Malicious code in @azure-tests/perf-search-documents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f2237723a6fdf9b67623ef054f822f99d0e07663d04182ba616f88121f800b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-ai-metrics-advisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4481907e4576323ba08381ebe46ec41756c662cf0c943c4174795e2275ca8a4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-event-hubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf588fbf5bf27b08f8c1ced6e2138964f152391cbb87befbe11b1d4cec4f0d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-monitor-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d981d0c3bc3f93b7f2392e2029a93af9784e57dcdc6043ac18ff97dac615b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-107 Malicious code in @azure-tests/perf-monitor-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d981d0c3bc3f93b7f2392e2029a93af9784e57dcdc6043ac18ff97dac615b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-111 Malicious code in @azure-tests/perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c435c2b1738c33dab5842fd1b25457f25c0537f25ae2b5b59ced164335686b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-113 Malicious code in @azure-tests/perf-storage-file-datalake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 468efce3e19be8c294f0928d529c70943981b9cac451ea153487ee1fb90ace49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5280 Malicious code in perf-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38c2c294b78552bae3263b495da7be1eda10abd3df85368d506e29835f8e507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38c2c294b78552bae3263b495da7be1eda10abd3df85368d506e29835f8e507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...

The vulnerability of the `sys_perf_event_open()` function in the Linux operating system’s perf subsystem allows a local attacker to gain root privileges.

The vulnerability of the sysperfeventopen function in the Linux operating system’s perf subsystem stems from the race condition within this subsystem. This condition can be exploited to initiate access to a freed memory area in the kernel. Exploiting this vulnerability allows a local attacker to...

Unbreakable Enterprise kernel security update

5.4.17-2136.307.3.2 - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34172709 CVE-2022-1729...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a contention problem that originates from a contention problem in the perfeventopen function, which can be exploited by local attackers to elevate privileges...

bpftool, kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2022:4642 An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

kernel security and bug fix update

3.10.0-1160.66.1.OL7 - Update Oracle Linux certificates Ilya Okomin - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64 = 15-2.0.9 - Update oraclekernel-sig-key...

kernel security, bug fix, and enhancement update

4.18.0-372.9.1.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel: perf trace: Really free the evsel->priv area

A memory leak flaw was found in the Linux kernel's perf trace tool in the event selector cleanup logic. A local user can trigger this issue by running perf trace commands, causing the tool to free memory based on an incorrect condition check that inverts the intended logic for non-syscall...

NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel Multiple Vulnerabilities (NS-SA-2022-0026)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel packages installed that are affected by multiple vulnerabilities: - In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with ze...

[SECURITY] Fedora 36 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc36

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...