The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
Several security issues were fixed in Exiv2.
Several security issues were fixed in HAProxy.
Several vulnerabilities were discovered in HAProxy, a fast and reliable load balancing reverse proxy, which can result in HTTP request smuggling. By carefully …
kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks (CVE-2021-22543) * kernel: out-of-bounds write in xt_compat_target_from_user() in…
kernel: Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks (CVE-2021-22543) * kernel: out-of-bounds write in xt_compat_target_from_user() in…
hw: Vector Register Data Sampling (CVE-2020-0548) * hw: L1D Cache Eviction Sampling (CVE-2020-0549) * hw: Special Register Buffer Data Sampling (SRBDS) (CVE-20…
An update that solves three vulnerabilities, contains two features and has one errata is now available.
Updated to new upstream (91.0)
An update that fixes one vulnerability is now available.
It was discovered that systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of informa…
An update that fixes one vulnerability is now available.
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the stable distribution (bullseye), these p…
Multiple issues have been discovered in ffmpeg. CVE-2020-21041
- Update starship to version 0.56.0. - Update shadow-rs crate to version 0.6.3. - Update urlencoding crate to version 1.3.3. - Update versions crate to version…
- Update starship to version 0.56.0. - Update shadow-rs crate to version 0.6.3. - Update urlencoding crate to version 1.3.3. - Update versions crate to version…
- Update starship to version 0.56.0. - Update shadow-rs crate to version 0.6.3. - Update urlencoding crate to version 1.3.3. - Update versions crate to version…
An update that solves 7 vulnerabilities and has 58 fixes is now available.
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service, HTTP request smu…
The package firefox before version 91.0-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing and information disclosure.
The package c-ares before version 1.17.2-1 is vulnerable to insufficient validation.
The package loki before version 2.3.0-1 is vulnerable to directory traversal.
The package prosody before version 1:0.11.10-1 is vulnerable to information disclosure.