SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:0383-1)

This update for MozillaFirefox fixes the following issues : Firefox Extended Support Release 68.5.0 ESR - Fixed: Various stability and security fixes Mozilla Firefox ESR68.5 MFSA 2020-06 bsc1163368 - CVE-2020-6796 bmo1610426 Missing bounds check on shared memory read in the parent process -...

SUSE-SU-2020:0383-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.5.0 ESR Fixed: Various stability and security fixes - Mozilla Firefox ESR68.5 MFSA 2020-06 bsc1163368 CVE-2020-6796 bmo1610426 Missing bounds check on shared memory read in the parent process...

Exploit for Incorrect Calculation in Google Android

cve-2020-0022 poc for cve-2020-0022 usage gcc poc.c -l...

Product update: Virtuozzo 7.0 Update 12 Hotfix 3 (7.0.12-361)

The Hotfix 3 for Virtuozzo 7.0 Update 12 provides stability and usability bug fixes. Vulnerability id: PSBM-100126 Ploop is corrupted after node reboot repair image outgrows device size. Vulnerability id: PSBM-101150 vzstat does not show actual IO and IOPS load and limits. Vulnerability id:...

SUSE-SU-2020:0334-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-7211: potential directory traversal using relative paths via tftp server on Windows host bsc1161181. - CVE-2019-19579: Device quarantine for alternate pci assignment methods bsc1157888. - CVE-2019-19581: findnextbit issues bsc1158003. -...

Centreon 19.10.5 - (Pollers) Remote Command Execution Exploit

Exploit for php platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Centreon Poller Authenticated Remote Command Execution', 'Description' = %q TODO , 'Author'...

Centreon 19.10.5 - 'Pollers' Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Centreon Poller Authenticated Remote Command Execution', 'Description' = %q TODO , 'Author' = 'Omri Baso', discovery 'Fabien Aunay', discovery...

Centreon 19.10.5 Pollers Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Centreon Poller Authenticated Remote Command Execution', 'Description' = %q TODO , 'Author' = 'Omri Baso', discovery 'Fabien Aunay', discovery...

Important kernel security update: New kernel 2.6.32-042stab142.1; Virtuozzo 6.0 Update 12 Hotfix 50 (6.0.12-3755)

This update provides a new kernel 2.6.32-042stab142.1 for Virtuozzo 6.0. It is based on the RHEL 6.10 kernel 2.6.32-754.27.1.el6 and inherits security and stability fixes from it. The new kernel also provides internal stability fixes. Vulnerability id: CVE-2019-14821 Kernel: KVM: OOB memory acces...

Product update: Virtuozzo 7.0 Update 12 Hotfix 2 (7.0.12-354)

The Hotfix 2 for Virtuozzo 7.0 Update 12 provides stability and usability bug fixes. Vulnerability id: PSBM-98208 vzlicmonitor could incorrectly show license state as "GRACED". Vulnerability id: PSBM-99949 Unable to restore corrupted ploop images with ploopdefrag. Vulnerability id: PSBM-101024...

Fedora 30 : php (2020-f9d2203f3b)

PHP version 7.3.14 23 Jan 2020 Core - Fixed bug php78999 Cycle leak when using function result as temporary. Dmitry CURL: - Fixed bug php79033 Curl timeout error with specific url and post. cmb Date: - Fixed bug php79015 undefined-behavior in phpdate.c. cmb DBA: - Fixed bug php78808 LMDB...

Product update: Virtuozzo Infrastructure Platform 3.0 Update 5 Hotfix 1 (3.0.5-64)

This update provides stability fixes for the upgrade procedure to version 3.5. Vulnerability id: VSTOR-30561 'Service disabled' error after updating to version 3.5 under certain circumstances if management high availability is configured...

Product update: Virtuozzo Infrastructure Platform 3.5 Hotfix 1 (3.5.0-812)

This update provides stability fixes for the upgrade procedure. Vulnerability id: VSTOR-30463 MDS could crash after the upgrade to version 3.5. Vulnerability id: VSTOR-30541 Nodes could be marked as offline in the admin panel after a failed upgrade...

Product update: Virtuozzo PowerPanel RTM Hotfix 7 (7.0.3-145)

The update for Virtuozzo PowerPanel introduces stability fixes. Vulnerability id: PP-541 PowerPanel could stop working after node reboot. Vulnerability id: PP-548 'Action Failed' response to operations on virtual environments after updating. Vulnerability id: PP-553 Warning "No handlers could be...

Centreon Poller Authenticated Remote Command Execution

An authenticated user with sufficient administrative rights to manage pollers can use this functionality to execute arbitrary commands remotely. Usually, the miscellaneous commands are used by the additional modules to perform certain actions, by the scheduler for data processing, etc. This modul...

Kernel update: Virtuozzo ReadyKernel patch 96.0 for Virtuozzo 7.0 and Virtuozzo Infrastructure Platform 3.0 and Virtuozzo Infrastructure Platform 3.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-957.12.2.vz7.96.21 Virtuozzo 7.0.11 and Virtuozzo Infrastructure Platform 3.0, 3.10.0-1062.4.2.vz7.116.7 Virtuozzo 7.0.12 HF1 and Virtuozzo Infrastructure Platform 3.5. Vulnerabili...

Virtuozzo Hybrid Infrastructure 4.0 Update 1.1 (4.0.1-48)

This update provides fixes for the Backup Gateway and compute services. Vulnerability id: VSTOR-39857 A stability fix for Backup Gateway. Vulnerability id: VSTOR-38770 Fix incorrect MTU on a flat network when different MTUs set on interfaces in the same network. Vulnerability id: VSTOR-40118 Fix...

openSUSE: Security Advisory for icingaweb2 (openSUSE-SU-2020:0067_1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Product update: Virtuozzo PowerPanel Update 1 Hotfix 1 (7.0.4-39)

The update for Virtuozzo PowerPanel introduces stability and usability fixes. Vulnerability id: PP-643 Attach and detach backup tasks missing or undefined in the task log. Vulnerability id: PP-642 The 'vzapi-api' package not updated on the controller when upgrading PowerPanel. Vulnerability id:...

php:php-fuzz-mbstring: Heap-use-after-free in quantifiers_memory_node_info

Detailed Report: https://oss-fuzz.com/testcase?key=5672130576646144 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf5239f80 Crash State: quantifiersmemorynodeinfo...