The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2020-15917 (STARTTLS protocol violation).
OpenJDK 14 July security update
Security fix for CVE-2020-15917 (STARTTLS protocol violation).
Just enough time for one more update. Chromium 84. Fixes CVE-2020-6510 CVE-2020-6511 CVE-2020-6512 CVE-2020-6513 CVE-2020-6514 CVE-2020-6515 CVE-2020-6516 CVE-…
OpenJDK 14 July security update
rubyzip gem version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the files…
Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitr…
`add_password` in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer ov…
An update that fixes one vulnerability is now available.
The package libjcat before version 0.1.3-1 is vulnerable to insufficient validation.
The package mbedtls before version 2.16.7-1 is vulnerable to private key recovery.
The package ffmpeg before version 2:4.3.1-1 is vulnerable to arbitrary code execution.
The package tcpreplay before version 4.3.3-1 is vulnerable to information disclosure.
The package wireshark-cli before version 3.2.5-1 is vulnerable to denial of service.
Several vulnerabilities were fixed in libjpeg-turbo, a widely used library for handling JPEG files. CVE-2018-1152
An update that solves four vulnerabilities and has 41 fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
kernel: kernel: DAX hugepages not considered during mremap (CVE-2020-10757) * kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wi…
grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process (CVE-2020-10713) * grub2: grub_malloc does not validate allocation size a…
Several vulnerabilities were discovered in mercurial, an easy-to-use, scalable distributed version control system. CVE-2017-17458
- New upstream update - 79.0
The update for grub2 released as DSA 4735-1 caused a boot-regression when chainloading another bootlaoder and breaking notably dual-boot with Windows. Updated …