The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in python-apt.
openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution (CVE-2019-5544) SL6 x86_64 openslp-2.0.0-4.el6_10.i6…
libarchive: use-after-free in archive_read_format_rar_read_data when there is an error in the decompression of an archive entry (CVE-2019-18408) SL7 x86_64 lib…
An update that fixes three vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
An update that solves 5 vulnerabilities and has one errata is now available.
python-reportlab: code injection in colors.py allows attacker to execute code (CVE-2019-17626) SL6 x86_64 python-reportlab-2.3-3.el6_10.1.x86_64.rpm python-rep…
OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS (Security, 8229951) (CVE-2020-2601) * OpenJDK: Serialization filter changes via jdk.serialFilter propert…
update to enigmail 2.1.5 Includes a security fix for "Unsigned MIME parts displayed as signed"
An update that fixes two vulnerabilities is now available.
Several issues have been found in transfig, a XFig figure files converter. CVE-2018-16140
Multiple integer overflows have been discovered in the libtiff library and the included tools. For the stable distribution (buster), these problems have been f…
An update that fixes one vulnerability is now available.
An update that solves 26 vulnerabilities and has 30 fixes is now available.
An update that fixes 5 vulnerabilities is now available.
PySAML2 could be made to bypass signature verification with arbitrary data.
An update that fixes one vulnerability is now available.
An update that solves three vulnerabilities and has three fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Several security issues were fixed in Samba.
OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS (Security, 8229951) (CVE-2020-2601) * OpenJDK: Serialization filter changes via jdk.serialFilter propert…
Fixes ----- A maliciously corrupted file systems can trigger buffer overruns in the quota code used by e2fsck. (Addresses CVE-2019-5094) E2fsck now checks to m…
Updates the nss package to upstream NSS 3.49. For details about new functionality and a list of bugs fixed in this release please see the upstream release note…