The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, bypass of deserialization restrictions or info…
strongSwan could crash or allow unintended access to network services.
Zhuowei Zhang discovered a bug in the EAP authentication client code of strongSwan, an IKE/IPsec suite, that may allow to bypass the client and in some scenari…
An update that fixes 22 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934) (CVE-2022-21248) * OpenJDK: Incorrect reading of TIFF files i…
AIDE could be made to crash or run programs as an administrator if it opened a specially crafted file.
Multiple out-of-bounds error were discovered in qtsvg-opensource-src. The highest threat from CVE-2021-3481 (at least) is to data confidentiality the applicati…
Security fix for CVE-2021-46059, CVE-2022-0158, CVE-2022-0156 ---- Security fix for CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4186, CVE-2021-4192, …
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrar…
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Update to 2.34.4: * Fix dire ["Safari Leaks"](https://safarileaks.com/) IndexedDB privacy violation. * Make audio tools (like mixers) display the actual name o…
Fix CVE-2022-23132, CVE-2022-23133, CVE-2022-23134
Fix CVE-2022-23132, CVE-2022-23133, CVE-2022-23134
The 5.15.16 stable kernel update contains a number of important fixes across the tree.
Security fix for CVE-2021-45931
The 5.15.16 stable kernel update contains a number of important fixes across the tree.
Several vulnerabilities were discovered in the Go programming language. An attacker could trigger a denial-of-service (DoS) and information leak.
Several vulnerabilities were discovered in the Go programming language. An attacker could trigger a denial-of-service (DoS) and information leak.
Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrar…
An update that fixes one vulnerability is now available.
Several security issues were fixed in Thunderbird.
Security fix for CVE-2021-45930