Monthly Patches are out for Qualcomm and MediaTek. A backdoor has been discovered in XZ Utils. New Alerts for Eaton, Microsoft Edge, Dell, and HPE.
XZ Utils Exploit
A backdoor has been installed XZ Utils. It was discovered before it made its way into most Linux distributions and its impact should be limited. CVSSv3 score of 10.
More info. And here. And here.
Arch Linux has published a bulletin. More info.
Debian's bulletin identifies testing, unstable, and experimental distributions as affected.. More info.
Getoo says they don't think they're affected. More info.
NetBSD is unaffected. More info.
QNAP says their products are not affected. More info.
Qualcomm Monthly Patches are out, with 12 addressed vulnerabilities, 1 rated Critical and the rest High. Highest CVSSv3 score of 9.8
More info.
The MediaTek Monthly Patches include 19 vulnerabilities, 4 rated High and the rest Medium. These vulnerabilities can lead to RCE, DoS, EoP, and Information Disclosure.
More info.
Eaton has identified their PowerAlert Element Manager product as being updated to fix the 2021 Apache log4j vulnerabilties. CVSSv3 score of 10.
More info.
Microsoft as updated Edge to include the latest chromium fixes.
More info.
Data Protection Advisor has been updated to fix multiple vulnerabilities. Dell rates this Critical.
Note the vulnerabilities date back to 2016, and include log4j.
More info.
A security vulnerability has been identified in Web ViewPoint Enterprise software. A remote attacker can access resources on a NonStop system. CVSSv3 score of 8.3
More info.
Comments