sanlock bug fix and enhancement update

The sanlock packages provide a shared storage lock manager. Hosts with shared access to a block device or a file can use sanlock to synchronize their activities. VDSM and libvirt use sanlock to synchronize access to shared devices or files. Bug Fixes and Enhancements: Support 50 concurrent...

The vulnerability of the get_old_root file in the fs/btrfs/ctree.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the getoldroot file in the fs/btrfs/ctree.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the implementation of the usbip_sockfd_store function in Linux kernel allows a hacker to induce a service failure.

The vulnerability in the implementation of the usbipsockfdstore function in Linux operating system kernels is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the fs/io_uring.c file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/iouring.c file in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2021-25158: Concurrent Execution using Shared Resource with Improper Synchronization

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant...

The vulnerability of the GPU Display Driver’s driver lies in the simultaneous execution using shared resources with improper synchronization, allowing a hacker to cause service failure.

The vulnerability of the GPU Display Driver’s driver lies in the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the X server component of the SDDM screen manager, related to simultaneous execution using a shared resource with incorrect synchronization, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the X server component of the SDDM screen manager is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data and compromise its integrity...

The vulnerability of the lock_fdc() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the lockfdc function in Linux operating systems is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Mojo messaging library in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Mojo messaging library in Google Chrome browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

CVE-2020-25581: Concurrent Execution using Shared Resource with Improper Synchronization

In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jailremove2 implementation, it may fail to kill some of the processes...

CVE-2020-25582: Concurrent Execution using Shared Resource with Improper Synchronization

In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec8 or killall1, calls jailattach2 to enter a jail, the jailed root can attach to it using ptrace2 before the current working directory is changed...

The vulnerability of the touch_pmd() function in Linux operating systems allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the touchpmd function in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...

Security update for connman (moderate)

openSUSE Security Update: Security update for connman Announcement ID: openSUSE-SU-2021:0452-1 Rating: moderate References: 1181751 Cross-References: CVE-2021-26675 CVE-2021-26676 CVSS scores: CVE-2021-26675 NVD : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-26676 NVD : 6.5...

SUSE-SU-2021:0906-1 Security update for SUSE Manager Server 4.1

This update fixes the following issues: cobbler: - Fix string replacement for @@xyz@@ - Better performing string replacements grafana-formula: - Set supported to false for unsupported systems bsc1182001 - Add SLES 15 SP3 and openSUSE Leap 15.3 to supported versions mgr-libmod: - Fix 'listmodules'...

The vulnerability of the device driver update application, Intel Driver and Support Assistant, arises due to synchronization errors when using a shared resource, allowing an attacker to cause a service failure.

The vulnerability of the device driver update application, Intel Driver and Support Assistant, arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause service failure...

PT-2021-2611 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.11.11 Description: The issue is related to errors in synchronization within the netfilter subsystem of the Linux kernel. Exploitation of this issue can allow an attacker to cause a denial of service, leading t...

CVE-2021-20261: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device /dev/fd0 are restricted to root. If the permissions on the device have changed the...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in internment crate before 0.4.2 for Rust, which stems from an unconditional implementation of Sync that results in memory-corrupted data contention. No detailed vulnerability...

[SECURITY] Fedora 33 Update: isync-1.4.1-1.fc33

mbsync is a command line application which synchronizes mailboxes. Currently Maildir and IMAP4 mailboxes are supported. New messages, message deletions and flag changes can be propagated both ways. mbsync is suitable for use in IMAP-disconnected mode...

The vulnerability in the socket implementation with address mapping AF_VSOCK in Linux kernel allows attackers to escalate their privileges.

The vulnerability in the socket implementation with AFVSOCK addressing net/vmwvsock/afvsock.c in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...