The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
ImageMagick is updated 6.9.12.28 , soname bump , many security fixes ---- Add scraper2vdr_serienposter_statt_banner.diff
It was discovered that the symlink extraction protections in node-tar, a Tar archives module for Node.js could by bypassed; allowing a malicious Tar archive to…
Jacob Champion discovered two vulnerabilities in the PostgreSQL database system, which could result in man-in-the-middle attacks. For the stable distribution (…
Jacob Champion discovered two vulnerabilities in the PostgreSQL database system, which could result in man-in-the-middle attacks. For the oldstable distributio…
PostgreSQL could allow unintended access to network services.
OpenEXR could be made to crash or execute arbitrary code if it received a specially crafted EXR file.
An update that solves 13 vulnerabilities and has 43 fixes is now available.
Several security issues were fixed in Samba.
Firejail could be made to overwrite files as the administrator.
python-py could be made to crash if provided with specially crafted input.
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Allow newer python-rsa
- Update to 1.2.19 Release notes: https://www.cacti.net/info/changelog/1.2.19
- Update to 1.2.19 Release notes: https://www.cacti.net/info/changelog/1.2.19
Latest updates, allow newer python-rsa ---- Latest updates.
- Update to 1.2.19 Release notes: https://www.cacti.net/info/changelog/1.2.19
- Update to 1.2.19 Release notes: https://www.cacti.net/info/changelog/1.2.19
Several vulnerabilities were discovered in Icinga 2, a general-purpose monitoring application. An attacker could retrieve sensitive information such as service…
A security vulnerability has been found in Kaminari, a pagination engine plugin for Rails 3+ and other modern frameworks, that would allow an attacker to injec…
An update that fixes three vulnerabilities is now available.
An update that fixes 8 vulnerabilities is now available.
Multiple security vulnerabilities have been discovered in XStream, a Java library to serialize objects to XML and back again. These vulnerabilities may allow a…
Multiple security vulnerabilities have been discovered in Salt, a powerful remote execution manager, that allow for local privilege escalation on a minion, ser…
**MySQL 8.0.27** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-27.html