The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Researchers at the United States of America National Security Agency (NSA) identified two denial of services vulnerability in strongSwan, an IKE/IPsec suite.
An update that solves one vulnerability, contains one feature and has 8 fixes is now available.
Redmine, a project management web application, may disclose the names of users on activity views due to an insufficient access filter. An attacker may infer in…
An update that solves 6 vulnerabilities and has 44 fixes is now available.
An update that fixes 20 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that solves three vulnerabilities and has 5 fixes is now available.
An update that fixes one vulnerability is now available.
Ardour could be made to crash or possibly arbitrary code execute if it received a specially crafted XML file.
A security issue was fixed in nginx.
DLA-2743-1 was issued for CVE-2017-5715, affecting amd64-microcode, processor microcode firmware for AMD CPUs. However, the binaries for the resulting upload w…
This update upgrades Thunderbird to version 91.2.0. * Mozilla: Use-after-free in MessageTask (CVE-2021-38496) * Mozilla: Memory safety bugs fixed in Firefox 93…
This update upgrades Firefox to version 91.2.0 ESR. * Mozilla: Use-after-free in MessageTask (CVE-2021-38496) * Mozilla: Memory safety bugs fixed in Firefox 93…
Two security issue have been discovered in nghttp2: server, proxy and client implementing HTTP/2. CVE-2018-1000168
https://lib.openmpt.org/libopenmpt/2021/10/04/security- updates-0.5.12-0.4.24-0.3.33/
The newest upstream commit Security fix for CVE-2021-3796 Security fix for CVE-2021-3778
https://lib.openmpt.org/libopenmpt/2021/10/04/security- updates-0.5.12-0.4.24-0.3.33/
Two security issues have been discovered in LibreOffice's support for digital signatures in ODF documents, which could result in incorrect signature indicators…
An update that fixes 20 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Update to 94.0.4606.81. Built with is_official_build=true, which disables all sorts of debugging check functions that upstream turned on in 94. These debugging…
PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702] (#2011248)
PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702] (#2011248)