The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 7 vulnerabilities is now available.
An update that solves two vulnerabilities and has one errata is now available.
An update that fixes 7 vulnerabilities is now available.
Several security issues were fixed in Pillow.
An update that fixes four vulnerabilities is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that contains security fixes can now be installed.
An update that solves 12 vulnerabilities, contains one feature and has two fixes is now available.
An update that solves 12 vulnerabilities, contains one feature and has two fixes is now available.
An update that contains security fixes can now be installed.
An update that fixes 12 vulnerabilities, contains one feature is now available.
Several security issues were fixed in containerd.
An update that fixes two vulnerabilities is now available.
Release of OpenShift Serverless 1.26.0 The References section contains CVE links providing detailed severity ratings for each vulnerability. Ratings are based …
Multiple security issues were discovered in pngcheck, a tool to verify the integrity of PNG, JNG and MNG files, which could potentially result in the execution…
Several security issues were fixed in Vim.
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities and has one errata is now available.
Cache poisoning vulnerabilities were found in node-tar, a Node.js module used to read and write portable tar archives, which may result in arbitrary file creat…
Several security issues were fixed in QEMU.
USN-3557-1 introduced a regression in Squid.
Multiple security vulnerabilities have been found in OpenEXR, command-line tools and a library for the OpenEXR image format. Buffer overflows or out-of-bound r…
Timothee Desurmont discovered an information leak vulnerability in node-eventsource, a W3C compliant EventSource client for Node.js: the module was not honorin…
Don't sob into your battered copy of K&R though, the shift will move slowly.