Piergiorgio Venuti

Updates IaaS Infrastructure – version 5.0

New IaaS Architecture was released February 3th!

The following section list all the features, improvements, and fixed included in IaaS Service  5.0 release:

Type Summary
Improvement Now Redis is used to lock LVM operations.
Improvement RHEL/CentOS 5.x Ruby packages compiled with OpenSSL 1.0.1e.
Improvement Erlang upgraded to 18.3 version.
Improvement Improved reliability and cloud engine.
Fix Fixed the issue when after editing a swap disk that had been manually added (built or attached), the disk was removed from fstab and wasn’t available anymore.
Fix Fixed the issue when Virtual Servers built on vCloud compute resources were shut down after increasing the disk size.
Fix Fixed the problem when under certain conditions the vCloud user group created from GUI got duplicated. This led to duplicated resource pools and general misconfiguration of vCloud.
Fix Fixed the problem when in multi-vCenter environment the stats have not been collected from one of vCenter instances.
Fix Fixed the issue with inserting media to vCloud Director VS.
Fix Fixed the synchronization problem when deleting a media file from the catalog in vCloud Director was not updated in SOD CP.
Fix Fixed the issue when vCloud console did not show the correct size for Windows VSs.
Fix Fixed the problem when password became out of sync in vCloud Director after an admin had been editing a user profile and left the password blank.
Fix Fixed the problem when it was impossible to upload an ISO when the image extension was with capital ISO letters.
Fix Fixed moving Firewall Rules down
Fix Fixed the problem when Windows VS build failed if owner’s name contained incompatible character encodings: ASCII-8BIT and UTF-8
Fix Fixed a range of minor bugs related to VPN IPsec of vCloud Director integration.
Fix Fixed the problem when it was impossible to build a VS from ISO with operating system Windows.
Fix Fixed the error which occurred for a backup’s transaction log item.
Fix Fixed the broken autoscaling for load balancer clusters (autoscaling type) .

 

Share


RSS

More Articles…

Categories …

Tags

RSS Unknown Feed

RSS Full Disclosure

  • Tiki Wiki CMS Groupware <= 28.3 Two Server-Side Template Injection Vulnerabilities July 10, 2025
    Posted by Egidio Romano on Jul 09---------------------------------------------------------------------------------- Tiki Wiki CMS Groupware
  • KL-001-2025-011: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Server-Side Request Forgery July 9, 2025
    Posted by KoreLogic Disclosures via Fulldisclosure on Jul 09KL-001-2025-011: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Server-Side Request Forgery Title: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Server-Side Request Forgery Advisory ID: KL-001-2025-011 Publication Date: 2025-07-09 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2025-011.txt 1. Vulnerability Details      Affected Vendor: Schneider Electric      Affected...
  • KL-001-2025-010: Schneider Electric EcoStruxure IT Data Center Expert Privilege Escalation July 9, 2025
    Posted by KoreLogic Disclosures via Fulldisclosure on Jul 09KL-001-2025-010: Schneider Electric EcoStruxure IT Data Center Expert Privilege Escalation Title: Schneider Electric EcoStruxure IT Data Center Expert Privilege Escalation Advisory ID: KL-001-2025-010 Publication Date: 2025-07-09 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2025-010.txt 1. Vulnerability Details      Affected Vendor: Schneider Electric      Affected Product: EcoStruxure IT Data Center Expert...
  • KL-001-2025-009: Schneider Electric EcoStruxure IT Data Center Expert Remote Command Execution July 9, 2025
    Posted by KoreLogic Disclosures via Fulldisclosure on Jul 09KL-001-2025-009: Schneider Electric EcoStruxure IT Data Center Expert Remote Command Execution Title: Schneider Electric EcoStruxure IT Data Center Expert Remote Command Execution Advisory ID: KL-001-2025-009 Publication Date: 2025-07-09 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2025-009.txt 1. Vulnerability Details      Affected Vendor: Schneider Electric      Affected Product: EcoStruxure IT Data Center...
  • KL-001-2025-008: Schneider Electric EcoStruxure IT Data Center Expert Root Password Discovery July 9, 2025
    Posted by KoreLogic Disclosures via Fulldisclosure on Jul 09KL-001-2025-008: Schneider Electric EcoStruxure IT Data Center Expert Root Password Discovery Title: Schneider Electric EcoStruxure IT Data Center Expert Root Password Discovery Advisory ID: KL-001-2025-008 Publication Date: 2025-07-09 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2025-008.txt 1. Vulnerability Details      Affected Vendor: Schneider Electric      Affected Product: EcoStruxure IT Data Center...
  • KL-001-2025-007: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Remote Code Execution July 9, 2025
    Posted by KoreLogic Disclosures via Fulldisclosure on Jul 09KL-001-2025-007: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Remote Code Execution Title: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Remote Code Execution Advisory ID: KL-001-2025-007 Publication Date: 2025-07-09 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2025-007.txt 1. Vulnerability Details      Affected Vendor: Schneider Electric      Affected Product:...
  • KL-001-2025-006: Schneider Electric EcoStruxure IT Data Center Expert XML External Entities Injection July 9, 2025
    Posted by KoreLogic Disclosures via Fulldisclosure on Jul 09KL-001-2025-006: Schneider Electric EcoStruxure IT Data Center Expert XML External Entities Injection Title: Schneider Electric EcoStruxure IT Data Center Expert XML External Entities Injection Advisory ID: KL-001-2025-006 Publication Date: 2025-07-09 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2025-006.txt 1. Vulnerability Details      Affected Vendor: Schneider Electric      Affected Product: EcoStruxure IT...
  • eSIM security research (GSMA eUICC compromise and certificate theft) July 9, 2025
    Posted by Security Explorations on Jul 09Dear All, We broke security of Kigen eUICC card with GSMA consumer certificates installed into it. The eUICC card makes it possible to install the so called eSIM profiles into target chip. eSIM profiles are software representations of mobile subscriptions. For many years such mobile subscriptions had a form […]
  • Directory Traversal "Site Title" - bluditv3.16.2 July 8, 2025
    Posted by Andrey Stoykov on Jul 07# Exploit Title: Directory Traversal "Site Title" - bluditv3.16.2 # Date: 07/2025 # Exploit Author: Andrey Stoykov # Version: 3.16.2 # Tested on: Debian 12 # Blog: https://msecureltd.blogspot.com/ Directory Traversal "Site Title" #1: Steps to Reproduce: 1. Login with admin account and "General" > "General" 2. Set the "Site […]
  • XSS via SVG File Uploa - bluditv3.16.2 July 8, 2025
    Posted by Andrey Stoykov on Jul 07# Exploit Title: XSS via SVG File Upload - bluditv3.16.2 # Date: 07/2025 # Exploit Author: Andrey Stoykov # Version: 3.16.2 # Tested on: Debian 12 # Blog: https://msecureltd.blogspot.com/ XSS via SVG File Upload #1: Steps to Reproduce: 1. Login with admin account and click on "General" > "Logo"

Customers

Newsletter

{subscription_form_1}