The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
Roman Fiedler found that libX11, the X11 protocol client library, was vulnerable to protocol command injection due to insufficient validation of arguments to s…
Roman Fiedler reported that missing length validation in various functions provided by libx11, the X11 client-side library, allow to inject X11 protocol comman…
- Update to 20.11.7 - Closes security issue CVE-2021-31215
- Security fix for CVE-2021-28363. - Security fix for *pip incorrectly handled unicode separators in git references*.
Update to 3.1.0 Fix CVE-2020-24455 FAPI PolicyPCR not instatiating correctly Note: that all TPM object created with a PolicyPCR with the currentPcrs and curren…
- Update to 20.11.7 - Closes security issue CVE-2021-31215
Update to 2.9.12 * Fix CVE-2021-3541 * Verify sources with GPG signature
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An issue has been found in ring, a secure and distributed voice, video and chat platform. Actually the embedded copy of pjproject is affected by this CVE.
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that solves 32 vulnerabilities and has 85 fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
The update for prosody released as DSA 4916-1 introduced a regression in websocket support. Updated prosody packages are now available to correct this issue.
Jasper Lievisse Adriaanse reported an integer overflow flaw in lz4, a fast LZ compression algorithm library, resulting in memory corruption. For the stable dis…
ceph 16.2.4 GA notes=Security fix for CVE-2021-3524, CVE-2021-3531 ---- Ceph 16.2.3 GA
Security fix for CVE-2021-29510
Security fix for CVE-2021-29510
An update that fixes one vulnerability is now available.
The package python-babel before version 2.9.1-1 is vulnerable to arbitrary code execution.