The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Three issues have been found in graphicsmagick, a collection of image processing tools. They are basically a heap-based buffer over-read, heap-based buffer
Qualys discovered that the OpenSMTPD SMTP server performed insufficient validation of email addresses which could result in the execution of arbitrary commands…
An update that fixes two vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
Several vulnerabilities have been discovered in the otrs2 package that may lead to unauthorized access, remote code execution and spoofing.
Apache Solr could be made to run programs if it received specially crafted network traffic.
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2019-8835
It was discovered that there were a large number of NULL pointer dereferences due to unchecked return values from malloc and friends in hiredis, a minimalistic…
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that solves 9 vulnerabilities and has two fixes is now available.
An update that solves three vulnerabilities and has one errata is now available.
An issue has been found in unzip, a de-archiver for .zip files. While processing a password protected archive, a heap-based buffer overflow could happen, that …
An update that solves one vulnerability and has four fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes three vulnerabilities is now available.
Libgcrypt could be made to expose sensitive information.
OpenJPEG had a heap-based buffer overflow in opj_t1_clbl_decode_processor in libopenjp2.so.
An update that fixes three vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.