2442 matches found
SUSE-SU-2022:4636-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to version 102.6.1 fixed: Remote content did not load in user-defined signatures fixed: Addons that added new action buttons were not shown for addon upgrades, requiring removal and reinstall fixed: Various stability improvemen...
Fedora 36 : suricata (2022-b916a7f4a1)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-b916a7f4a1 advisory. LibHTP has been updated to 0.5.42 and is bundled with the release. Various security, performance, accuracy and stability issues have been fixed. Tenable has...
Fedora 35 : seamonkey (2022-c170581b99)
The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-c170581b99 advisory. Some stability fixes. ---- Update to 2.53.14 Note that besides the ordinary builds for the current Fedora and EPEL branches, there is an additional...
Fedora 36 : seamonkey (2022-a758e9293f)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-a758e9293f advisory. Some stability fixes. ---- Update to 2.53.14 Note that besides the ordinary builds for the current Fedora and EPEL branches, there is an additional...
Virtuozzo Hybrid Infrastructure 5.3 Update 1.1 (5.3.1-41)
This update enables a new scenario for VPN as a service and provides important stability fixes. Vulnerability id: VSTOR-60216, VSTOR-61366 Stability issues for the storage and Backup Gateway services...
Virtuozzo Hybrid Server 7.5 Update 4 (7.5.4-465)
Virtuozzo Hybrid Server 7.5 Update 4 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.80.1.vz7.191.4. Vulnerability id: PSBM-142718 Node IP was not set when changing 'vnclisten' in '/etc/libvirt/qemu.conf.' Vulnerability id:...
Virtuozzo Hybrid Infrastructure 5.3 Update 1 (5.3.1-38)
This update provides new features for security, monitoring, and the compute service, as well as bug fixes and improvements. Vulnerability id: VSTOR-60452 It is impossible to start a cluster update after an eligibility check failure. Vulnerability id: VSTOR-60459 A stability fix for Windows...
Amazon Linux 2022 : openexr (ALAS2022-2022-216)
The version of openexr installed on the remote host is prior to 3.1.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-216 advisory. - An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause...
Remote Control Collection Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Remote Control Collection RCE', 'Description' = %q This module utilizes the Remote Control Server's, part of the Remote Control Collection by...
Remote Control Collection Remote Code Execution Exploit
This Metasploit module utilizes the Remote Control Server's protocol to deploy a payload and run it from the server. Remote Control Collection by Steppschuh version 3.1.1.12 was tested and affected at the time of the module writing. This module requires Metasploit: https://metasploit.com/download...
SUSE-SU-2022:4240-1 Security update for sudo
This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986. Other: - Make sure SIGCHLD is not ignored when sudo is executed;...
OPENSUSE-SU-2022:10218-1 Security update for opera
This update for opera fixes the following issues: Update to 93.0.4585.11: - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -FramedBrowserWindow sendEvent: - DNA-103125...
F5 BIG-IP iControl Authenticated RCE via RPM Creator
This module exploits a newline injection into an RPM .rpmspec file that permits authenticated users to remotely execute commands. Successful exploitation results in remote code execution as the root user. Module Options msf use exploit/linux/http/f5icontrolrpmspecrcecve202241800 msf...
Virtuozzo Hybrid Infrastructure 5.3 Hotfix 1 (5.3.0-132)
This update provides important stability fixes. Vulnerability id: VSTOR-59696 Some compute alerts may not be raised. Vulnerability id: VSTOR-59714, VSTOR-60216 Stability fixes for the core storage...
kernel: ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
A vulnerability was found in the Linux kernel's ethtool implementation in the ioctl handling of coalesce settings, where the system attempts to change coalesce settings using the ethtoolsetcoalesce function without verifying the availability of both the .getcoalesce and .setcoalesce callbacks,...
Virtuozzo Hybrid Infrastructure 5.3 (5.3.0-130)
In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover Kubernetes as a Service, storage performance, security, monitoring and alerts, and the user interface. Additionally, this release delivers stability improvements and addresses issues found in previous...
PVS : The Stream service restarts periodically
Stream service restarts periodically...
GLSA-202210-31 : OpenEXR: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202210-31 OpenEXR: Multiple Vulnerabilities - A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. T...
SUSE-SU-2022:3665-1 Security update for xen
This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing bsc1203806. - CVE-2022-33748: Fixed DoS due to race in locking bsc1203807. - CVE-2022-26365: Fixed issue where Linux Block and Network PV device frontends don't zero memory regions...
