The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
incorrect error handling in event channel port allocation leads to DoS [XSA-317, CVE-2020-15566] (#1854465) inverted code paths in x86 dirty VRAM tracking lead…
# July 2020 OpenJDK security update for OpenJDK 8. Full release notes: https://bitly.com/oj8u262 ## New features * [JDK-8223147](https://bugs.openjdk.java.net/…
An update that contains security fixes can now be installed.
An update that fixes 8 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2020-13934
Several security issues were fixed in FFmpeg.
Several security issues were fixed in Python.
Pillow could be made to crash if it opened a specially crafted file.
Evolution Data Server could be made to expose sensitive information over the network.
Several vulnerabilities have been found in librsvg, an SVG rendering library. This update corrects some denial of service issues via exponential element proces…
An update for jaeger-all-in-one-rhel7-container, jaeger-agent-rhel7-container, jaeger-collector-rhel7-container, jaeger-query-rhel7-container, jaeger-ingester-…
An update that fixes 8 vulnerabilities is now available.
Backport fix for CVE-2020-15503.
**kronolith 4.2.29** * [mjr] Fix regresssion in event modification notifications (Bug #15022). ---- **kronolith 4.2.28** * [mjr] **SECURITY**: Don't leak priva…
notes=Security fix for CVE-2020-12108
Backport fix for CVE-2020-15503.
**kronolith 4.2.29** * [mjr] Fix regresssion in event modification notifications (Bug #15022). ---- **kronolith 4.2.28** * [mjr] **SECURITY**: Don't leak priva…
An update that fixes 8 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Two security issues were discovered in the Squid proxy caching server, which could result in cache poisoning, request smuggling and incomplete validation of ho…
An update that fixes 10 vulnerabilities is now available.
An update that fixes one vulnerability is now available.