[SECURITY] Fedora 23 Update: parallel-20160222-1.fc23

GNU Parallel is a shell tool for executing jobs in parallel using one or mo re machines. A job is typically a single command or a small script that has to be run for each of the lines in the input. The typical input is a list of file s, a list of hosts, a list of users, or a list of tables. If yo...

[SECURITY] Fedora 22 Update: parallel-20160222-1.fc22

GNU Parallel is a shell tool for executing jobs in parallel using one or mo re machines. A job is typically a single command or a small script that has to be run for each of the lines in the input. The typical input is a list of file s, a list of hosts, a list of users, or a list of tables. If yo...

American Fuzzy Lop Utilities: afl-utils

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization afl-utils is a collection of utilities to assist fuzzing with american-fuzzy-lop afl . afl-utils includes tools for: automated crash sample collection, verification, reduction and analys...

HackerOne: Hogging up all the resources on hackerone.com

Please note. I believe that some of the issues described below can also be used on their own and/or combined in other configurations to achieve different results, e.g. "paying" a bounty of zero or team avoiding to resolve and unpleasant issue. I am however describing the very likely doomsday...

FreeBSD : glibc -- getaddrinfo stack-based buffer overflow (2dd7e97e-d5e8-11e5-bcbd-bc5ff45d0f28)

Fabio Olive Leite reports : A stack-based buffer overflow was found in libresolv when invoked from nssdns, allowing specially crafted DNS responses to seize control of EIP in the DNS client. The buffer overflow occurs in the functions senddg send datagram and sendvc send TCP for the NSS module...

Apple Mac OSX - io_service_close Use-After-Free

Exploit for macOS platform in category dos / poc / Source: https://code.google.com/p/google-security-research/issues/detail?id=597 It turns out that the spoofed no-more-senders notification bug when applied to iokit objects was actually just a more complicated way to hit ::clientClose in parallel...

Apple Mac OSX - io_service_close Use-After-Free

Apple Mac OSX - ioserviceclose Use-After-Free / Source: https://code.google.com/p/google-security-research/issues/detail?id=597 It turns out that the spoofed no-more-senders notification bug when applied to iokit objects was actually just a more complicated way to hit ::clientClose in parallel. W...

Apple Mac OSX - IOBluetoothHCIPacketLogUserClient Memory Corruption

Apple Mac OSX - IOBluetoothHCIPacketLogUserClient Memory Corruption / Source: https://code.google.com/p/google-security-research/issues/detail?id=572 The OS data types OSArray etc are explicity not thread safe; they rely on their callers to implement the required locking to serialize all accesses...

IBM Spectrum Scale and General Parallel File System Denial of Service Vulnerability

IBM Spectrum Scale and General Parallel File System GPFS are both products of IBM Corporation of the U.S.A. IBM GPFS is an enterprise file management system optimized for petabyte-scale storage management.IBM Spectrum Scale is a set of data and file management solutions based on IBM GPFS. IBM...

IBM Spectrum Scale (GPFS) Hadoop Connector Vulnerable

IBM Spectrum Scale and General Parallel File System GPFS is a scalable data and file management solution based on IBM GPFS an enterprise file management system optimized for petabyte-scale storage management from IBM, USA. The solution helps customers reduce storage costs while improving security...

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System GPFS allows local users to read or write to arbitrary GPFS data via unspecified vectors...

CVE-2015-7430

The IBM Spectrum Scale (GPFS) Hadoop Connector is affected by CVE-2015-7430, impacting versions 1.1.1, 2.4, 2.5, and 2.7.0-0 through 2.7.0-2. An unprivileged user could read, write, modify, or delete GPFS data via unspecified vectors. The issue is mitigated by upgrading to version 2.7.0-3. IBM pr...

CVE-2015-7430

The Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and General Parallel File System GPFS allows local users to read or write to arbitrary GPFS data via unspecified vectors...

It Works! Google's Quantum Computer is '100 Million Times Faster' than a PC

Announcing the results of its experiment, Google says Quantum Computer is More than 100 Million times faster than a regular PC. Two years ago, Google and NASA National Aeronautics and Space Administration bought a D-Wave 2X quantum computer, which they have been experimenting at the U.S. space...

The vulnerability of the IBM Spectrum Scale data management program and the General Parallel File System file system allows a hacker to gain root user privileges when executing commands.

The vulnerability of the IBM Spectrum Scale data management program and the General Parallel File System file system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a local attacker to gain root user privileges when executing commands...

The vulnerability of the IBM Spectrum Scale data management software and the General Parallel File System, which allows a hacker to gain access to protected information in the system memory.

The vulnerability of the IBM Spectrum Scale storage management program and the General Parallel File System file system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to protected information in the...

IBM General Parallel File System and Spectrum Scale Information Disclosure Vulnerability

IBM General Parallel File System GPFS and Spectrum Scale are both products of IBM USA. The former is a scalable, highly available, high-performance enterprise file management system optimized for petabyte-scale storage management. The latter is a set of software-defined Spectrum storage solutions...

IBM General Parallel File System and Spectrum Scale Operating System Command Injection Vulnerability

IBM General Parallel File System GPFS and Spectrum Scale are both products of IBM USA. The former is a scalable, highly available, high-performance enterprise file management system optimized for petabyte-scale storage management. The latter is a set of software-defined Spectrum storage solutions...

CVE-2015-4974

IBM General Parallel File System GPFS 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local users to obtain root privileges for command execution via unspecified vectors...

Gentoo Security Advisory GLSA 201310-11

Gentoo Linux Local Security Checks GLSA 201310-11 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...