Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-2098-1: ipmitool security upda
Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received from a remote LAN party, which may lead to buffer overf…
Mageia 2020-0070: sqlite3 security upda
Updated sqlite3 packages fix security vulnerabilities: An out of bounds write flaw (CVE-2019-13734), insufficient data validation flaw (CVE-2019-13750), unini…
Mageia 2020-0057: fontforge security upda
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c (CVE-2020-5395) FontForge 20190801 has a heap-based buffer overflow in the Type2NotDef…
SciLinux: SLSA-2020-0203-1 Important: libarchive on SL7.x x86_
libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry (CVE-2019-18408) SL7 x86_64 lib…
RedHat: RHSA-2020-0172:01 Moderate: openvswitch2.12 security and bug f
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0171:01 Moderate: openvswitch2.11 security and bug f
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
Ubuntu 4245-1: PySAML2 vulnerabili
PySAML2 could be made to bypass signature verification with arbitrary data.
RedHat: RHSA-2020-0168:01 Moderate: openvswitch2.12 security and bug f
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0166:01 Moderate: openvswitch2.11 security and bug f
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0165:01 Moderate: openvswitch security and bug fix upda
An update for openvswitch is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate…
Fedora 30: phpMyAdmin FEDORA-2020-cb897583
**Version 4.9.4** (2020-01-07) - issue #15724 Fix 2FA was disabled by a bug - issue [security] Fix SQL injection vulnerability on the user accounts page (PM…
Ubuntu 4221-2: libpcap vulnerabili
Applications using libpcap could be made to crash if given specially crafted data.
Debian LTS: DLA-2065-1: apache-log4j1.2 security upda
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
Mageia 2020-0027: firefox security upda
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into c…
Are You Ready for Microsoft Windows 7 End of Support on 14th January 2020?
January 14, 2020, is a day cybersecurity stakeholders should pay attention to, as it marks the end of Microsoft support in Windows 7.From a security perspectiv…
Mageia 2020-0019: freeimage security upda
The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file,…
Mageia 2019-0419: pdfresurrect security upda
Updated pdfresurrect package fixes security vulnerabilities: A vulnerability was found in PDFResurrect 0.15 has a buffer overflow via a crafted PDF file becau…
Mageia 2019-0407: apache security upda
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to …
Debian: DSA-4583-1: spip security upda
A vulnerability was discovered in the SPIP publishing system, which could result in unauthorised writes to the database by authors. The oldstable distribution …
New PlunderVolt Attack Targets Intel SGX Enclaves by Tweaking CPU Voltage
A team of cybersecurity researchers demonstrated a novel yet another technique to hijack Intel SGX, a hardware-isolated trusted space on modern Intel CPUs that…
Ubuntu 4221-1: libpcap vulnerabili
Applications using libpcap could be made to crash if given specially crafted data.
Fedora 30: libidn2 FEDORA-2019-160303eb
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Fedora 31: mingw-libidn2 FEDORA-2019-1ebb5c92
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Fedora 31: libidn2 FEDORA-2019-f454c7a1
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…