.0.el7 - block/diskstats: accumulate all per-cpu counters in one pass Konstantin Khlebnikov Orabug: 32531559 - uek-rpm: config-aarch-embedded2 update for Jan 2021 Elba patches Dave Kleikamp Orabug: 32532588 - dts/pensando: Fix compatile - compatible typeo. David Clear Orabug:...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-1682)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-12351: A type confusion while processing AMP packets could be used by physical close attackers to crash the kernel or potentially execute code was fixed...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:1682-1 Rating: important References: 1065729 1140683 1172538 1174748 1175520 1176381 1176400 1176946 1177340 1177511 1177685 1177724 1177725 Cross-References: CVE-2020-12351 CVE-2020-12352...

CVE-2020-24551

IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials...

CVE-2020-24551

IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials...

Open redirect

IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials...

CVE-2020-24551

The CVE-2020-24551 entry applies to IProom MMC+ Server login page, where improper validation of specific parameters enables an open redirect. The vulnerability is network-?driven; CVSS details from NVD indicate both CVSS v2 (base 5.8) and CVSS v3.1 (base 6.1) with no authentication, user interact...

CVE-2020-24551 IProom MMC+ Server - URL Redirection to Untrusted Site (Open Redirect')

IProom MMC+ Server login page does not validate specific parameters properly. Attackers can use the vulnerability to redirect to any malicious site and steal the victim's login credentials...

Unbreakable Enterprise kernel security update

5.4.17-2011.7.4 - iommu/amd: Restore IRTE.RemapEn bit for amdiommuactivateguestmode Suravee Suthikulpanit Orabug: 31931369 - iommu/amd: Fix potential @entry null deref Joao Martins Orabug: 31931369 - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE Suravee Suthikulpanit Orabug: 31931369...

PowerShell-Suite

This is a PowerShell script called Bypass-UAC, which is designed to bypass User Account Control UAC on Windows systems. The script uses a technique called "auto-elevating IFileOperation COM object method calls" to achieve this. The script supports several methods for bypassing UAC, including:...

July 9, 2019—KB4507458 (OS Build 10240.18275)

None None...

June 20, 2019—KB4503283 (Preview of Monthly Rollup)

None None...

June 20, 2019—KB4503271 (Preview of Monthly Rollup)

None None...

Update for Windows Server 2008 SP2: June 20, 2019

Update for Windows Server 2008 SP2: June 20, 2019 Summary This update for Windows Server 2008 SP2 includes the quality improvements from KB4503287 released June 11, 2019, in addition to these key changes: Addresses an issue that may display the error, “MMC has detected an error in a snap-in and...

CVE-2018-18318

The /dev/block/mmcblk0rpmb driver kernel module on Qiku 360 Phone N6 Pro 1801-A01 devices allows attackers to cause a denial of service NULL pointer dereference and device crash via a crafted 0xc0d8b300 ioctl call...

MMC keeps crashing after joining the server Group in StoreFront 3.x

MMC keeps crash after joining the server group...

February 22, 2018—KB4075212 (Preview of Monthly Rollup)

None None...

openSUSE Security Update : ecryptfs-utils (openSUSE-2018-126)

This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...