The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of servi…
Update to 2.40.3: * Make memory pressure monitor honor memory.memsw.usage_in_bytes if exists. * Include key modifiers in wheel events. * Apply cookie blocking …
Several vulnerabilities were fixed in the Python3 interpreter. CVE-2015-20107
An issue has been found in cups, the Common UNIX Printing System(tm). Due to a use-after-free bug an attacker could cause a denial-of-service. In case of havin…
open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867) For more details about the security issue(s), including the impact, a …
An update that fixes one vulnerability is now available.
The newest upstream commit 2215591 - TRIAGE vim: Divide By Zero vulnerability in scroll_cursor_bot() in move.c
Fix for several CVEs
This is a security release, additionally fixing a number of important bugs.
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server. CVE-2022-47184
An update that contains security fixes can now be installed.
An update that fixes one vulnerability is now available.
It was discovered that in some conditions the Flask web framework may disclose a session cookie. For the oldstable distribution (bullseye), this problem has be…
An update that fixes one vulnerability is now available.
An update that fixes three vulnerabilities is now available.
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
Brief introduction Two vulnerbilities were found in maradns, an open source domain name system (DNS) implementation, that may lead to denial of service and
The system could show undesired warning messages in certain conditions.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
AccountsService could be made to crash or run programs if it received specially crafted messages.
The container bci/bci-init was updated. The following patches have been included in this update:
etcd could be made to expose sensitive information over the network.
An update that solves two vulnerabilities and has two fixes is now available.