Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
This Unpatchable Flaw Affects All Intel CPUs Released in Last 5 Years
All Intel processors released in the past 5 years contain an unpatchable vulnerability that could allow hackers to compromise almost every hardware-enabled sec…
Debian LTS: DLA-2134-1: pdfresurrect security upda
It was discovered that there was an out-of-bounds write vulnerability in pdfresurrect, a tool for extracting or scrubbing versioning data from PDF documents.
Ubuntu 4296-1: Django vulnerabili
Django could allow unintended access to the database.
Debian LTS: DLA-2130-1: libapache2-mod-auth-openidc securi
An issue has been found in libapache2-mod-auth-openidc, an OpenID Connect authentication module for Apache. Due to insufficient validatation of URLs an Open Re…
Debian: DSA-4635-1: proftpd-dfsg security upda
Antonio Morales discovered an user-after-free flaw in the memory pool allocator in ProFTPD, a powerful modular FTP/SFTP/FTPS server. Interrupting current data …
Mageia 2020-0097: ipmitool security upda
Updated ipmitool package fix security vulnerability: Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received f…
Mageia 2020-0096: upx security upda
The updated packages fix security vulnerabilities: PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (do…
Mageia 2020-0084: exiv2 security upda
The updated packages fix a security vulnerability: In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop a…
Debian LTS: DLA-2098-1: ipmitool security upda
Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received from a remote LAN party, which may lead to buffer overf…
Mageia 2020-0070: sqlite3 security upda
Updated sqlite3 packages fix security vulnerabilities: An out of bounds write flaw (CVE-2019-13734), insufficient data validation flaw (CVE-2019-13750), unini…
Mageia 2020-0057: fontforge security upda
FontForge 20190801 has a use-after-free in SFD_GetFontMetaData in sfd.c (CVE-2020-5395) FontForge 20190801 has a heap-based buffer overflow in the Type2NotDef…
SciLinux: SLSA-2020-0203-1 Important: libarchive on SL7.x x86_
libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry (CVE-2019-18408) SL7 x86_64 lib…
RedHat: RHSA-2020-0172:01 Moderate: openvswitch2.12 security and bug f
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0171:01 Moderate: openvswitch2.11 security and bug f
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Mode…
Ubuntu 4245-1: PySAML2 vulnerabili
PySAML2 could be made to bypass signature verification with arbitrary data.
RedHat: RHSA-2020-0168:01 Moderate: openvswitch2.12 security and bug f
An update for openvswitch2.12 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0166:01 Moderate: openvswitch2.11 security and bug f
An update for openvswitch2.11 is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Mode…
RedHat: RHSA-2020-0165:01 Moderate: openvswitch security and bug fix upda
An update for openvswitch is now available for Fast Datapath for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate…
Fedora 30: phpMyAdmin FEDORA-2020-cb897583
**Version 4.9.4** (2020-01-07) - issue #15724 Fix 2FA was disabled by a bug - issue [security] Fix SQL injection vulnerability on the user accounts page (PM…
Ubuntu 4221-2: libpcap vulnerabili
Applications using libpcap could be made to crash if given specially crafted data.
Debian LTS: DLA-2065-1: apache-log4j1.2 security upda
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
Mageia 2020-0027: firefox security upda
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into c…
Mageia 2020-0019: freeimage security upda
The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file,…
Mageia 2019-0419: pdfresurrect security upda
Updated pdfresurrect package fixes security vulnerabilities: A vulnerability was found in PDFResurrect 0.15 has a buffer overflow via a crafted PDF file becau…