The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2020-5260 From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.5.txt) With a crafted URL that …
Update to WebKitGTK 2.28.1: * Fix position of default option element popup windows under Wayland. * Update Chrome and Firefox versions in user agent quirks. * …
Update to version 1.26. Resolves CVE-2017-18640.
Radicale, a simple calendar and addressbook server - daemon, is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication m…
It has been discovered a NULL pointer dereference could happen in ncmpc, an ncurses-based audio player. This could result in a crash and a denial of service.
It was discovered that eog (Eye of GNOME) incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a r…
An update that fixes 18 vulnerabilities is now available.
It was discovered that there was a path traversal vulnerability in jsch, a pure Java implementation of the SSH2 protocol.
It was discovered that there was a null pointer deference exploit in libgsf, a I/O abstraction library for GNOME.
It was discovered that python-reportlab, a Python library to create PDF documents, is prone to a code injection vulnerability while parsing a color attribute. …
This update fixes the following security vulnerabilities: CVE-2018-20536, CVE-2018-20537, CVE-2018-20539, CVE-2018-20540
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid poi…
3.2.3 ---- New version 3.2.2 Security fix for CVE-2020-7044, CVE-2020-9428, CVE-2020-9430, CVE-2020-9431
Fix mistakes in Wayland wrapper change ---- Fixes Wayland issue when running from terminal ---- Update sound touch library, fixes some known security issues.
Security fix for CVE-2015-9541
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid poi…
An update that fixes one vulnerability is now available.
An update that contains security fixes can now be installed.
An update that fixes two vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, insecure TLS handshakes, bypass of sandbox restrictio…
An update that fixes one vulnerability is now available.
An update that contains security fixes can now be installed.
An update that contains security fixes can now be installed.