Buscar noticias

https://security-tracker.debian.org/tracker/DSA-6385-1

It was discovered that Addressable incorrectly handled certain URI templates, generating regular expressions vulnerable to catastrophic backtracking. An attacker could use this issue to craft a URI that, when matched against a vulnerable t…

https://security-tracker.debian.org/tracker/DSA-6383-1

https://security-tracker.debian.org/tracker/DSA-6382-1

It was discovered that OpenSSH incorrectly handled file permissions when downloading files as root using the legacy scp protocol without the preserve-mode option. An attacker could use this to install setuid or setgid files on a system, po…