RHEL 6 : openstack-neutron (RHSA-2014:0091)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:0091 advisory. The openstack-neutron packages provide Openstack Networking neutron, the virtual network service. It was discovered that the metadata agent in...

Security update for 389-ds

This update for 389-ds fixes the following issues: Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 Re-enable use of .dsrc basedn for dsidm commands bsc1231462 Update to version 2.2.10git18.20ce9289: RFE: Use previously extracted key path Update dsidm to...

SUSE SLES15 Security Update : kernel (Live Patch 11 for SLE 15 SP5) (SUSE-SU-2024:3842-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3842-1 advisory. This update for the Linux Kernel 5.14.21-1505005552 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int...

openSUSE 15 Security Update : lxc (openSUSE-SU-2024:0342-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0342-1 advisory. lxc was updated to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported...

OPENSUSE-SU-2024:0342-1 Security update for lxc

This update for lxc fixes the following issues: lxc was updated to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported until June 2029. As usual this bugfix releases focus on stability and hardening. Some of the...

Security update for lxc (moderate)

openSUSE Security Update: Security update for lxc Announcement ID: openSUSE-SU-2024:0342-1 Rating: moderate References: 1204842 1206779 Cross-References: CVE-2022-47952 CVSS scores: CVE-2022-47952 SUSE: 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N Affected Products: openSUSE Backports...

Virtuozzo Hybrid Infrastructure 6.3 (6.3.0-170)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service and our ecosystem of backup and disaster recovery solutions. Additionally, this release delivers stability and security improvements, and addresses issues found in previous releases...

Fedora: Security Advisory (FEDORA-2024-8b08786765)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 2 (6.2.1-66)

This update provides stability fixes. Vulnerability id: VSTOR-93320 Cannot update a cluster due to little free space on the boot partition. Vulnerability id: VSTOR-93349 During a cluster update, VM live migration may fail with the libvirt error. Vulnerability id: VSTOR-93365 Fixed detaching CD-RO...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 7 (6.1.1-59)

This update provides stability and security fixes. Vulnerability id: VSTOR-86581 Fixed an issue with iSCSI persistent reservations. Vulnerability id: VSTOR-90084 A stability improvement for the compute service. Vulnerability id: VSTOR-90793 Fixed an error with extending volumes. Vulnerability id:...

CVE-2024-47706

CVE-2024-47706 affects the Linux kernel bfq I/O scheduler. The issue was a use-after-free involving bfqq->bic during merges in the bfq_merge/merge-chain flow, which could allow IO handling to operate on a bfqq that is no longer valid. The provided details describe an initial state with three b...

CVE-2024-27766

Disputed A flaw was found in MariaDB. This flaw allows a remote attacker to use a specially crafted payload to execute arbitrary commands in certain configurations. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

BYOB Unauthenticated Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sqlite3' class MetasploitModule 'BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection CVE-2024-45256, CVE-2024-45257', 'Description' = %q Thi...

[SECURITY] [DSA 5779-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5779-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 29, 2024 https://www.debian.org/security/faq -...

CVE-2024-23271

A flaw was found in WebKit. This flaw allows a remote attacker to trigger unexpected cross-origin behavior via a malicious website. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 1 (6.2.1-57)

This update provides security, stability, and performance fixes. Vulnerability id: VSTOR-88709 Network and disk information is missing in hciinfo.disks due to a race. Vulnerability id: VSTOR-89823 VMs are in the shutoff state after upgrading the libvirt package. Vulnerability id: VSTOR-90644 An...

kernel: mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path

A flaw was found in the Linux kernel, where a faulty error handler in the driver for certain Mellanox hardware could lead to a null pointer reference. This issue affects system stability...

kernel: udp: do not accept non-tunnel GSO skbs landing in a tunnel

CVE-2024-35884 highlights a flaw in the Linux kernel's handling of UDP packets when Generic Receive Offload GRO forwarding is enabled. The issue occurs because non-tunnel UDP packets are sometimes mistakenly processed as if they belong to a tunnel. This can lead to data corruption or kernel...

CVE-2024-45807

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy's 1.31 is using oghttp as the default HTTP/2 codec, and there are potential bugs around stream management in the codec. To resolve this Envoy will switch off the oghttp2 by default. The impact of this issue is that envoy wi...

Unspecified vulnerability in Linux kernel (CNVD-2024-39287)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from a null pointer dereference. No details of the vulnerability are provided at this time...