Buscar noticias

Sergiu Ghetie discovered that some Intel® processors did not properly handle values in the microcode flow. A local authenticated user could potentially use this issue to escalate their privileges.

https://security-tracker.debian.org/tracker/DSA-6156-1

https://security-tracker.debian.org/tracker/DSA-6155-1

It was discovered that Mailman incorrectly handled CSRF tokens. A remote list member or moderator could possibly use their own token to craft an admin request CSRF attack and set a new admin password or make other changes.