Oracle Quarterly Critical Patches are out today. New Alerts for Tanzu, Microsoft Edge, Dell, HPE, Alcatel-Lucent, and Linux.
Oracle
Oracle Critical Patch Update will be released this afternoon. The Pre-Release shows 353 security vulnerabiliities patched, with 246 remotely exploitable without authorization. Highest CVSSv3 score of 9.8
More info.
Tanzu has published 21 bulletins, all rated Medium, identifying vulnerabilities in third-party software included in the products.
More info.
Microsoft has updated Edge to incorporate the latest security updates for Chromium and 1 additional Edge-specific update.
More info.
Data Protection Search remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system. Dell rates this Critical.
More info.
Security vulnerabilities have been identified in HPE Unified OSS Console Assurance Monitoring that could be exploited to allow Remote Arbitrary Code or Command Execution, Local Elevation of Privilege, Local Memory Corruption, Local Buffer Overflow and Local Input Validation Vulnerability. Highest CVSSv3 score of 9.8
More info.
Security vulnerabilities have been identified in HPE ProLiant DL/ML/XL, Synergy, Edgeline and Alletra Servers. These vulnerabilities could be locally and remotely exploited to allow DoS. Highest CVSSv3 score of 5.5
More info.
Several vulnerabilities have been discovered in OpenSSH that affect FlexLM, OmniPCX Enterprise CS, ALE Enterprise Desk Phones, ALE-2/ALE-3, and H3/H6/M8.
More info.
SUSE has updated the kernel. More info.
Red Hat has updated the kernel. More info.
Debian has updated the kernel. More info.
Ubuntu has updated the kernel. More info.
