The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes four vulnerabilities is now available.
An update that fixes 21 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An issue has been found in btrbk, a backup tool for btrfs subvolumes. Due to mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in au…
IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may rem…
An update that fixes two vulnerabilities is now available.
IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may rem…
Etienne Stalmans discovered that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not validate filenames for traversal …
Update to 2.0.1 (fix RHBZ#1998578); fix RHBZ#1932066 (unsafe use of strncpy)
Update NTFS-3G to 2021.8.22 to fix multiple CVEs ---- New upstream development version 1.45.7. ---- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
Update NTFS-3G to 2021.8.22 to fix multiple CVEs ---- New upstream development version 1.45.7. ---- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
Update NTFS-3G to 2021.8.22 to fix multiple CVEs ---- New upstream development version 1.45.7. ---- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
Update NTFS-3G to 2021.8.22 to fix multiple CVEs ---- New upstream development version 1.45.7. ---- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
Update NTFS-3G to 2021.8.22 to fix multiple CVEs ---- New upstream development version 1.45.7. ---- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
Update NTFS-3G to 2021.8.22 to fix multiple CVEs ---- New upstream development version 1.45.7. ---- Upstream patch to work with qemu 6.1 (RHBZ#1998820)
An XML external entity (XXE) injection in pywps allows an attacker to view files on the application server filesystem by assigning a path to the entity.
An update that solves two vulnerabilities, contains one feature and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
An update that solves three vulnerabilities, contains one feature and has one errata is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that solves one vulnerability and has one errata is now available.
An update that solves one vulnerability and has two fixes is now available.