January 9, 2024-KB5034272 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Azure Stack HCI, version 22H2

None None...

January 9, 2024—KB5034119 (OS Build 14393.6614) - EXPIRED

None None...

March 12, 2024—KB5035855 (OS Build 14393.6796) - EXPIRED

None None...

KB5035966: Servicing stack update for Windows 10: March 12, 2024

None None...

SUSE-SU-2024:0485-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: cobbler: - Build the appendline correctly for RHEL-family = 8 - Do not strip if SUSE Linux Enterprise 15 SP3 - Build at least with with Go = 1.18 on RHEL - Build with Go = 1.20 elsewhere saltboot-formula: - Update to version 0.1.1701196218.b6b8ca1 Remove...

SUSE-SU-2024:0252-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. bsc1218845 - CVE-2024-0409: Fixed SELinux context corruption. bsc1218846...

SUSE-SU-2024:0121-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer bsc1218582 - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-bounds memory access bsc1218583 - CVE-2024-21885: Fixed he...

Medium: openssh

Issue Overview: AWS is aware of CVE-2023-48795, also known as Terrapin, which is found in the SSH protocol and affects SSH channel integrity. A protocol extension has been introduced by OpenSSH which needs to be applied to both the client and the server in order to address this issue. We recommen...

SUSE-SU-2023:4787-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed Out-of-bounds memory write in XKB button actionsbsc1217765. - CVE-2023-6478: Fixed Out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty bsc1217766...

KB5032391: Servicing stack update for Windows Server 2016: November 14, 2023

None None...

SUSE-SU-2023:4292-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol bsc1216261. - CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens bsc121613...

SUSE-SU-2023:4269-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol bsc1216261. - CVE-2023-5380: Fixed a memory safety issue that could be triggered when using multiple protocol screens bsc121613...

SUSE-SU-2023:3885-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.8 Important Salt minion update SUSE Manager Pay-as-you-go PAYG Automated RHUI credential update Monitoring: Prometheus upgraded to 2.45.0 Monitoring: Apache exporter updated to version 1.0.0 Expose...

September 12, 2023-KB5030181 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2

None None...

New Wave of Attack Campaign Targeting Zimbra Email Users for Credential Theft

A new "mass-spreading" social engineering campaign is targeting users of the Zimbra Collaboration email server with an aim to collect their login credentials for use in follow-on operations. The activity, active since April 2023 and still ongoing, targets a wide range of small and medium business...

The vulnerability of the Windows Server Update Services (WSUS) server allows attackers to enhance their privileges.

The vulnerability of the Windows Server Update Services WSUS system for operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-35317

Windows Server Update Service WSUS Elevation of Privilege Vulnerability...

CVE-2023-32056

Windows Server Update Service WSUS Elevation of Privilege Vulnerability...

CVE-2023-35317

Technical details (affected component/version/root cause/exploit status) for CVE-2023-35317 are not provided in the supplied documents. Monitor for updates from official sources.

Microsoft Windows Server Update Service 安全漏洞

Microsoft Windows Server is a suite of server operating systems from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Server Update Service. An attacker can exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10...