Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 11 (VA MN: 7.0.2-649, VA Agent: 7.0.2-372)

Hotfix 11 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37488 Changing VM's OS distribution via API calls could reset the 'cpulimit' and 'iolimit' values. Vulnerability id: PVA-37495 VA Agent did not return the 'counterioused' value. Vulnerability id:...

Code injection

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a...

Virtuozzo Hybrid Server 7.5 Update 1 Hotfix 2 (7.5.1-736)

The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 1 provides a stability and usability bug fix. All customers that use CloudBlue Cloud Infrastructure Automation with Virtuozzo Hybrid Server 7.5 and newer are strongly recommended to install the hotfix. Vulnerability id: PSBM-125586 Cloud...

Virtuozzo Hybrid Server 7.5 Update 1 Hotfix 1 (7.5.1-734)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 1 provides a new feature and a stability and usability bug fix. Vulnerability id: PSBM-129299 Version 1 ploop images of virtual environments created in Virtuozzo 6 and earlier could get corrupted after updating to Virtuozzo Hybrid Server 7.5.1...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 10 (VA MN: 7.0.2-647, VA Agent: 7.0.2-367)

Hotfix 10 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37446 Unable to set "Advanced firewall mode with the default policy Drop" for containers. Vulnerability id: PVA-37477 VA Agent could consume 100% of one CPU. Vulnerability id: PVA-37479 VA Agent...

Product update: Virtuozzo 7.0 Update 13 Hotfix 3 (7.0.13-306)

The Hotfix 3 for Virtuozzo 7.0 Update 13 provides a stability and usability bug fix. Vulnerability id: VSTOR-32856, VSTOR-32857 Unreadable files may be created when using erasure coding during the upgrade from Update 12 to 13. Fix such files with the command 'vstorage -c -A set-attr -p...

Product update: Virtuozzo 7.0 Update 13 Hotfix 2 (7.0.13-305)

The Hotfix 2 for Virtuozzo 7.0 Update 13 provides stability and usability bug fixes. Vulnerability id: PSBM-102741 Ability to check and fix containers with broken BAT. Vulnerability id: PSBM-102751 Under certain conditions, MDS could crash...

Logic Flaw Vulnerability in PopojiCMS

PopojiCMS is a content management system. A logic flaw vulnerability exists in PopojiCMS, which can be exploited by attackers to cause an impact on usability...

SUSE-SU-2020:0693-1 Security update for wireshark

This update for wireshark and libmaxminddb fixes the following issues: Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support bsc1156288. New features include: - Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC -...

Ebuy Mall System EbuyCMS Exists Logic Flaw Vulnerability of Hainan Yi and You Technology Co.

Ebuycms specializes in professional-grade e-commerce mall platform system developed for the majority of small and medium-sized enterprises SMEs. A logic flaw vulnerability exists in Ebuycms, which can be exploited by attackers to cause an impact on usability...

Product update: Virtuozzo 7.0 Update 13 Hotfix 1 (7.0.13-302)

The Hotfix 1 for Virtuozzo 7.0 Update 13 provides stability and usability bug fixes. Vulnerability id: PSBM-101223, PSBM-102156 Unable to live-migrate container with splunk, sensu, ossec-hids tools running inside. Vulnerability id: PSBM-102472 systemd 219-67.vl7.4 not working after the update...

Product update: Virtuozzo 7.0 Update 13 (7.0.13-298)

The Update 13 for Virtuozzo 7.0 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1062.12.1.vz7.131.10. Vulnerability id: PSBM-95072 'pstorage-target' files are left over after successful migrations of VMs on Virtuozzo Storage from...

Huawei Taurus-AL00B Resource Management Error Vulnerability

The Huawei Taurus-AL00B is a smartphone from the Chinese company Huawei Huawei. A resource management error vulnerability exists in previous versions of Huawei Taurus-AL00B 10.0.0.203 C00E201R7P2. A local attacker could exploit the vulnerability to modify information and affect the usability of t...

openSUSE: Security Advisory for wireshark (openSUSE-SU-2020:0362-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0362-1 Security update for wireshark

This update for wireshark and libmaxminddb fixes the following issues: Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support bsc1156288. New features include: - Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC -...

Memory corruption vulnerability in QQ movie player of Shenzhen Tencent Computer System Co. Ltd (CNVD-2020-23516)

QQ Video Player is a Tencent relaunched full-format video player software, fully supports 3GP, MKV, MOV, AVI, FLV, MP4 and other common formats of video files, support for MKV embedded subtitles and SRT, SMI plug-in subtitles, while supporting multi-track switching. A memory corruption...

Empower Firstline Workers with Azure AD and YubiKey passwordless authentication

At the end of February, Microsoft announced the FIDO2 passwordless support for hybrid environments. The integration of FIDO2-based YubiKeys and Azure Active Directory Azure AD is a game changer. It combines the ubiquity of Azure AD, the usability of YubiKey, and the security of both solutions to...

Virtuozzo Hybrid Server 7.5 Hotfix 3 (7.5.0-610)

The Hotfix 3 for Virtuozzo Hybrid Server 7.5 provides stability and usability bug fixes. Vulnerability id: PSBM-124766 VM's filesystem could remain frozen and non-working after backup. Vulnerability id: PSBM-125260 EZ templates are now installed and their post-install scripts are now run in the...

Google Bans 600 Android Apps from Play Store for Serving Disruptive Ads

Google has banned nearly 600 Android apps from the Play Store for bombarding users with disruptive ads and violating its advertising guidelines. The company categorizes disruptive ads as "ads that are displayed to users in unexpected ways, including impairing or interfering with the usability of...

Product update: Virtuozzo 7.0 Update 12 Hotfix 3 (7.0.12-361)

The Hotfix 3 for Virtuozzo 7.0 Update 12 provides stability and usability bug fixes. Vulnerability id: PSBM-100126 Ploop is corrupted after node reboot repair image outgrows device size. Vulnerability id: PSBM-101150 vzstat does not show actual IO and IOPS load and limits. Vulnerability id:...