The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Upstream release, security fix for CVE-2021-20307
This is the ninth maintenance release of Python 3.8. [Changelog](https://docs.py thon.org/release/3.8.9/whatsnew/changelog.html#python-3-8-9). Contains a secur…
Upstream release, security fix for CVE-2021-20307
An update that solves three vulnerabilities and has one errata is now available.
An update that fixes one vulnerability is now available.
This update upgrades Thunderbird to version 78.9.1. * Mozilla: An attacker may use Thunderbird's OpenPGP key refresh mechanism to poison an existing key (CVE-2…
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote a…
Two vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in information disclosure or denial of service. For the stable dis…
An update that fixes one vulnerability is now available.
Update to 1.6.14 https://mosquitto.org/blog/2021/03/version-2-0-9-released/
This update disallows use of IP addresses with leading zeroes in the octet values, which could have been interpreted ambiguously as either octal or decimal val…
Update to 1.6.14 https://mosquitto.org/blog/2021/03/version-2-0-9-released/
This update disallows use of IP addresses with leading zeroes in the octet values, which could have been interpreted ambiguously as either octal or decimal val…
Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.
kernel: out-of-bounds read in libiscsi module (CVE-2021-27364) * kernel: heap buffer overflow in the iSCSI subsystem (CVE-2021-27365) * kernel: iscsi: unrestri…
An update that fixes three vulnerabilities is now available.
An update that solves two vulnerabilities and has 12 fixes is now available.
Stan Hu discovered that kramdown, a pure Ruby Markdown parser and converter, performed insufficient namespace validation of Rouge syntax highlighting formatter…
An update that contains security fixes can now be installed.
An update that contains security fixes can now be installed.
Update to WebKitGTK 2.30.6: * Update user agent quirks again for Google Docs and Google Drive * Fix several crashes and rendering issues. Security fixes: CVE-2…