Linux - SITE - Advanced Web Factories

/*====== google reCaptcha ======*/

Linux (6)

CentOS/Red Hat Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

Red Hat Security Advisory 2024-1859-03
Operating System: RedHat ≈ Packet Storm Apr 17, 2024 | 15:45 pm
Red Hat Security Advisory 2024-1859-03 - OpenShift API for Data Protection 1.3.1 is now available. Issues addressed include a denial of service vulnerability.
Read more...
Red Hat Security Advisory 2024-1835-03
Operating System: RedHat ≈ Packet Storm Apr 17, 2024 | 15:44 pm
Red Hat Security Advisory 2024-1835-03 - An update for shim is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Issues addressed include buffer overflow, bypass, integer overflow, and out of bounds read vulnerabilities.
Read more...
Red Hat Security Advisory 2024-1770-03
Operating System: RedHat ≈ Packet Storm Apr 17, 2024 | 15:43 pm
Red Hat Security Advisory 2024-1770-03 - Red Hat OpenShift Container Platform release 4.15.9 is now available with updates to packages and images that fix several bugs and add enhancements.
Read more...
Red Hat Security Advisory 2024-1831-03
Operating System: RedHat ≈ Packet Storm Apr 16, 2024 | 14:04 pm
Red Hat Security Advisory 2024-1831-03 - An update for kernel is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support. Issues addressed include out of bounds write and use-after-free vulnerabilities.
Read more...
Red Hat Security Advisory 2024-1812-03
Operating System: RedHat ≈ Packet Storm Apr 15, 2024 | 15:57 pm
Red Hat Security Advisory 2024-1812-03 - Custom Metrics Autoscaler Operator for Red Hat OpenShift including security updates. Issues addressed include denial of service and memory leak vulnerabilities.
Read more...
Red Hat Security Advisory 2024-1803-03
Operating System: RedHat ≈ Packet Storm Apr 15, 2024 | 15:54 pm
Red Hat Security Advisory 2024-1803-03 - Updates for bind and bind-dyndb-ldap are now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Read more...
Red Hat Security Advisory 2024-1802-03
Operating System: RedHat ≈ Packet Storm Apr 15, 2024 | 15:53 pm
Red Hat Security Advisory 2024-1802-03 - An update for unbound is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Read more...
Red Hat Security Advisory 2024-1782-03
Operating System: RedHat ≈ Packet Storm Apr 15, 2024 | 15:52 pm
Red Hat Security Advisory 2024-1782-03 - An update for bind and dhcp is now available for Red Hat Enterprise Linux 8.
Read more...
Red Hat Security Advisory 2024-1786-03
Operating System: RedHat ≈ Packet Storm Apr 12, 2024 | 14:40 pm
Red Hat Security Advisory 2024-1786-03 - An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Issues addressed include a denial of service vulnerability.
Read more...
The Product Security Blog has moved!
Red Hat Security Blog Blog Posts Mar 19, 2019 | 19:38 pm
Red Hat Product Security has joined forces with other security teams inside Red Hat to publish our content in a common venue using the Security channel of the Red Hat Blog.This move provides a wider variety of important Security topics,[…]
Read more...
New Red Hat Product Security OpenPGP key
Red Hat Security Blog Blog Posts Aug 22, 2018 | 13:30 pm
Red Hat Product Security has transitioned from using its old 1024-bit DSA OpenPGP key to a new 4096-bit RSA OpenPGP key.This was done to improve the long-term security of our communications with our customers and also to meet current key[…]
Read more...
SPECTRE Variant 1 scanning tool
Red Hat Security Blog Blog Posts Jul 18, 2018 | 13:30 pm
As part of Red Hat's commitment to product security we have developed a tool internally that can be used to scan for variant 1 SPECTRE vulnerabilities. As part of our commitment to the wider user community, we are introducing this[…]
Read more...
Red Hat’s disclosure process
Red Hat Security Blog Blog Posts Jul 10, 2018 | 13:00 pm
Last week, a vulnerability (CVE-2018-10892) that affected CRI-O, Buildah, Podman, and Docker was made public before some affected upstream projects were notified. We regret that this was not handled in a way that lives up to our own standards around[…]
Read more...
Join us in San Francisco at the 2018 Red Hat Summit
Red Hat Security Blog Blog Posts Apr 23, 2018 | 14:30 pm
This year’s Red Hat Summit will be held on May 8-10 in beautiful San Francisco, USA.Product Security will be joining many Red Hat security experts in presenting and assisting subscribers and partners at the show.Here is a sneak peek at[…]
Read more...
Certificate Transparency and HTTPS
Red Hat Security Blog Blog Posts Apr 17, 2018 | 15:00 pm
Google has announced that on April 30, 2018, Chrome will:“...require that all TLS server certificates issued after 30 April, 2018 be compliant with the Chromium CT Policy. After this date, when Chrome connects to a site serving a publicly-trusted certificate[…]
Read more...
Let's talk about PCI-DSS
Red Hat Security Blog Blog Posts Feb 28, 2018 | 14:30 pm
For those who aren’t familiar with Payment Card Industry Data Security Standard (PCI-DSS), it is the standard that is intended to protect our credit card data as it flows between systems and is stored in company databases.PCI-DSS requires that all[…]
Read more...
Security is from Mars, Developers are from Venus…...or ARE they?
Red Hat Security Blog Blog Posts Nov 16, 2017 | 15:00 pm
It is a tale as old as time.Developers and security personnel view each other withsuspicion.The perception is that a vast gulf of understanding and ability lies between the two camps.“They can’t possibly understand what it is to do my job!”[…]
Read more...
Abuse of RESTEasy Default Providers in JBoss EAP
Red Hat Security Blog Blog Posts Oct 18, 2017 | 13:30 pm
Red Hat JBoss Enterprise Application Platform (EAP) is a commonly used host for Restful webservices. A powerful but potentially dangerous feature of Restful webservices on JBoss EAP is the ability to accept any media type. If not configured to accept[…]
Read more...
Kernel Stack Protector and BlueBorne
Red Hat Security Blog Blog Posts Sep 12, 2017 | 11:51 am
Today, a security issue called BlueBorne was disclosed, a vulnerability that could be used to attack sensitive systems via the Bluetooth protocol. Specifically, BlueBorne is a flaw where a remote (but physically quite close) attacker could get root on a[…]
Read more...
The RHSA notifications you want, right in your Inbox
Red Hat Security Blog Blog Posts May 17, 2017 | 13:30 pm
Red Hat Product Security takes pride in the quality and timeliness of its Security Advisories and all the accompanying information we publish for every erratum and vulnerability that we track and fix in our products.There are many ways in which[…]
Read more...
Security Scoring and Grading for Container Images
Red Hat Security Blog Blog Posts Apr 25, 2017 | 16:26 pm
We have just rolled out an update to the interface of the Red Hat Container Catalog that attempts to answer to the question of whether or not a particular container image available in the Container Catalog can be considered secure.In[…]
Read more...
Join us at Red Hat Summit 2017
Red Hat Security Blog Blog Posts Apr 19, 2017 | 13:30 pm
As you’ve probably heard, this year’s Red Hat Summit is in Boston May 2-4. Product Security is looking forward to taking over multiple sessions and activities over the course of those 3 days, and we wanted to give you a[…]
Read more...
Customer security awareness: alerting you to vulnerabilities that are of real risk
Red Hat Security Blog Blog Posts Mar 22, 2017 | 13:30 pm
Every day we are bombarded with information. Something is always happening somewhere to someone and unfortunately it's rarely good. Looking at this through the lens of information security, NOT getting the right details at the appropriate time could be the[…]
Read more...
Red Hat Product Security Risk Report 2016
Red Hat Security Blog Blog Posts Mar 7, 2017 | 14:39 pm
At Red Hat, our dedicated Product Security team analyzes threats and vulnerabilities against all our products and provides relevant advice and updates through the Red Hat Customer Portal. Customers can rely on this expertise to help them quickly address the[…]
Read more...
Do you know where that open source came from?
Red Hat Security Blog Blog Posts Feb 8, 2017 | 14:30 pm
Last year, while speaking at RSA, a reporter asked me about container provenance. This wasn’t the easiest question to answer because there is a lot of nuance around containers and what’s inside them. In response, I asked him if he[…]
Read more...
Deprecation of Insecure Algorithms and Protocols in RHEL 6.9
Red Hat Security Blog Blog Posts Jan 3, 2017 | 14:30 pm
Cryptographic protocols and algorithms have a limited lifetime—much like everything else in technology. Algorithms that provide cryptographic hashes and encryption as well as cryptographic protocols have a lifetime after which they are considered either too risky to use or plain[…]
Read more...
Evolution of the SSL and TLS protocols
Red Hat Security Blog Blog Posts Nov 16, 2016 | 14:30 pm
The Transport Layer Security (TLS) protocol is undoubtedly the most widely used protocol on the Internet today. If you have ever done an online banking transaction, visited a social networking website, or checked your email, you have most likely used[…]
Read more...
From There to Here (But Not Back Again)
Red Hat Security Blog Blog Posts Oct 24, 2016 | 13:30 pm
Red Hat Product Security recently celebrated our 15th anniversary this summer and while I cannot claim to have been with Red Hat for that long (although I’m coming up on 8 years myself), I’ve watched the changes from the “0day”[…]
Read more...
Happy 15th Birthday Red Hat Product Security
Red Hat Security Blog Blog Posts Oct 17, 2016 | 13:30 pm
This summer marked 15 years since we founded a dedicated Product Security team for Red Hat.While we often publish information in this blog about security technologies and vulnerabilities, we rarely give an introspection into the team itself.So I’d like, if[…]
Read more...
Redefining how we share our security data.
Red Hat Security Blog Blog Posts Jun 23, 2016 | 13:30 pm
Red Hat Product Security has long provided various bits of machine-consumable information to customers and users via our Security Data page.Today we are pleased to announce that we have made it even easier to access and parse this data through[…]
Read more...
The Answer is always the same: Layers of Security
Red Hat Security Blog Blog Posts May 25, 2016 | 13:30 pm
There is a common misperception that now that containers support seccomp we no longer need SELinux to help protect our systems.WRONG.The big weakness in containers is the container possesses the ability to interact with the host kernel and the host[…]
Read more...
CVE-2016-3710: QEMU: out-of-bounds memory access issue
Red Hat Security Blog Blog Posts May 11, 2016 | 13:30 pm
Quick Emulator (aka QEMU) is an open source systems emulator. It emulates various processors and their accompanying hardware peripherals like disc, serial ports, NIC et al. A serious vulnerability of out-of-bounds r/w access through the Video Graphics Array (VGA) emulator[…]
Read more...
Red Hat Product Security Risk Report: 2015
Red Hat Security Blog Blog Posts Apr 20, 2016 | 13:30 pm
This report takes a look at the state of security risk for Red Hat products for calendar year 2015. We look at key metrics, specific vulnerabilities, and the most common ways users of Red Hat products were affected by security[…]
Read more...
Go home SSLv2, you’re DROWNing
Red Hat Security Blog Blog Posts Mar 1, 2016 | 13:00 pm
The SSLv2 protocol had its 21st birthday last month, but it’s no cause to celebrate with an alcohol beverage, since the protocol was already deprecated when it turned 18.Announced today is an attack called DROWN that takes advantage of systems[…]
Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

Debian Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

Debian Security Advisory 5664-1
Operating System: Debian ≈ Packet Storm Apr 18, 2024 | 15:54 pm
Debian Linux Security Advisory 5664-1 - Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not closed), TCP congested and idle. Eventually the server[…]
Read more...
Debian Security Advisory 5663-1
Operating System: Debian ≈ Packet Storm Apr 18, 2024 | 15:17 pm
Debian Linux Security Advisory 5663-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking.
Read more...
Debian Security Advisory 5655-2
Operating System: Debian ≈ Packet Storm Apr 17, 2024 | 15:50 pm
Debian Linux Security Advisory 5655-2 - The update of cockpit released in DSA 5655-1 did not correctly build binary packages due to unit test failures when building against libssh 0.10.6. This update corrects that problem.
Read more...
Debian Security Advisory 5662-1
Operating System: Debian ≈ Packet Storm Apr 17, 2024 | 15:49 pm
Debian Linux Security Advisory 5662-1 - Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in HTTP response splitting or denial of service.
Read more...
Debian Security Advisory 5661-1
Operating System: Debian ≈ Packet Storm Apr 16, 2024 | 14:12 pm
Debian Linux Security Advisory 5661-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes.
Read more...
Debian Security Advisory 5660-1
Operating System: Debian ≈ Packet Storm Apr 16, 2024 | 14:10 pm
Debian Linux Security Advisory 5660-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes.
Read more...
Debian Security Advisory 5659-1
Operating System: Debian ≈ Packet Storm Apr 15, 2024 | 16:30 pm
Debian Linux Security Advisory 5659-1 - Bartek Nowotarski discovered that Apache Traffic Server, a reverse and forward proxy server, was susceptible to denial of service via HTTP2 continuation frames.
Read more...
Debian Security Advisory 5658-1txt
Operating System: Debian ≈ Packet Storm Apr 15, 2024 | 16:07 pm
Debian Linux Security Advisory 5658-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Read more...
Debian Security Advisory 5657-1
Operating System: Debian ≈ Packet Storm Apr 15, 2024 | 15:59 pm
Debian Linux Security Advisory 5657-1 - Several vulnerabilities were discovered in the Xorg X server, which may result in privilege escalation if the X server is running privileged or denial of service.
Read more...
Debian Security Advisory 5656-1
Operating System: Debian ≈ Packet Storm Apr 12, 2024 | 14:48 pm
Debian Linux Security Advisory 5656-1 - Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Read more...
Debian Security Advisory 5655-1
Operating System: Debian ≈ Packet Storm Apr 5, 2024 | 18:32 pm
Debian Linux Security Advisory 5655-1 - It was discovered that Cockpit, a web console for Linux servers, was susceptible to arbitrary command execution if an administrative user was tricked into opening an sosreport file with a malformed filename.
Read more...
Debian Security Advisory 5654-1
Operating System: Debian ≈ Packet Storm Apr 4, 2024 | 14:30 pm
Debian Linux Security Advisory 5654-1 - Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Read more...
Debian Security Advisory 5653-1
Operating System: Debian ≈ Packet Storm Apr 3, 2024 | 19:55 pm
Debian Linux Security Advisory 5653-1 - Claudio Bozzato discovered multiple security issues in gtkwave, a file waveform viewer for VCD (Value Change Dump) files, which may result in the execution of arbitrary code if malformed files are opened.
Read more...
Debian Security Advisory 5652-1
Operating System: Debian ≈ Packet Storm Apr 2, 2024 | 19:01 pm
Debian Linux Security Advisory 5652-1 - A directory traversal vulnerability was discovered in py7zr, a library and command-line utility to process 7zip archives.
Read more...
Debian Security Advisory 5651-1
Operating System: Debian ≈ Packet Storm Apr 1, 2024 | 14:31 pm
Debian Linux Security Advisory 5651-1 - Two security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting or denial of service.
Read more...
Linux nf_tables Local Privilege Escalation
Operating System: Debian ≈ Packet Storm Apr 1, 2024 | 14:22 pm
A use-after-free vulnerability exists in the Linux kernel netfilter: nf_tables component. This is a universal local privilege escalation proof of concept exploit working on Linux kernels between 5.14 and 6.6, including Debian, Ubuntu, and KernelCTF.
Read more...
Debian Security Advisory 5650-1
Operating System: Debian ≈ Packet Storm Apr 1, 2024 | 14:21 pm
Debian Linux Security Advisory 5650-1 - Skyler Ferrante discovered that the wall tool from util-linux does not properly handle escape sequences from command line arguments. A local attacker can take advantage of this flaw for information disclosure.
Read more...
Debian Security Advisory 5648-1
Operating System: Debian ≈ Packet Storm Mar 29, 2024 | 17:59 pm
Debian Linux Security Advisory 5648-1 - Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Read more...
util-linux wall Escape Sequence Injection
Operating System: Debian ≈ Packet Storm Mar 28, 2024 | 15:03 pm
The util-linux wall command does not filter escape sequences from command line arguments. The vulnerable code was introduced in commit cdd3cc7fa4 (2013). Every version since has been vulnerable. This allows unprivileged users to put arbitrary text on other users terminals,[…]
Read more...
Ubuntu Security Notice USN-6714-1
Operating System: Debian ≈ Packet Storm Mar 26, 2024 | 14:24 pm
Ubuntu Security Notice 6714-1 - It was discovered that debmany in Debian Goodies incorrectly handled certain deb files. An attacker could possibly use this issue to execute arbitrary shell commands.
Read more...
Debian Security Advisory 5645-1
Operating System: Debian ≈ Packet Storm Mar 25, 2024 | 14:37 pm
Debian Linux Security Advisory 5645-1 - Manfred Paul discovered a flaw in the Mozilla Firefox web browser, allowing an attacker to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process.
Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

Ubuntu Security

Ubuntu Security Notice USN-6737-1
Operating System: Ubuntu ≈ Packet Storm Apr 18, 2024 | 15:29 pm
Ubuntu Security Notice 6737-1 - Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service,[…]
Read more...
Ubuntu Security Notice USN-6729-2
Operating System: Ubuntu ≈ Packet Storm Apr 18, 2024 | 15:28 pm
Ubuntu Security Notice 6729-2 - USN-6729-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote[…]
Read more...
Ubuntu Security Notice USN-6726-2
Operating System: Ubuntu ≈ Packet Storm Apr 17, 2024 | 15:46 pm
Ubuntu Security Notice 6726-2 - Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could[…]
Read more...
Ubuntu Security Notice USN-6724-2
Operating System: Ubuntu ≈ Packet Storm Apr 17, 2024 | 15:45 pm
Ubuntu Security Notice 6724-2 - Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could[…]
Read more...
Ubuntu Security Notice USN-6733-1
Operating System: Ubuntu ≈ Packet Storm Apr 16, 2024 | 14:05 pm
Ubuntu Security Notice 6733-1 - It was discovered that GnuTLS had a timing side-channel when performing certain ECDSA operations. A remote attacker could possibly use this issue to recover sensitive information. It was discovered that GnuTLS incorrectly handled verifying certain[…]
Read more...
Ubuntu Security Notice USN-6732-1
Operating System: Ubuntu ≈ Packet Storm Apr 16, 2024 | 14:04 pm
Ubuntu Security Notice 6732-1 - Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser[…]
Read more...
Ubuntu Security Notice USN-6731-1
Operating System: Ubuntu ≈ Packet Storm Apr 15, 2024 | 16:25 pm
Ubuntu Security Notice 6731-1 - It was discovered that YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files. This issue only affected Ubuntu 16.04[…]
Read more...
Ubuntu Security Notice USN-6730-1
Operating System: Ubuntu ≈ Packet Storm Apr 12, 2024 | 14:50 pm
Ubuntu Security Notice 6730-1 - It was discovered that Apache Maven Shared Utils did not handle double-quoted strings properly, allowing shell injection attacks. This could allow an attacker to run arbitrary code.
Read more...
Ubuntu Security Notice USN-6729-1
Operating System: Ubuntu ≈ Packet Storm Apr 12, 2024 | 14:46 pm
Ubuntu Security Notice 6729-1 - Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote attacker could possibly use this issue to perform HTTP request splitting attacks. Keran Mu and Jianjun Chen discovered that the[…]
Read more...
Ubuntu Security Notice USN-6727-2
Operating System: Ubuntu ≈ Packet Storm Apr 12, 2024 | 14:43 pm
Ubuntu Security Notice 6727-2 - USN-6727-1 fixed vulnerabilities in NSS. The update introduced a regression when trying to load security modules on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. This update fixes the problem. It was discovered that NSS incorrectly[…]
Read more...
Ubuntu Security Notice USN-6727-1
Operating System: Ubuntu ≈ Packet Storm Apr 11, 2024 | 14:14 pm
Ubuntu Security Notice 6727-1 - It was discovered that NSS incorrectly handled padding when checking PKCS#1 certificates. A remote attacker could possibly use this issue to perform Bleichenbacher-like attacks and recover private data. This issue only affected Ubuntu 20.04 LTS.[…]
Read more...
Ubuntu Security Notice USN-6728-1
Operating System: Ubuntu ≈ Packet Storm Apr 11, 2024 | 14:07 pm
Ubuntu Security Notice 6728-1 - Joshua Rogers discovered that Squid incorrectly handled collapsed forwarding. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS[…]
Read more...
Ubuntu Security Notice USN-6721-2
Operating System: Ubuntu ≈ Packet Storm Apr 10, 2024 | 15:28 pm
Ubuntu Security Notice 6721-2 - USN-6721-1 fixed vulnerabilities in X.Org X Server. That fix was incomplete resulting in a regression. This update fixes the problem. It was discovered that X.Org X Server incorrectly handled certain data. An attacker could possibly[…]
Read more...
Ubuntu Security Notice USN-6726-1
Operating System: Ubuntu ≈ Packet Storm Apr 9, 2024 | 14:47 pm
Ubuntu Security Notice 6726-1 - Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could[…]
Read more...
Ubuntu Security Notice USN-6724-1
Operating System: Ubuntu ≈ Packet Storm Apr 9, 2024 | 14:46 pm
Ubuntu Security Notice 6724-1 - Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could[…]
Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

FreeBSD Security

electron{27,28,29} -- multiple vulnerabilities
FreeBSD VuXML Apr 18, 2024 | 00:00 am

Read more...
PuTTY and embedders (f.i., filezilla) -- biased RNG with NIST P521/ecdsa-sha2-nistp521 signatures permits recovering private key
FreeBSD VuXML Apr 16, 2024 | 00:00 am

Read more...
go -- http2: close connections when receiving too many headers
FreeBSD VuXML Apr 15, 2024 | 00:00 am

Read more...
chromium -- multiple security fixes
FreeBSD VuXML Apr 12, 2024 | 00:00 am

Read more...
OpenSSL -- Unbounded memory growth with session handling in TLSv1.3
FreeBSD VuXML Apr 11, 2024 | 00:00 am

Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

Fedora Security

Glibc Tunables Privilege Escalation
Operating System: Fedora ≈ Packet Storm Dec 21, 2023 | 14:20 pm
A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. It has been dubbed Looney Tunables. This issue allows an local attacker to use maliciously crafted GLIBC_TUNABLES when launching binaries with SUID[…]
Read more...
GNOME Files 43.4 Privilege Escalation
Operating System: Fedora ≈ Packet Storm Aug 8, 2023 | 15:54 pm
GNOME Files version 43.4 (nautilus) on Fedora 37 will extract zip archives with setuid files for other user identifiers that can be leveraged to escalate privileges.
Read more...
Apache Tomcat Privilege Escalation
Operating System: Fedora ≈ Packet Storm Mar 14, 2023 | 14:39 pm
This Metasploit module exploits a vulnerability in RedHat based systems where improper file permissions are applied to /usr/lib/tmpfiles.d/tomcat.conf for Apache Tomcat versions before 7.0.54-8. The configuration files in tmpfiles.d are used by systemd-tmpfiles to manage temporary files including their creation.[…]
Read more...
Sequoia: A Deep Root In Linux's Filesystem Layer
Operating System: Fedora ≈ Packet Storm Jul 21, 2021 | 16:10 pm
Qualys discovered a size_t-to-int conversion vulnerability in the Linux kernel's filesystem layer: by creating, mounting, and deleting a deep directory structure whose total path length exceeds 1GB, an unprivileged local attacker can write the 10-byte string "//deleted" to an offset[…]
Read more...
Fedora / Gnome fscaps Issue
Operating System: Fedora ≈ Packet Storm Jun 22, 2021 | 19:20 pm
Fedora with Gnome has an issue where it is not using fscaps safely.
Read more...
netkit-telnet 0.17 Remote Code Execution
Operating System: Fedora ≈ Packet Storm Mar 5, 2020 | 20:57 pm
netkit-telnet version 0.17 telnetd on Fedora 31 BraveStarr remote code execution exploit.
Read more...
vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation
Operating System: Fedora ≈ Packet Storm Dec 23, 2019 | 21:02 pm
This Metasploit module exploits a vulnerability in the rds_page_copy_user function in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This module has been tested successfully on Fedora 13 (i686) kernel version 2.6.33.3-85.fc13.i686.PAE and[…]
Read more...
Grub2 grub2-set-bootflag Environment Corruption
Operating System: Fedora ≈ Packet Storm Nov 27, 2019 | 23:02 pm
Grub2 has grub2-set-bootflag setuid in the new Fedora release and has the ability to corrupt the environment.
Read more...
SystemTap 1.3 MODPROBE_OPTIONS Privilege Escalation
Operating System: Fedora ≈ Packet Storm Apr 19, 2019 | 13:28 pm
This Metasploit module attempts to gain root privileges by exploiting a vulnerability in the staprun executable included with SystemTap version 1.3. The staprun executable does not clear environment variables prior to executing modprobe, allowing an arbitrary configuration file to be[…]
Read more...
Linux Nested User Namespace idmap Limit Local Privilege Escalation
Operating System: Fedora ≈ Packet Storm Nov 28, 2018 | 01:51 am
This Metasploit module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root (CVE-2018-18955). The target system must have unprivileged user[…]
Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

SuSE Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

Linux Literatur

Das Freelancer Portal my-werbung.de ist eine Projektbörse, die sich auf Werbeprojekte und Werbedienstleistungen spezialisiert hat. Werbedienstleistungen aller Art werden von kreativen Firmen, Freiberuflern und Agenturen übernommen.

If you are looking for a quality web agency in Bordeaux in France, we recommand you to contact CréaSites Sud Ouest The will make a good to work for your website and they can help you too about SEO !

Benefit from fantastic savings on LGA Airport Limo Service NYC , just by taking a look at http://www.nycairportslimo.com

If you are looking for Milwaukee software development then learn more .
Learn more about New Haven CT Taxi and Car Service EWR Airport ctairlink at http://ctairlink.com

Visit https://earnwith.me to find out more regarding online sales pro review

Learn more about New Haven CT Taxi and Car Service EWR Airport ctairlink at http://ctairlink.com

kostenlose anzeige

Go to top

Warning: mysqli::stat(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 219

Warning: mysqli_close(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 226

Warning: mysqli::stat(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 219

Warning: mysqli_close(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 226

Warning: mysqli::stat(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 219

Warning: mysqli_close(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 226

Warning: mysqli::stat(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 219

Warning: mysqli_close(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 226

Warning: mysqli::stat(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 219

Warning: mysqli_close(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 226

Warning: mysqli::stat(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 219

Warning: mysqli_close(): Couldn't fetch mysqli in /var/www/vhosts/webfactories.de/httpdocs/libraries/joomla/database/driver/mysqli.php on line 226