[SECURITY] Fedora 33 Update: nextcloud-client-3.1.3-1.fc33

Nextcloud-client enables you to connect to your private Nextcloud Server. With it you can create folders in your home directory, and keep the contents of those folders synced with your Nextcloud server. Simply copy a file into the directory and the Nextcloud Client does the rest...

Nextcloud: Trusted server shared secret stored unencrypted in the database

The attack vector here is that somebody gets their hands on your database. When two servers have added each other as trusted server they exchange shared secret token. With this token they can sync down each other user lists. However it seems that this token is stored in plain text in the...

PT-2024-11070 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists between a task aborting a transaction during a commit, a task doing an fsync, and the transaction kthread, leading to a use-after-free of the log root tree. Thi...

openSUSE: Security Advisory for cobbler (openSUSE-SU-2021:0046-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)

Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)

Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v11.3 Release – April 2021 (KB4539953)

Update for Azure File Sync agent version 11.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

AtomicBucket<T> unconditionally implements Send/Sync

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

RUSTSEC-2021-0113 AtomicBucket<T> unconditionally implements Send/Sync

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

PT-2021-7757 · Red Hat +6 · 389 Directory Server +7

Name of the Vulnerable Software and Affected Versions: 389 Directory Server versions affected versions not specified Description: The issue is related to a NULL pointer dereference error. An authenticated attacker can cause a crash by using a specially crafted query with a sync repl client in...

Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)

Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)

Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v12.0 Release – March 2021 (KB4568585)

Update for Azure File Sync agent version 12.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

Unspecified Vulnerability in Rust (CNVD-2021-17257)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in internment crate before 0.4.2 for Rust, which stems from an unconditional implementation of Sync that results in memory-corrupted data contention. No detailed vulnerability...

CVE-2021-28037

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern...

Memory corruption

An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.19 and fixes at least the following security issues: An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An...

Azure File Sync Agent v11.2 Release – February 2021 (KB4539952)

Update for Azure File Sync agent version 11.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v11.2 Release – February 2021 (KB4539952)

Update for Azure File Sync agent version 11.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v11.2 Release – February 2021 (KB4539952)

Update for Azure File Sync agent version 11.2.0.0. For more details, see the associated Microsoft Knowledge Base article...