CVE-2023-36049

A vulnerability was found in FormatFtpCommand in the .NET package that may result in a CRLF injection arbitrary file write and deletion. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease...

kernel: drm/amd/display: fix FCLK pstate change underflow

A calculation flaw was found in the AMD display driver in the Linux kernel. When UCLK p-state is not supported, FCLK p-state change watermarks are incorrectly calculated using dummy values, potentially causing underflow. This can lead to display issues or system instability during power state...

decreaseTotalVotingPower - If totalVotingPower becomes less than mintedVotingPower, the protocol crashes(even can lose assets)

Lines of code Vulnerability details Impact If totalVotingPower getSharedProposalStorage.governanceValues.totalVotingPower -= votingPower; 1. Tak...

Apache NiFi Credentials Gather

This module will grab Apache NiFi credentials from various files on Linux. Module Options msf use post/linux/gather/apachenificredentials msf postapachenificredentials show actions ...actions... msf postapachenificredentials set ACTION msf postapachenificredentials show options ...show and set...

Important: Red Hat Security Advisory: insights-client security update

An update for insights-client is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

SUSE-SU-2023:4349-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in dodivsz,mtd-erasesize that could cause a local DoS. bsc1210778 - CVE-2023-45862: Fixed an issue in the ENE UB6250...

Important: Red Hat Security Advisory: insights-client security update

An update for insights-client is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Virtuozzo Hybrid Server 7.5 Update 5 Hotfix 2 (7.5.5-291)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 5 provides stability and usability bug fixes. Vulnerability id: PSBM-149314 When running the ‘vzpkg install template’ command, the system could install the log4j.jar file and treat its content as a security risk. Vulnerability id: PSBM-150027 So...

Virtuozzo Hybrid Infrastructure 5.2 Update 1 Hotfix 1 (5.2.1-69)

This update provides important security and stability fixes. Vulnerability id: VSTOR-75357 Fixed a critical security vulnerability. Vulnerability id: VSTOR-60071 Fixed a problem that occurs while opening backup archives with erasure coding. Vulnerability id: VSTOR-58571 The core storage crashed d...

Virtuozzo Hybrid Infrastructure 5.4 Update 4 Hotfix 2 (5.4.4-132)

This update provides important stability, security, and performance improvements. Vulnerability id: VSTOR-75357 Fixed a critical security vulnerability. Vulnerability id: VSTOR-76306 Fixed a problem that may occur while closing files with erasure coding. Vulnerability id: VSTOR-76257 Add the...

SUSE-SU-2023:4174-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-34323: Fixed a potential crash in C Xenstored due to an incorrect assertion XSA-440 bsc1215744. - CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems with IOMMU hardware and PCI passthrough enabled XSA-442 bsc1215746. -...

Ubuntu 20.04 ESM / 22.04 ESM : OpenEXR vulnerabilities (USN-5620-1)

The remote Ubuntu 20.04 ESM / 22.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5620-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image...

SUSE-SU-2023:4068-1 Security update for go1.20

This update for go1.20 fixes the following issues: - Update to go1.20.10 bsc1206346 - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid stream resets causing excessive work. This is also known as CVE-2023-44487. bsc1216109...

Vulnerabilities fixed in Juniper Junos OS and Junos OS Evolved

Vulnerabilities have been fixed in Juniper Junos OS and Junos OS Evolved. The vulnerabilities allow a malicious party to execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Accessing sensitive data Accessing system data Junipe...

SUSE-SU-2023:4022-1 Security update for conmon

This update for conmon fixes the following issues: conmon is rebuild with go1.21 to capture current stability, bug and security fixes. bsc1215806...

PT-2023-36276 · Conmon · Conmon

Name of the Vulnerable Software and Affected Versions: conmon affected versions not specified Description: The issue is related to conmon, which has been rebuilt with go1.21 to capture current stability, bug, and security fixes. Recommendations: At the moment, there is no information about a newe...

CVE-2023-25822 ReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

CVE-2023-25822 ReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements

ReportPortal is an AI-powered test automation platform. Prior to version 5.10.0 of the com.epam.reportportal:service-api module, corresponding to ReportPortal version 23.2, the ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1...

SUSE-SU-2023:3983-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops bsc1215422. - CVE-2020-36024: Fixed NULL Pointer Deference in FoFiType1C:convertToType1 bsc1214257. - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c...

SUSE-SU-2023:3947-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c bsc1214622. - CVE-2022-37051: Fixed abort in main in pdfunite.cc bsc1214621. - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service...