SUSE-SU-2024:2776-1 Security update for dri3proto, presentproto, wayland-protocols, xwayland

This update for dri3proto, presentproto, wayland-protocols, xwayland fixes the following issues: Changes in presentproto: update to version 1.4 patch generated from xorgproto-2024.1 sources Changes in wayland-protocols: - Update to version 1.36: xdg-dialog: fix missing namespace in protocol name ...

CLSA-2024-1722529717 unbound: Fix of CVE-2023-50387

CVE-2023-50387: enhanced DNS resolver performance and stability by optimizing the handling of DNSSEC responses, reducing the potential for resource exhaustion...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 10 (6.0.1-105)

This update provides stability fixes. Vulnerability id: VSTOR-76914 A stability and performance improvement for the core storage. Vulnerability id: VSTOR-81226 Improved the size calculation of erasure coding files. Vulnerability id: VSTOR-86571 VM live migration failed due to a missing snapshot...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 6 (6.1.1-52)

This update provides stability fixes. Vulnerability id: VSTOR-86571 VM live migration failed due to a missing snapshot traceback. Vulnerability id: VSTOR-87057, VSTOR-87531, VSTOR-89251 Stability fixes for the hypervisor. Vulnerability id: VSTOR-89300 Fixed an issue with calculating storage usage...

Virtuozzo Hybrid Infrastructure 6.2 Hotfix 3 (6.2.0-146)

This update provides stability fixes. Vulnerability id: VSTOR-86571 VM live migration failed due to a missing snapshot traceback. Vulnerability id: VSTOR-87531, VSTOR-89251 Stability fixes for the hypervisor. Vulnerability id: VSTOR-88449 An error is triggered after disabling account replication...

Virtuozzo Hybrid Server 7.5 Update 6 Hotfix 3 (7.5.6-126)

The Hotfix 3 for Virtuozzo Hybrid Server 7.5 Update 6 provides stability and usability bug fixes. Vulnerability id: PSBM-156725 Some virtual machines failed to start, and ‘libvirtd.service’ hung after the Virtuozzo Hybrid Server 7.5 Update 6 Hotfix 2 upgrade. Vulnerability id: PSBM-157279 Default...

kernel: intel: Fix NULL pointer dereference issue in upi_fill_topology()

A vulnerability was discovered in the Linux kernel in which certain CPU topologies could result in a null pointer dereference, affecting system stability...

CVE-2024-0760

A flaw was found in the bind9 package, where a malicious client may send many DNS messages over the TCP protocol, leading to instabilities on the server side and potentially causing a denial of service. The server will recover automatically once the attack ceases. Mitigation Mitigation for this...

Virtuozzo Hybrid Infrastructure 6.2 Hotfix 2 (6.2.0-142)

This update provides security and stability fixes. Vulnerability id: VSTOR-75009, VSTOR-76816, VSTOR-87057 Stability fixes for the hypervisor. Vulnerability id: VSTOR-87588 Fixed an issue with storage space calculation for the "Other" category in the "Logical space" chart in the admin panel...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 5 (6.1.1-49)

This update provides security and stability fixes. Vulnerability id: VSTOR-75009, VSTOR-76816 Stability fixes for the hypervisor. Vulnerability id: VSTOR-85653, VSTOR-87742 Stability fixes for the chunk service. Vulnerability id: VSTOR-88832 A security fix for networks. Vulnerability id:...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 9 (6.0.1-102)

This update provides security and stability fixes. Vulnerability id: VSTOR-75009, VSTOR-76816 Stability fixes for the hypervisor. Vulnerability id: VSTOR-86808 Fixed an issue with delayed file creation on NFS. Vulnerability id: VSTOR-88495 Fixed a high availability issue with incorrect paths of N...

CVE-2024-40918 parisc: Try to fix random segmentation faults in package builds

In the Linux kernel, the following vulnerability has been resolved: parisc: Try to fix random segmentation faults in package builds PA-RISC systems with PA8800 and PA8900 processors have had problems with random segmentation faults for many years. Systems with earlier processors are much more...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 4 (6.1.1-47)

This update provides stability and performance fixes. Vulnerability id: VSTOR-78110 Fixed an issue with missing firewall rules for certain ports. Vulnerability id: VSTOR-85979 New settings may be missing in the S3 gateway, which blocks access to the S3 user panel. Vulnerability id: VSTOR-86340 Th...

DEBIAN-CVE-2024-39483

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked When requesting an NMI window, WARN on vNMI support being enabled if and only if NMIs are actually masked, i.e. if the vCPU is already handling an NMI. KVM's ABI fo...

Azure CLI Credentials Gatherer

This module will collect the Azure CLI 2.0+ az cli settings files for all users on a given target. These configuration files contain JWT tokens used to authenticate users and other subscription information. Once tokens are stolen from one host, they can be used to impersonate the user from a...

CapraRAT Spyware Disguised as Popular Apps Threatens Android Users

The threat actor known as Transparent Tribe has continued to unleash malware-laced Android apps as part of a social engineering campaign to target individuals of interest. "These APKs continue the group's trend of embedding spyware into curated video browsing applications, with a new expansion...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 8 (6.0.1-98)

This update provides important security fixes. Vulnerability id: VSTOR-88638 A security fix for CVE-2024-6387. Other security and stability fixes for OpenSSH...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 3 (6.1.1-44)

This update provides important security fixes. Vulnerability id: VSTOR-88638 A security fix for CVE-2024-6387. Other security and stability fixes for OpenSSH...

Virtuozzo Hybrid Infrastructure 6.2 Hotfix 1 (6.2.0-138)

This update provides important security fixes. Vulnerability id: VSTOR-88638 A security fix for CVE-2024-6387. Other security and stability fixes for OpenSSH...

Virtuozzo Hybrid Infrastructure 6.2 (6.2.0-136)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service, high availability of the management node, object storage management, networking, and monitoring. Additionally, this release delivers stability improvements and addresses issues found ...