libtpms security update

libtpms 0.8.8-1.el7 - spec: Update spec file to version 0.8.8 Fri Sep 17 2021 Stefan Berger - 0.8.7-1 - tpm2: Fixes for building and running with OpenSSL 3.0 Fri Sep 10 2021 Stefan Berger - 0.8.6-1 - tpm2: Marshal event sequence objects' hash state Wed Sep 01 2021 Stefan Berger - 0.8.5-1 - tpm2:...

March 22, 2022 Servicing stack update (KB5011575)

None None...

Drupal Releases Security Updates

Drupal has released security updates to address a vulnerability affecting Drupal 9.2 and 9.3. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Drupal Security Advisory SA-CORE-006 and apply the necessary update...

OpenSSL Releases Security Updates

OpenSSL has released security updates addressing a vulnerability CVE-2022-0778 affecting multiple versions of OpenSSL. An attacker could exploit this vulnerability to cause a denial-of-service condition. CISA encourages users and administrators to review the OpenSSL Advisory and upgrade to the...

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities affecting Drupal 9.2 and 9.3. An attacker could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Drupal Advisory SA-CORE-2022-05 and apply the necessary...

Apple Releases Security Updates for Multiple Products

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple security page and apply the necessary updates. This...

Google Releases Security Updates for Chrome

Google has released Chrome version 99.0.4844.74 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. CISA encourages users and administrators to review the Chrome Release Note and apply the necessary updates. Thi...

Update now! Apple fixes several serious vulnerabilities in iOS and macOS

Apple has released patches for macOS Monterey 12.3, iOS 15.4 and iPadOS 15.4. In these security updates, released on March 14, 2022, Apple tackles 39 vulnerabilities, several of which could allow an attacker to execute arbitrary code on an affected device. One of the vulnerabilities can be...

Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw

The “Dirty Pipe” Linux kernel flaw – a high-severity vulnerability in all major distros that grants root access to unprivileged users who have local access – affects most of QNAP’s network-attached storage NAS appliances, the Taiwanese manufacturer warned on Monday. Dirty Pipe, a recently reporte...

Vulnerability fixed in IBM WebSphere and Tivoli Netcool/OMNIbus WebGUI

IBM has fixed a vulnerability in WebSphere Application Server. WebSphere is also used by other systems such as Tivoli Netcool/OMNIbus. The vulnerability allows an unauthenticated remote malicious person to execute arbitrary code to execute arbitrary code. To do so, rogue network traffic must be...

RHEL 8 : httpd:2.4 (RHSA-2022:0891)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0891 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: NULL pointer...

Security Updates for Microsoft Visio Products (March 2022) (deprecated)

This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smbntms22marvisioc2r.nasl instead. %NASLMINLEVEL 70300 C Tenable, Inc. @DEPRECATED@ Disabled on 2022/06/09. Deprecated by smbntms22marvisioc2r.nasl. include'deprecatednasllevel.inc';...

CVE-2022-0847 aka Dirty Pipe vulnerability in Linux kernel

Last week, security researcher Max Kellermann discovered a high severity vulnerability in the Linux kernel, which was assigned the designation CVE-2022-0847. It affects the Linux kernels from 5.8 through any version before 5.16.11, 5.15.25 and 5.10.102, and can be used for local privilege...

About the security content of tvOS 15.4

About the security content of tvOS 15.4 This document describes the security content of tvOS 15.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of macOS Monterey 12.3

About the security content of macOS Monterey 12.3 This document describes the security content of macOS Monterey 12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

About the security content of iOS 15.4 and iPadOS 15.4

About the security content of iOS 15.4 and iPadOS 15.4 This document describes the security content of iOS 15.4 and iPadOS 15.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of Xcode 13.3

About the security content of Xcode 13.3 This document describes the security content of Xcode 13.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of macOS Big Sur 11.6.5

About the security content of macOS Big Sur 11.6.5 This document describes the security content of macOS Big Sur 11.6.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Rocky Linux 8 : .NET 6.0 (RLSA-2022:826)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:826 advisory. - .NET and Visual Studio Denial of Service Vulnerability. CVE-2022-24464 - .NET and Visual Studio Remote Code Execution Vulnerability. CVE-2022-24512 Not...

Rocky Linux 8 : .NET 5.0 (RLSA-2022:830)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:830 advisory. - .NET and Visual Studio Denial of Service Vulnerability. CVE-2022-24464 - .NET and Visual Studio Remote Code Execution Vulnerability. CVE-2022-24512 Not...