Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
RedHat: RHSA-2020-0172:01 Moderate: openvswitch2.12 security and bug f
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0171:01 Moderate: openvswitch2.11 security and bug f
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
Ubuntu 4245-1: PySAML2 vulnerabili
PySAML2 could be made to bypass signature verification with arbitrary data.
RedHat: RHSA-2020-0168:01 Moderate: openvswitch2.12 security and bug f
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0166:01 Moderate: openvswitch2.11 security and bug f
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0165:01 Moderate: openvswitch security and bug fix upda
An update for openvswitch is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate…
Fedora 30: phpMyAdmin FEDORA-2020-cb897583
**Version 4.9.4** (2020-01-07) - issue #15724 Fix 2FA was disabled by a bug - issue [security] Fix SQL injection vulnerability on the user accounts page (PM…
Ubuntu 4221-2: libpcap vulnerabili
Applications using libpcap could be made to crash if given specially crafted data.
Debian LTS: DLA-2065-1: apache-log4j1.2 security upda
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
Mageia 2020-0027: firefox security upda
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into c…
Mageia 2020-0019: freeimage security upda
The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file,…
Mageia 2019-0419: pdfresurrect security upda
Updated pdfresurrect package fixes security vulnerabilities: A vulnerability was found in PDFResurrect 0.15 has a buffer overflow via a crafted PDF file becau…
Mageia 2019-0407: apache security upda
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to …
Debian: DSA-4583-1: spip security upda
A vulnerability was discovered in the SPIP publishing system, which could result in unauthorised writes to the database by authors. The oldstable distribution …
New PlunderVolt Attack Targets Intel SGX Enclaves by Tweaking CPU Voltage
A team of cybersecurity researchers demonstrated a novel yet another technique to hijack Intel SGX, a hardware-isolated trusted space on modern Intel CPUs that…
Ubuntu 4221-1: libpcap vulnerabili
Applications using libpcap could be made to crash if given specially crafted data.
Fedora 30: libidn2 FEDORA-2019-160303eb
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Fedora 31: mingw-libidn2 FEDORA-2019-1ebb5c92
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Fedora 31: libidn2 FEDORA-2019-f454c7a1
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Debian LTS: DLA-1998-1: python-psutil security upda
It was discovered that there were multiple double free vulnerabilities in python-psutil, a Python module providing convenience functions for accessing system p…
RedHat: RHSA-2019-3699:01 Moderate: evolution security and bug fix update
An update for evolution, evolution-data-server, and evolution-ews is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this upda…
Kernel Address Space Isolation Is Still Being Explored For Better Security
IBM developers and others continue exploring the potential for address space isolation in the Linux kernel to reduce the risk of leaking sensitive data in atta…
Mageia 2019-0311: aspell security update
Updated aspell packages fix security vulnerability: libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/…
Fedora 30: jackson-parent FEDORA-2019-b171554877
- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to versi…