what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 26 - 45 of 45 RSS Feed

Files Date: 2022-12-08 to 2022-12-09

Red Hat Security Advisory 2022-8856-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8856-01 - An update for python-django-horizon is now available for Red Hat OpenStack Platform 16.2.4 (Train) on Red Hat Enterprise Linux (RHEL) 8.4.

tags | advisory, python
systems | linux, redhat
advisories | CVE-2022-1655
SHA-256 | 73f783affb3a1f670394244a0773cadb828e58a0520a0553bdd24b4a4b707754
Red Hat Security Advisory 2022-8854-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8854-01 - An update for python-scciclient is now available for Red Hat OpenStack Platform 16.2.4 (Train) director for Red Hat Enterprise Linux (RHEL) 8.4.

tags | advisory, python
systems | linux, redhat
advisories | CVE-2022-2996
SHA-256 | 54c5f8a5950ff7805f053b6ab3142875d10a9c33b40322711472ecb88f460646
Red Hat Security Advisory 2022-8872-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8872-01 - An update for python-django20 is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2. Issues addressed include cross site scripting, denial of service, remote shell upload, and remote SQL injection vulnerabilities.

tags | advisory, remote, denial of service, shell, vulnerability, xss, sql injection, python
systems | linux, redhat
advisories | CVE-2022-22818, CVE-2022-23833, CVE-2022-28346
SHA-256 | e5e7d087bfcb84b64424f6f5ba3f374d1774f83da6dd2bb3d702e487b2cbd58b
Red Hat Security Advisory 2022-8863-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8863-01 - Paramiko is a module for python 2.3 or greater that implements the SSH2 protocol for secure connections to remote machines. Unlike SSL, the SSH2 protocol does not require heirarchical certificates signed by a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.

tags | advisory, remote, arbitrary, shell, protocol, python
systems | linux, redhat
advisories | CVE-2022-24302
SHA-256 | 59534817e9e5c4ed208e21817cc8d384718759ee9feaec332ee49ea7ba65f1b5
Red Hat Security Advisory 2022-8861-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8861-01 - A fast multidimensional array facility for Python. Issues addressed include a null pointer vulnerability.

tags | advisory, python
systems | linux, redhat
advisories | CVE-2021-41495
SHA-256 | db4e9d888f93ad8c6a4af87ab7d72478e3a64fa36c30ba62261e5a5998b3d9a3
Red Hat Security Advisory 2022-8868-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8868-01 - An update for python-scciclient is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2.

tags | advisory, python
systems | linux, redhat
advisories | CVE-2022-2996
SHA-256 | 44e92dcd554e330adb9200d54d3d3190961f86b46fc4fef057c3baa7cb85c9d7
Red Hat Security Advisory 2022-8870-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8870-01 - An update for openstack-neutron is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2.

tags | advisory
systems | linux, redhat
advisories | CVE-2022-3277
SHA-256 | ae7d64da95a37fb583e10ef2acead294df6650dde11a9cb477c697abc575eac5
Red Hat Security Advisory 2022-8869-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8869-01 - An update for puppet-firewall is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2.

tags | advisory
systems | linux, redhat
advisories | CVE-2022-0675
SHA-256 | ea691b5923873715f04dde439c698d5fe0e37a8f646c85786e64664d8eda4fd7
Red Hat Security Advisory 2022-8855-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8855-01 - OpenStack Networking is a virtual network service for OpenStack. Just as OpenStack Compute provides an API to dynamically request and configure virtual servers, OpenStack Networking provides an API to dynamically request and configure virtual networks. These networks connect 'interfaces' from other OpenStack services. The OpenStack Networking API supports extensions to provide advanced network capabilities.

tags | advisory
systems | linux, redhat
advisories | CVE-2022-3277
SHA-256 | 8b54979c23a2864148ea256f7ead9419936fdbb6660090a44468a5ae9f35cb91
Red Hat Security Advisory 2022-8796-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8796-01 - An update for openstack-tripleo-heat-templates is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2.

tags | advisory
systems | linux, redhat
advisories | CVE-2021-4180
SHA-256 | f27be7344ecb6be53c2c51fd96dabd1e7c76040b29e471950427b9450d9a4b46
Red Hat Security Advisory 2022-8860-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8860-01 - An update for protobuf is now available for Red Hat OpenStack Platform 16.1.9 (Train) for Red Hat Enterprise Linux (RHEL) 8.2.

tags | advisory
systems | linux, redhat
advisories | CVE-2021-22570
SHA-256 | f2dc07020b1efa3391191a53395330c115d9c4281d1834f0a090cc851205aec8
Red Hat Security Advisory 2022-8850-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8850-01 - UltraJSON is an ultra fast JSON encoder and decoder. Issues addressed include a double free vulnerability.

tags | advisory
systems | linux, redhat
advisories | CVE-2022-31116, CVE-2022-31117
SHA-256 | 76f0a629c54ceda79fbc369649abc71da962c847f0728c2ddc0393ba7c216e1d
Red Hat Security Advisory 2022-8845-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8845-01 - Paramiko is a module for python 2.3 or greater that implements the SSH2 protocol for secure connections to remote machines. Unlike SSL, the SSH2 protocol does not require heirarchical certificates signed by a powerful central authority. You may know SSH2 as the protocol that replaced telnet and rsh for secure access to remote shells, but the protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel.

tags | advisory, remote, arbitrary, shell, protocol, python
systems | linux, redhat
advisories | CVE-2022-24302
SHA-256 | a6a2060126d1be99be2aca8297f1257ee4619fcacb1e48e24b430da0c6b1eb8c
Red Hat Security Advisory 2022-8846-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8846-01 - Puppet lets you centrally manage every important aspect of your system using a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, and files. Provides the central puppet server daemon which provides manifests to clients. The server can also function as a certificate authority and file server. This puppet headless subpackage may be used when there is no need to have puppet agent running as a service, for example, in a container image.

tags | advisory
systems | linux, redhat
advisories | CVE-2021-27025
SHA-256 | 09a6d8c41fa36cd4e78316d0bce68f6a2d9d08c7e54d378c1445e758727d9de5
Ubuntu Security Notice USN-5766-1
Posted Dec 8, 2022
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5766-1 - It was discovered that Heimdal did not properly manage memory when normalizing Unicode. An attacker could possibly use this issue to cause a denial of service.

tags | advisory, denial of service
systems | linux, ubuntu
advisories | CVE-2022-41916
SHA-256 | 7e2c89973f9e9dc3ce04e3c9668c878735de0bed36a0b63226843399bd5bc488
Red Hat Security Advisory 2022-8886-01
Posted Dec 8, 2022
Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2022-8886-01 - Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol server, as well as command-line utilities and Web UI packages for server administration.

tags | advisory, web, protocol
systems | linux, redhat
advisories | CVE-2022-2850
SHA-256 | 070cc2e7e028467b23d693e67b2052c2ebf2a45e6ed2cb6ca60c870c001b227f
Ubuntu Security Notice USN-5765-1
Posted Dec 8, 2022
Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 5765-1 - Jacob Champion discovered that PostgreSQL incorrectly handled SSL certificate verification and encryption. A remote attacker could possibly use this issue to inject arbitrary SQL queries when a connection is first established.

tags | advisory, remote, arbitrary
systems | linux, ubuntu
advisories | CVE-2021-23222
SHA-256 | 9a1464a0f2603b04b2110a5d8b3cbcd031c9fadc5f8aa2a6f77237b43689cd1a
Wireshark Analyzer 4.0.2
Posted Dec 8, 2022
Authored by Gerald Combs | Site wireshark.org

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.

Changes: Security fixes include multiple dissector infinite loops and a Kafka dissector memory exhaustion. Over a dozen other bug fixes as well as updated protocol support for ASN.1 PER, ASTERIX, BGP, BPv6, DTLS, EVS, GOOSE, GSM Osmux, IPv6, Kafka, Locamation IM, MONGO, NXP 802.15.4, OpenFlow v6, PCAP, Protobuf, RTP, S1AP, SKINNY, TCP, and WASSP.
tags | tool, sniffer, protocol
systems | windows, unix
SHA-256 | f35915699f2f9b28ddb211202d40ec8984e5834d3c911483144a4984ba44411d
TOR Virtual Network Tunneling Tool 0.4.7.12
Posted Dec 8, 2022
Authored by Roger Dingledine | Site tor.eff.org

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs). This is the source code release.

Changes: This version contains a major change that is a new key for moria1. Also, new metrics are exported on the MetricsPort for the congestion control subsystem.
tags | tool, remote, local, peer2peer
systems | unix
SHA-256 | 3b5d969712c467851bd028f314343ef15a97ea457191e93ffa97310b05b9e395
Windows HTTP.SYS Kerberos PAC Verification Bypass / Privilege Escalation
Posted Dec 8, 2022
Authored by James Forshaw, Google Security Research

The HTTP server implemented in HTTP.SYS on Windows handles authentication in a system thread which bypasses PAC verification leading to escalation of privilege.

tags | exploit, web
systems | windows
advisories | CVE-2022-35756, CVE-2022-41057
SHA-256 | 73ffca14ecbbd49fef40fa8d7691f553f1cd6ed289aaa1f61656fcd866416f5a
Page 2 of 2
Back12Next

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    17 Files
  • 16
    May 16th
    13 Files
  • 17
    May 17th
    22 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    0 Files
  • 21
    May 21st
    0 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close