Moderate: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.0.5 security and bug fix update

OpenShift API for Data Protection OADP 1.0.5 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

SUSE-SU-2022:3667-1 Security update for clone-master-clean-up

This update for clone-master-clean-up fixes the following issues: - CVE-2021-32000: Fixed some potentially dangerous file system operations bsc1181050. Bugfixes: - Fixed clone-master-clean-up failing to remove btrfs snapshots bsc1203651...

Cloud Mobility for Dell EMC Storage Access Control Error Vulnerability

Cloud Mobility for Dell EMC Storage is a Dell USA feature that supports the transfer, storage and access of volume snapshot copies between compatible local Dell EMC storage devices and public cloud object storage. An access control error vulnerability exists in Cloud Mobility for Dell EMC Storage...

CVE-2014-0147

Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling updaterefcount routine...

SUSE-SU-2022:3425-1 Security update for grafana

This update for grafana fixes the following issues: Updated to version 7.5.12: - CVE-2021-43813: Fixed markdown path traversal bsc1193688. - CVE-2021-39226: Fixed Snapshot authentication bypass bsc1191454...

OESA-2022-1929 grafana security update

Security Fixes: Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot...

GSD-2022-1006070 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1006068 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005922 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005921 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005697 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005695 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33953 · Linux · Kvm

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.15.61 Description: The issue concerns the nVMX snapshot pre-VM-Enter BNDCFGS for the !nested run pending case. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

GSD-2022-1005381 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005380 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

Security Bulletin: Information leakage in IBM Business Process Manager (CVE-2017-1765)

Summary Sensitive information about the application server is revealed during snapshot export in IBM Business Process Manager. Vulnerability Details CVEID: CVE-2017-1765 DESCRIPTION: IBM Business Process Manager could allow an authenticated user with special privileges to reveal sensitive...

Security Bulletin: Vulnerabilities have been identified in the IBM Spectrum Protect Backup-Archive Client that may affect IBM Spectrum Protect Snapshot for Windows

Summary In IBM Spectrum Protect Snapshot for Windows 8.1.14, a number of security vulnerabilities were fixed and implemented by the IBM Spectrum Protect Backup-Archive Client. These vulnerabilities only affect IBM Spectrum Protect Snapshot for Windows when the IBM Spectrum Protect Backup-Archive...

Moderate: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.1.0 security and bug fix update

OpenShift API for Data Protection OADP 1.1.0 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Governance: users cannot endorse if they voted, which may cause deadlock

Lines of code Vulnerability details Impact It may cause a deadlock situation Condition: there is no proposal with enough endorsement majority depending on the endorsement threshold of votes are locked in the current proposal The votes for the current proposal are balanced between for and against ...

Grafana Authentication Bypass Vulnerability

Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss...