vulnerabilities

  1. J

    Is proxmox affected by CVE-2024-1086?

    Hi, due to the recent update of CVE-2024-1086, I've been trying to figure out if the proxmox kernel would be affected as well. Based only on versioning I would say it is, but I know there are major differences with the standard Kernel used by Debian. So here are my questions: Is the pve kernel...
  2. N

    ClamAV CVE-2023-20032 etc. / Mitigation-Lösung bis zum Distri-Update?

    Hallo, hat jemand eine Lösung, wie man HFS+-Files anhand von Proxmox-Regeln identifizieren kann, so dass sie nicht in die ClamAV-Engine geschmissen werden? Aktuell scheinen sowohl Debian als auch Ubuntu ihre Repositories noch nicht aktualisiert zu haben. Proxmox nutzt hier 0.103.7, die als...
  3. C

    A lot more Kernel Vulnerabilities (Spectre V2, DoS of Hypervisor from KVMs, etc.)

    Hi, seems like Dirty Pipe wasn't the only vulnerability keeping us busy this week. I got notified about these new Security Advisories from Debian: https://www.debian.org/security/2022/dsa-5095 https://www.debian.org/security/2022/dsa-5096 I know Proxmox uses a modified Ubuntu Kernel but I was...