CVE-2017-12170

Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was ignored after update and service started running with default configuration. This has security implications because of overriding security-related...

Oracle MySQL Server Local Vulnerability (CNVD-2017-34511)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A security vulnerability exists in the Server: Packaging subcomponent of the MySQL Server component in Oracle...

CVE-2015-3211

php-fpm allows local users to write to or create arbitrary files via a symlink attack...

App Layering/Unidesk: Published Image or Packaging Machine Blue Screens with Code STOP 0x75640007

Published image or Unidesk desktop or Packaging Machineblue-screens with code 0x75640007...

The vulnerability of the PowerShell command interpreter for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the PowerShell command interpreter for Windows operating systems is related to deficiencies in access control during the packaging of CIM instances as PSObjects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2017-1000010

Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution...

Fedora 26 : mediawiki (2017-d3aedd5dc7)

Due to a mistake in packaging, the releases 1.27.2 and 1.28.1 did not contain the fix for SyntaxHighlightGeSHi. This new release does contain that fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

How to remove or cancel incomplete tasks in Citrix App Layering

This guide covers how to remove and cancel half finished and incomplete tasks in Citrix App Layering. For example, you may have deleted a packaging machine off of your hypervisor, but the action remains incomplete in the management console...

OPENSUSE-SU-2017:1591-1 Security update for chromium

This update to Chromium 59.0.3071.104 fixes the following security issues: CVE-2017-5087: Sandbox Escape in IndexedDB CVE-2017-5088: Out of bounds read in V8 CVE-2017-5089: Domain spoofing in Omnibox Various fixes from internal audits, fuzzing and other initiatives The following tracked packaging...

OPENSUSE-SU-2017:1593-1 Security update for chromium

This update to Chromium 59.0.3071.104 fixes the following security issues: CVE-2017-5087: Sandbox Escape in IndexedDB CVE-2017-5088: Out of bounds read in V8 CVE-2017-5089: Domain spoofing in Omnibox Various fixes from internal audits, fuzzing and other initiatives The following tracked packaging...

How to install applications that require joining the domain with Citrix App Layering

Question: During new layer creation, we need to join the domain to successfully install our applications. However, we read that only the platform layer should be joined to the domain - can we join the domain while creating an application layer? Answer: You can temporarily join a packaging machine...

OPENSUSE-SU-2017:0916-1 Recommended update for geotiff

This geotiff version update to 1.4.2 fixes the following issues: - Update to 1.4.2 boo1029595 update to EPSG v8.9 database cleanups and security fixes - Small packaging cleanup - Switched download link to OSGeo server - Fix Group tag...

OPENSUSE-SU-2017:0917-1 Recommended update for geotiff

This geotiff version update to 1.4.2 fixes the following issues: - Update to 1.4.2 boo1029595 update to EPSG v8.9 database cleanups and security fixes - Small packaging cleanup - Switched download link to OSGeo server - Fix Group tag...

Security update for Chromium (important)

This update to Chromium 57.0.2987.133 fixes the following issues boo1031677: - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The...

Security update for Chromium (important)

This update to Chromium 57.0.2987.133 fixes the following issues boo1031677: - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The...

OPENSUSE-SU-2017:0908-1 Security update for Chromium

This update to Chromium 57.0.2987.133 fixes the following issues boo1031677: - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The...

OPENSUSE-SU-2017:0909-1 Security update for Chromium

This update to Chromium 57.0.2987.133 fixes the following issues boo1031677: - CVE-2017-5055: Use after free in printing - CVE-2017-5054: Heap buffer overflow in V8 - CVE-2017-5052: Bad cast in Blink - CVE-2017-5056: Use after free in Blink - CVE-2017-5053: Out of bounds memory access in V8 The...

Problems activating PVS Target Devices configured for KMS licensing

Your PVS Target Devices are configured for KMS licensing, and after activating the first PVS Target device, activation of other PVS Target Devices devices fail. When you look more closely at the Target Devices you find that the devices all share the same CMID. This means that when building the...

Security update for Chromium (important)

This update to Chromium 55.0.2883.75 fixes the following vulnerabilities: - CVE-2016-9651: Private property access in V8 - CVE-2016-5208: Universal XSS in Blink - CVE-2016-5207: Universal XSS in Blink - CVE-2016-5206: Same-origin bypass in PDFium - CVE-2016-5205: Universal XSS in Blink -...

CVE-2017-3312

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Packaging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure...