Linux Security - NetGuides.eu

Message

Failed loading XML...

Failed loading XML... xmlParseEntityRef: no name xmlParseEntityRef: no name xmlParseEntityRef: no name xmlParseEntityRef: no name xmlParseEntityRef: no name xmlParseEntityRef: no name Specification mandate value for attribute async Opening and ending tag mismatch: link line 1 and head EntityRef: expecting ';' EntityRef: expecting ';' EntityRef: expecting ';' EntityRef: expecting ';' EntityRef: expecting ';' EntityRef: expecting ';' Entity 'nbsp' not defined Entity 'nbsp' not defined error parsing attribute name attributes construct error Couldn't find end of Start Tag cp-search-autocompletepath line 1 Opening and ending tag mismatch: div line 1 and cp-search-autocomplete Opening and ending tag mismatch: form line 1 and div Opening and ending tag mismatch: div line 1 and form Entity 'nbsp' not defined Entity 'nbsp' not defined EntityRef: expecting ';' EntityRef: expecting ';' EntityRef: expecting ';' Opening and ending tag mismatch: br line 1 and div xmlParseEntityRef: no name Specification mandate value for attribute delayDOMDisplay attributes construct error Couldn't find end of Start Tag div line 1 Specification mandate value for attribute delayDOMDisplay Specification mandate value for attribute border attributes construct error Couldn't find end of Start Tag pfe-card line 1 Specification mandate value for attribute indeterminate attributes construct error Couldn't find end of Start Tag pfe-progress-indicator line 1 Opening and ending tag mismatch: article line 1 and pfe-progress-indicator expected '>' Opening and ending tag mismatch: section line 1 and a Opening and ending tag mismatch: div line 1 and section Specification mandate value for attribute indeterminate attributes construct error Couldn't find end of Start Tag pfe-progress-indicator line 1 Opening and ending tag mismatch: article line 1 and pfe-progress-indicator expected '>' Opening and ending tag mismatch: section line 1 and a Opening and ending tag mismatch: article line 1 and section Specification mandate value for attribute indeterminate attributes construct error Couldn't find end of Start Tag pfe-progress-indicator line 1 Opening and ending tag mismatch: article line 1 and pfe-progress-indicator expected '>' Opening and ending tag mismatch: section line 1 and a Opening and ending tag mismatch: div line 1 and section Opening and ending tag mismatch: div line 1 and article Specification mandate value for attribute indeterminate attributes construct error Couldn't find end of Start Tag pfe-progress-indicator line 1 Opening and ending tag mismatch: section line 1 and pfe-progress-indicator Opening and ending tag mismatch: div line 1 and section Opening and ending tag mismatch: main line 1 and div Opening and ending tag mismatch: div line 1 and pfe-card Specification mandate value for attribute border attributes construct error Couldn't find end of Start Tag pfe-card line 1 Specification mandate value for attribute indeterminate attributes construct error Couldn't find end of Start Tag pfe-progress-indicator line 1 Opening and ending tag mismatch: article line 1 and pfe-progress-indicator expected '>' Opening and ending tag mismatch: section line 1 and a Opening and ending tag mismatch: div line 1 and section Specification mandate value for attribute indeterminate attributes construct error Couldn't find end of Start Tag pfe-progress-indicator line 1 Opening and ending tag mismatch: article line 1 and pfe-progress-indicator expected '>' Opening and ending tag mismatch: section line 1 and a Opening and ending tag mismatch: article line 1 and section Specification mandate value for attribute indeterminate attributes construct error Couldn't find end of Start Tag pfe-progress-indicator line 1 Opening and ending tag mismatch: article line 1 and pfe-progress-indicator expected '>' Opening and ending tag mismatch: section line 1 and a Opening and ending tag mismatch: div line 1 and section Opening and ending tag mismatch: body line 1 and div Opening and ending tag mismatch: meta line 1 and article Opening and ending tag mismatch: meta line 1 and pfe-card Opening and ending tag mismatch: meta line 1 and div Opening and ending tag mismatch: head line 1 and div Opening and ending tag mismatch: html line 1 and div Extra content at the end of the document

Linux Security (6)

Im Sinne der Aktualität sind diese News grösstenteils in englischer Sprache. Falls nötig, bitte die Übersetzungsfunktion verwenden.

OpenSuSE Security

Published in: Linux Security

Fedora Security

Glibc Tunables Privilege Escalation
Operating System: Fedora ≈ Packet Storm Dec 21, 2023 | 14:20 pm
A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. It has been dubbed Looney Tunables. This issue allows an local attacker to use maliciously crafted GLIBC_TUNABLES when launching binaries with SUID[…]
Read more...
GNOME Files 43.4 Privilege Escalation
Operating System: Fedora ≈ Packet Storm Aug 8, 2023 | 15:54 pm
GNOME Files version 43.4 (nautilus) on Fedora 37 will extract zip archives with setuid files for other user identifiers that can be leveraged to escalate privileges.
Read more...
Apache Tomcat Privilege Escalation
Operating System: Fedora ≈ Packet Storm Mar 14, 2023 | 14:39 pm
This Metasploit module exploits a vulnerability in RedHat based systems where improper file permissions are applied to /usr/lib/tmpfiles.d/tomcat.conf for Apache Tomcat versions before 7.0.54-8. The configuration files in tmpfiles.d are used by systemd-tmpfiles to manage temporary files including their creation.[…]
Read more...
Sequoia: A Deep Root In Linux's Filesystem Layer
Operating System: Fedora ≈ Packet Storm Jul 21, 2021 | 16:10 pm
Qualys discovered a size_t-to-int conversion vulnerability in the Linux kernel's filesystem layer: by creating, mounting, and deleting a deep directory structure whose total path length exceeds 1GB, an unprivileged local attacker can write the 10-byte string "//deleted" to an offset[…]
Read more...
Fedora / Gnome fscaps Issue
Operating System: Fedora ≈ Packet Storm Jun 22, 2021 | 19:20 pm
Fedora with Gnome has an issue where it is not using fscaps safely.
Read more...
netkit-telnet 0.17 Remote Code Execution
Operating System: Fedora ≈ Packet Storm Mar 5, 2020 | 20:57 pm
netkit-telnet version 0.17 telnetd on Fedora 31 BraveStarr remote code execution exploit.
Read more...
vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation
Operating System: Fedora ≈ Packet Storm Dec 23, 2019 | 21:02 pm
This Metasploit module exploits a vulnerability in the rds_page_copy_user function in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This module has been tested successfully on Fedora 13 (i686) kernel version 2.6.33.3-85.fc13.i686.PAE and[…]
Read more...
Grub2 grub2-set-bootflag Environment Corruption
Operating System: Fedora ≈ Packet Storm Nov 27, 2019 | 23:02 pm
Grub2 has grub2-set-bootflag setuid in the new Fedora release and has the ability to corrupt the environment.
Read more...
SystemTap 1.3 MODPROBE_OPTIONS Privilege Escalation
Operating System: Fedora ≈ Packet Storm Apr 19, 2019 | 13:28 pm
This Metasploit module attempts to gain root privileges by exploiting a vulnerability in the staprun executable included with SystemTap version 1.3. The staprun executable does not clear environment variables prior to executing modprobe, allowing an arbitrary configuration file to be[…]
Read more...
Linux Nested User Namespace idmap Limit Local Privilege Escalation
Operating System: Fedora ≈ Packet Storm Nov 28, 2018 | 01:51 am
This Metasploit module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root (CVE-2018-18955). The target system must have unprivileged user[…]
Read more...

Published in: Linux Security

FreeBSD Security

forgejo -- multiple vulnerabilities
FreeBSD VuXML Sep 6, 2024 | 00:00 am

Read more...
--
FreeBSD VuXML Sep 6, 2024 | 00:00 am

Read more...
qt5-webengine -- Multiple vulnerabilities
FreeBSD VuXML Sep 5, 2024 | 00:00 am

Read more...
gitea -- multiple issues
FreeBSD VuXML Sep 5, 2024 | 00:00 am

Read more...
FreeBSD -- umtx Kernel panic or Use-After-Free
FreeBSD VuXML Sep 5, 2024 | 00:00 am

Read more...
FreeBSD -- Multiple vulnerabilities in libnv
FreeBSD VuXML Sep 5, 2024 | 00:00 am

Read more...
FreeBSD -- Multiple issues in ctl(4) CAM Target Layer
FreeBSD VuXML Sep 5, 2024 | 00:00 am

Read more...
FreeBSD -- bhyve(8) privileged guest escape via USB controller
FreeBSD VuXML Sep 5, 2024 | 00:00 am

Read more...
FreeBSD -- bhyve(8) privileged guest escape via TPM device passthrough
FreeBSD VuXML Sep 5, 2024 | 00:00 am

Read more...
firefox -- multiple vulnerabilities
FreeBSD VuXML Sep 5, 2024 | 00:00 am

Read more...

Published in: Linux Security

Ubuntu Security

Ubuntu Security Notice USN-6991-1
Operating System: Ubuntu ≈ Packet Storm Sep 6, 2024 | 15:28 pm
Ubuntu Security Notice 6991-1 - It was discovered that AIOHTTP did not properly restrict file access when the 'follow_symlinks' option was set to True. A remote attacker could possibly use this issue to access unauthorized files on the system.
Read more...
Ubuntu Security Notice USN-6990-1
Operating System: Ubuntu ≈ Packet Storm Sep 5, 2024 | 15:01 pm
Ubuntu Security Notice 6990-1 - Johannes Kuhn discovered that znc incorrectly handled user input under certain operations. An attacker could possibly use this issue to execute arbitrary code on a user's system if the user was tricked into joining a[…]
Read more...
Ubuntu Security Notice USN-6992-1
Operating System: Ubuntu ≈ Packet Storm Sep 5, 2024 | 15:01 pm
Ubuntu Security Notice 6992-1 - Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains,[…]
Read more...
Ubuntu Security Notice USN-6993-1
Operating System: Ubuntu ≈ Packet Storm Sep 5, 2024 | 15:01 pm
Ubuntu Security Notice 6993-1 - It was discovered that Vim incorrectly handled memory when closing a window, leading to a double-free vulnerability. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading[…]
Read more...
Ubuntu Security Notice USN-6989-1
Operating System: Ubuntu ≈ Packet Storm Sep 5, 2024 | 15:00 pm
Ubuntu Security Notice 6989-1 - Dan Smith, Julia Kreger and Jay Faulkner discovered that in image processing for Ironic, a specially crafted image could be used by an authenticated user to exploit undesired behaviors in qemu-img, including possible unauthorized access[…]
Read more...
Ubuntu Security Notice USN-6985-1
Operating System: Ubuntu ≈ Packet Storm Sep 4, 2024 | 15:46 pm
Ubuntu Security Notice 6985-1 - It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a[…]
Read more...
Ubuntu Security Notice USN-6988-1
Operating System: Ubuntu ≈ Packet Storm Sep 4, 2024 | 15:13 pm
Ubuntu Security Notice 6988-1 - It was discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker could possibly use this issue to delay and manipulate responses. This issue only affected Ubuntu 24.04 LTS. It[…]
Read more...
Ubuntu Security Notice USN-6986-1
Operating System: Ubuntu ≈ Packet Storm Sep 4, 2024 | 15:09 pm
Ubuntu Security Notice 6986-1 - David Benjamin discovered that OpenSSL incorrectly handled certain X.509 certificates. An attacker could possible use this issue to cause a denial of service or expose sensitive information.
Read more...
Ubuntu Security Notice USN-6981-2
Operating System: Ubuntu ≈ Packet Storm Sep 4, 2024 | 15:07 pm
Ubuntu Security Notice 6981-2 - USN-6981-1 fixed vulnerabilities in Drupal. This update provides the corresponding updates for Ubuntu 14.04 LTS. It was discovered that Drupal incorrectly sanitized uploaded filenames. A remote attacker could possibly use this issue to execute arbitrary[…]
Read more...
Ubuntu Security Notice USN-6987-1
Operating System: Ubuntu ≈ Packet Storm Sep 4, 2024 | 15:06 pm
Ubuntu Security Notice 6987-1 - It was discovered that Django incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. It was discovered that Django incorrectly handled certain email sending failures. A remote[…]
Read more...

Published in: Linux Security

Debian Security

Debian Security Advisory 5766-1
Operating System: Debian ≈ Packet Storm Sep 5, 2024 | 15:05 pm
Debian Linux Security Advisory 5766-1 - Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: DSA-5766-1: chromium Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Sep 5, 2024 | 07:59 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian Security Advisory 5765-1
Operating System: Debian ≈ Packet Storm Sep 4, 2024 | 15:46 pm
Debian Linux Security Advisory 5765-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Read more...
Debian Security Advisory 5764-1
Operating System: Debian ≈ Packet Storm Sep 4, 2024 | 15:11 pm
Debian Linux Security Advisory 5764-1 - David Benjamin reported a flaw in the X.509 name checks in OpenSSL, a Secure Sockets Layer toolkit, which may cause an application performing certificate name checks to crash, resulting in denial of service.
Read more...
Debian: DSA-5765-1: firefox-esr Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Sep 4, 2024 | 05:53 am
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Read more...
Debian: DSA-5764-1: openssl Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Sep 3, 2024 | 18:58 pm
David Benjamin reported a flaw in the X.509 name checks in OpenSSL, a Secure Sockets Layer toolkit, which may cause an application performing certificate name checks to crash, resulting in denial of service.
Read more...
Debian Security Advisory 5762-1
Operating System: Debian ≈ Packet Storm Sep 2, 2024 | 16:03 pm
Debian Linux Security Advisory 5762-1 - The WebKitGTK web engine suffers from multiple vulnerabilities. An anonymous researcher discovered that processing maliciously crafted web content may lead to an unexpected process crash. Huang Xilin discovered that processing maliciously crafted web content[…]
Read more...
Debian Security Advisory 5763-1
Operating System: Debian ≈ Packet Storm Sep 2, 2024 | 15:55 pm
Debian Linux Security Advisory 5763-1 - William Khem-Marquez discovered that Pymatgen, a Python library for materials analysis, could be tricked into running arbitrary code if a malformed CIF file is processed.
Read more...
Debian: DSA-5762-1: webkit2gtk Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Aug 30, 2024 | 19:09 pm
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2024-4558
Read more...
Debian: DSA-5763-1: pymatgen Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Aug 30, 2024 | 18:05 pm
William Khem-Marquez discovered that Pymatgen, a Python library for materials analysis, could be tricked into running arbitrary code if a malformed CIF file is processed.
Read more...
Debian Security Advisory 5760-1
Operating System: Debian ≈ Packet Storm Aug 30, 2024 | 15:07 pm
Debian Linux Security Advisory 5760-1 - Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed.
Read more...
Debian Security Advisory 5761-1
Operating System: Debian ≈ Packet Storm Aug 30, 2024 | 15:07 pm
Debian Linux Security Advisory 5761-1 - Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: DSA-5761-1: chromium Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Aug 30, 2024 | 01:29 am
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: DSA-5760-1: ghostscript Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Aug 29, 2024 | 15:27 pm
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed.
Read more...
Debian Security Advisory 5759-1
Operating System: Debian ≈ Packet Storm Aug 27, 2024 | 15:08 pm
Debian Linux Security Advisory 5759-1 - Multiple security issues were discovered in Python, a high-level, interactive, object-oriented language.
Read more...
Debian: DSA-5759-1: python3.11 Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Aug 27, 2024 | 11:20 am
Multiple security issues were discovered in Python, a high-level, interactive, object-oriented language: CVE-2024-0397
Read more...
Debian Security Advisory 5758-1
Operating System: Debian ≈ Packet Storm Aug 26, 2024 | 15:09 pm
Debian Linux Security Advisory 5758-1 - Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or request smuggling.
Read more...
Debian Security Advisory 5757-1
Operating System: Debian ≈ Packet Storm Aug 26, 2024 | 14:38 pm
Debian Linux Security Advisory 5757-1 - Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...
Debian: DSA-5758-1: trafficserver Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Aug 26, 2024 | 07:07 am
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or request smuggling.
Read more...
Debian: DSA-5757-1: chromium Security Advisory Updates
Stay Vigilant with Timely Linux Security Advisories Aug 23, 2024 | 16:33 pm
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
Read more...

Published in: Linux Security

CentOS/Red Hat Security

Red Hat Security Advisory 2024-6438-03
Operating System: RedHat ≈ Packet Storm Sep 6, 2024 | 15:27 pm
Red Hat Security Advisory 2024-6438-03 - An update for wget is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Read more...
Red Hat Security Advisory 2024-6422-03
Operating System: RedHat ≈ Packet Storm Sep 6, 2024 | 15:26 pm
Red Hat Security Advisory 2024-6422-03 - An update for bubblewrap and flatpak is now available for Red Hat Enterprise Linux 8.
Read more...
Red Hat Security Advisory 2024-6420-03
Operating System: RedHat ≈ Packet Storm Sep 6, 2024 | 15:25 pm
Red Hat Security Advisory 2024-6420-03 - An update for bubblewrap and flatpak is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Read more...
Red Hat Security Advisory 2024-6419-03
Operating System: RedHat ≈ Packet Storm Sep 6, 2024 | 15:23 pm
Red Hat Security Advisory 2024-6419-03 - An update for bubblewrap and flatpak is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Read more...
Red Hat Security Advisory 2024-6417-03
Operating System: RedHat ≈ Packet Storm Sep 6, 2024 | 15:21 pm
Red Hat Security Advisory 2024-6417-03 - An update for flatpak is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Read more...
Red Hat Security Advisory 2024-6418-03
Operating System: RedHat ≈ Packet Storm Sep 6, 2024 | 15:21 pm
Red Hat Security Advisory 2024-6418-03 - An update for bubblewrap and flatpak is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise[…]
Read more...
Red Hat Security Advisory 2024-6357-03
Operating System: RedHat ≈ Packet Storm Sep 5, 2024 | 15:00 pm
Red Hat Security Advisory 2024-6357-03 - An update for bubblewrap and flatpak is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
Read more...
Red Hat Security Advisory 2024-6358-03
Operating System: RedHat ≈ Packet Storm Sep 5, 2024 | 15:00 pm
Red Hat Security Advisory 2024-6358-03 - An update for python-urllib3 is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
Read more...
Red Hat Security Advisory 2024-6360-03
Operating System: RedHat ≈ Packet Storm Sep 5, 2024 | 15:00 pm
Red Hat Security Advisory 2024-6360-03 - An update for libtiff is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Issues addressed include a null pointer vulnerability.
Read more...
Red Hat Security Advisory 2024-6356-03
Operating System: RedHat ≈ Packet Storm Sep 5, 2024 | 14:59 pm
Red Hat Security Advisory 2024-6356-03 - An update for bubblewrap and flatpak is now available for Red Hat Enterprise Linux 9.
Read more...
The Product Security Blog has moved!
Red Hat Security Blog Blog Posts Mar 19, 2019 | 19:38 pm
Red Hat Product Security has joined forces with other security teams inside Red Hat to publish our content in a common venue using the Security channel of the Red Hat Blog.This move provides a wider variety of important Security topics,[…]
Read more...
New Red Hat Product Security OpenPGP key
Red Hat Security Blog Blog Posts Aug 22, 2018 | 13:30 pm
Red Hat Product Security has transitioned from using its old 1024-bit DSA OpenPGP key to a new 4096-bit RSA OpenPGP key.This was done to improve the long-term security of our communications with our customers and also to meet current key[…]
Read more...
SPECTRE Variant 1 scanning tool
Red Hat Security Blog Blog Posts Jul 18, 2018 | 13:30 pm
As part of Red Hat's commitment to product security we have developed a tool internally that can be used to scan for variant 1 SPECTRE vulnerabilities. As part of our commitment to the wider user community, we are introducing this[…]
Read more...
Red Hat’s disclosure process
Red Hat Security Blog Blog Posts Jul 10, 2018 | 13:00 pm
Last week, a vulnerability (CVE-2018-10892) that affected CRI-O, Buildah, Podman, and Docker was made public before some affected upstream projects were notified. We regret that this was not handled in a way that lives up to our own standards around[…]
Read more...
Join us in San Francisco at the 2018 Red Hat Summit
Red Hat Security Blog Blog Posts Apr 23, 2018 | 14:30 pm
This year’s Red Hat Summit will be held on May 8-10 in beautiful San Francisco, USA.Product Security will be joining many Red Hat security experts in presenting and assisting subscribers and partners at the show.Here is a sneak peek at[…]
Read more...
Certificate Transparency and HTTPS
Red Hat Security Blog Blog Posts Apr 17, 2018 | 15:00 pm
Google has announced that on April 30, 2018, Chrome will:“...require that all TLS server certificates issued after 30 April, 2018 be compliant with the Chromium CT Policy. After this date, when Chrome connects to a site serving a publicly-trusted certificate[…]
Read more...
Let's talk about PCI-DSS
Red Hat Security Blog Blog Posts Feb 28, 2018 | 14:30 pm
For those who aren’t familiar with Payment Card Industry Data Security Standard (PCI-DSS), it is the standard that is intended to protect our credit card data as it flows between systems and is stored in company databases.PCI-DSS requires that all[…]
Read more...
Security is from Mars, Developers are from Venus…...or ARE they?
Red Hat Security Blog Blog Posts Nov 16, 2017 | 15:00 pm
It is a tale as old as time.Developers and security personnel view each other withsuspicion.The perception is that a vast gulf of understanding and ability lies between the two camps.“They can’t possibly understand what it is to do my job!”[…]
Read more...
Abuse of RESTEasy Default Providers in JBoss EAP
Red Hat Security Blog Blog Posts Oct 18, 2017 | 13:30 pm
Red Hat JBoss Enterprise Application Platform (EAP) is a commonly used host for Restful webservices. A powerful but potentially dangerous feature of Restful webservices on JBoss EAP is the ability to accept any media type. If not configured to accept[…]
Read more...
Kernel Stack Protector and BlueBorne
Red Hat Security Blog Blog Posts Sep 12, 2017 | 11:51 am
Today, a security issue called BlueBorne was disclosed, a vulnerability that could be used to attack sensitive systems via the Bluetooth protocol. Specifically, BlueBorne is a flaw where a remote (but physically quite close) attacker could get root on a[…]
Read more...

Published in: Linux Security

Go to top

Message

Linux Security (6)

Share This

Follow Us