Kernel security update: CVE-2017-7645 and other; new kernel 2.6.32-042stab123.3 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0

This update provides a new kernel 2.6.32-042stab123.3 for Virtuozzo Containers for Linux 4.7, Server Bare Metal 5.0. The new kernel is based on the Red Hat Enterprise Linux 6.9 kernel 2.6.32-696.el6 and provides security fixes as well as stability bug fixes. Vulnerability id: CVE-2017-7895 The...

Product update: Virtuozzo Automator 7.0 Update 2 (VA MN: 7.0.2-266, VA Agent: 7.0.2-115)

The Update 2 for Virtuozzo Automator 7.0 provides new features and stability and usability bug fixes. Vulnerability id: PVA-36694 No 'Renew backup' button on virtual environment's backups tab. Vulnerability id: PVA-36693 Existing bridges were not used when attaching interfaces to virtual networks...

Product update: Virtuozzo 7.0 Update 4 (7.0.4-1025)

The Update 4 for Virtuozzo 7.0 provides new features, a security fix, and stability and usability bug fixes. Vulnerability id: PSBM-60181 A vulnerability in container resource limiting mechanism could potentially lead to DoS attacks...

Ghostscript Type Confusion Arbitrary Command Execution

This module exploits a type confusion vulnerability in Ghostscript that can be exploited to obtain arbitrary command execution. This vulnerability affects Ghostscript versions 9.21 and earlier and can be exploited through libraries such as ImageMagick and Pillow. Module Options msf use...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1 to fix security and stability issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-45.9.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. Also,...

SUSE-SU-2017:1064-1 Security update for Linux Kernel Live Patch 5 for SLE 12 SP1

This update for the Linux Kernel 3.12.59-6041 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packetsetring function in net/packet/afpacket.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of...

Important kernel security update: Virtuozzo ReadyKernel patch 18.0 for kernels 3.10.0-327.18.2.vz7.15.2 (Virtuozzo 7.0.0), 3.10.0-327.36.1.vz7.18.7 (Virtuozzo 7.0.1), and 3.10.0-327.36.1.vz7.20.18 (Virtuozzo 7.0.3)

The cumulative Virtuozzo ReadyKernel patch updated with security fixes as well as stability bug fixes. The patch applies to Virtuozzo versions 7.0.0, 7.0.1, and 7.0.3. Vulnerability id: CVE-2017-2636 Race condition in drivers/tty/nhdlc.c in the Linux kernel through 4.10.1 allows local users to ga...

Sony Playstation 4 (PS4) 3.50 < 4.07 - WebKit Code Execution (PoC)

PS4 4.0x Code Execution ============== This repo is my edit of the 4.0x webkit exploit released by qwertyoruiopz. The edit re-organizes, comments, and adds portability across 3.50 - 4.07 3.50, 3.55, 3.70, 4.00, and of course 4.06/4.07. The commenting and reorganization was mostly for my own...

Kernel security update: new kernel 2.6.32-042stab123.1, Virtuozzo 6.0 Update 12 Hotfix 7 (6.0.12-)

This update provides a new Virtuozzo 6.0 kernel 2.6.32-042stab123.1 as well as internal stability bug fixes. The new kernel is based on the Red Hat Enterprise Linux 6.9 kernel 2.6.32-696.el6 and provides security fixes. Vulnerability id: CVE-2017-6214 A flaw was found in the Linux kernel's handli...

Moderate: Red Hat Security Advisory: Red Hat Gluster Storage 3.2.0 samba security, bug fixes and enhancement update

An update for samba is now available for Red Hat Gluster Storage 3.2 for RHEL 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

Servicing stack update for Windows 10 Version 1607 and Windows Server 2016: March 14, 2017

None None...

SUSE-SU-2017:0571-1 Security update for xen

This update for xen fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUSBLTMODEMEMSYSSRC mode the bitblit copy routine cirrusbitbltcputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation bsc1024834. -...

Product security update: Virtuozzo 6.0 Update 12 Hotfix 4

The new packages for Virtuozzo 6.0.12 introducing security fixes as well as stability bug fixes. Vulnerability id: PSBM-60778 Possible crash in memcpyfromiovecend triggered from inside container. Vulnerability id: PSBM-59962 Improved isolation for neighbor table settings...

RHEL 6 : kernel (RHSA-2017:0307)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0307 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: When creating audit records for...

Servicing stack update for Windows 10 Version 1607 and Windows Server 2016: January 24, 2017

None None...

Kernel update: Virtuozzo ReadyKernel patch 9.0 for kernel 3.10.0-327.36.1.vz7.18.7 (Virtuozzo 7.0.1)

The cumulative Virtuozzo ReadyKernel patch updated with a stability bug fix. The patch applies to Virtuozzo 7.0.1 only. Vulnerability id: PSBM-54244 Stopping a container with disabled netfilter could result in node crash...

CentOS 7 : kernel (CESA-2017:0086)

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Update rollup for Visual Studio 2010 Tools for Office Runtime

Update rollup for Visual Studio 2010 Tools for Office Runtime Symptoms This update installs the Visual Studio 2010 Tools for Office Runtime. This is required to run Microsoft Office-based solutions that are built by using Microsoft Visual Studio 2010, Visual Studio 2012, and Visual Studio 2013...

at(1) Persistence

This module achieves persistence by executing payloads via at1. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'at1 Persistence', 'Description' = %q This module achieves persistence by executin...

SUSE-SU-2016:3169-1 Security update for Linux Kernel Live Patch 0 for SLE 12 SP2

This update for the Linux Kernel 4.4.21-69 fixes several issues. The following security bugs were fixed: - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012759. - CVE-2016-9555: The sctpsfootb...