Security Update Guide: Let's keep the conversation going

Hi Folks, We want to continue to highlight changes we’ve made to our Security Update Guide. We have received a lot of feedback, much of which has been very positive. We acknowledge there have been some stability problems and we are actively working through reports of older browsers not being able...

Security Update Guide: Let's keep the conversation going

Hi Folks, We want to continue to highlight changes we’ve made to our Security Update Guide. We have received a lot of feedback, much of which has been very positive. We acknowledge there have been some stability problems and we are actively working through reports of older browsers not being able...

Product update: Virtuozzo Hybrid Server 7.5 Hotfix 1 (7.5.0-589)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 provides stability and usability bug fixes. Vulnerability id: PSBM-108125 Virtuozzo Storage trial licenses ending in 2021 could be reported as invalid. Vulnerability id: PSBM-123396 Migrating a VM over Virtuozzo Storage could take a very long time...

Kernel update: Virtuozzo ReadyKernel patch 119.5 for Virtuozzo Hybrid Server 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to the kernel 3.10.0-1127.18.2.vz7.163.46 Virtuozzo Hybrid Server 7.5. Vulnerability id: PSBM-123085 Kernel crash due to an incorrect BUGON assertion in movefreepages...

openSUSE Security Update : the Linux Kernel (openSUSE-2020-2112)

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' bsc1177724. - CVE-2020-24490: Fixed a heap buffer overflow when...

Kernel update: Virtuozzo ReadyKernel patch 119.0 for Virtuozzo Hybrid Server 7.0, Virtuozzo Infrastructure Platform 3.0, and Virtuozzo Hybrid Infrastructure 3.5

The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to the kernels 3.10.0-957.10.1.vz7.85.17 Virtuozzo Hybrid Server 7.0.10, 3.10.0-957.12.2.vz7.86.2 Virtuozzo Hybrid Server 7.0.10 HF1, 3.10.0-957.12.2.vz7.96.21 Virtuozzo Hybrid Server 7.0.11 and Virtuoz...

Kernel update: Virtuozzo ReadyKernel patch 119.5 for Virtuozzo Hybrid Server 7.0 and Virtuozzo Hybrid Infrastructure 4.0

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-1127.8.2.vz7.151.14 Virtuozzo Hybrid Server 7.0.14, 3.10.0-1127.8.2.vz7.158.8 Virtuozzo Hybrid Infrastructure 4.0. Vulnerability id: PSBM-122035 3.10.0-1127.8.2.vz7.151.14 to...

Apache NiFi API Remote Code Execution Exploit

This Metasploit module uses the NiFi API to create an ExecuteProcess processor that will execute OS commands. The API must be unsecured or credentials provided and the ExecuteProcess processor must be available. An ExecuteProcessor processor is created then is configured with the payload and...

OPENSUSE-SU-2020:2035-1 Security update for rclone

This update for rclone fixes the following issues: rclone was updated to version 1.53.3: Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo1179005 Nick Craig-Wood - Check https://github.com/rclone/passwordcheck for a tool check for weak passwords generated by...

Security update for rclone (moderate)

openSUSE Security Update: Security update for rclone Announcement ID: openSUSE-SU-2020:2008-1 Rating: moderate References: 1179005 Cross-References: CVE-2020-28924 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for rclone...

SUSE-SU-2020:3474-1 Security update for u-boot

This update for u-boot fixes the following issues: Work around CVE-2019-11059 by disabling 64Bit descritptor size bsc1134853 CVE-2019-11690 bsc1134157, CVE-2020-10648 bsc1167209, CVE-2019-13103 bsc1143463, CVE-2019-14197 bsc1143821, CVE-2019-14200 bsc1143825, CVE-2019-14201 bsc1143827,...

Hotfix XS82E007 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. This hotfix supersedesHotfix XS82E005. All customers who are affected by the issues described inCTX282314 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this...

Oracle WebLogic Server Administration Console Handle Remote Code Execution Exploit

This Metasploit module exploits a path traversal and a Java class instantiation in the handle implementation of WebLogic's Administration Console to execute code as the WebLogic user. Versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0 are known to be affected. Tested against...

Kernel update: Virtuozzo ReadyKernel patch 118.1 for Virtuozzo Hybrid Server 7.0, Virtuozzo Infrastructure Platform 3.0, and Virtuozzo Hybrid Infrastructure 3.5, 4.0

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.0, Virtuozzo Infrastructure Platform, and Virtuozzo Hybrid Infrastructure. Vulnerability id: PSBM-121135 3.10.0-1127.8.2.vz7.151.14 to...

Product release: Virtuozzo Hybrid Infrastructure 4.0 Hotfix 1 (4.0.0-741)

This update provides bug fixes and improvements. Vulnerability id: VSTOR-38028 The stat command may report wrong size for files with erasure coding. Vulnerability id: VSTOR-37868 Editing an NFS export could set a wrong SecType and prevent the export from being mounted. Vulnerability id:...

Chrome for Android Update

Hi, everyone! We've just released Chrome 86 86.0.4240.185 for Android: it'll become available on Google Play over the next few weeks. Security fixes in this release are listed in the corresponding Desktop Release. In addition, this Android release contains: $NA1144368 High CVE-2020-16010: Heap...

OPENSUSE-SU-2020:1777-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. - qemu: Avoid stale capabilities cache host CPU or kernel command line...

openSUSE Security Update : MozillaFirefox (openSUSE-2020-1732)

This update for MozillaFirefox fixes the following issues : - Firefox Extended Support Release 78.4.0 ESR - Fixed: Various stability, functionality, and security fixes MFSA 2020-46 bsc1177872, bsc1176756 - CVE-2020-15969 Use-after-free in usersctp - CVE-2020-15683 Memory safety bugs fixed in...

openSUSE Security Update : MozillaFirefox (openSUSE-2020-1748)

This update for MozillaFirefox fixes the following issues : - Firefox Extended Support Release 78.4.0 ESR - Fixed: Various stability, functionality, and security fixes MFSA 2020-46 bsc1177872, bsc1176756 - CVE-2020-15969 Use-after-free in usersctp - CVE-2020-15683 Memory safety bugs fixed in...

SUSE-SU-2020:3053-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.4.0 ESR Fixed: Various stability, functionality, and security fixes MFSA 2020-46 bsc1177872, bsc1176756 CVE-2020-15969 Use-after-free in usersctp CVE-2020-15683 Memory safety bugs fixed in Firefox 82...