The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 7 vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
Lukas Kupczyk reported a vulnerability in the handling of chunked HTTP in openconnect, an open client for Cisco AnyConnect, Pulse and GlobalProtect VPN. A mali…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes 7 vulnerabilities is now available.
Several security issues were fixed in libbsd.
Multiple issues were found in gpac, a multimedia framework featuring the MP4Box muxer. CVE-2018-21015
Several security issues were fixed in Sysstat.
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code or information disclosure.
An update that fixes 14 vulnerabilities is now available.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, incorrect implementation of Kerberos GSSAPI and TGS r…
Multiple issues have been found in cacti, a server monitoring system, potentially resulting in SQL code execution or information disclosure by authenticated us…
In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would …
Update to 79.0.3945.117. Fixes CVE-2020-6377. ---- Security fix for CVE-2019-13767. ---- Update to Chromium 79. Fixes the usual giant pile of bugs and security…
Update to Rack 2.0.8.
An update that fixes one vulnerability is now available.
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code or information disclosure.
An update that solves 17 vulnerabilities and has one errata is now available.
Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement (CVE-2019-17026) * Mozilla: Bypass of @namespace CSS sanitization during pasti…
Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement (CVE-2019-17026) * Mozilla: Bypass of @namespace CSS sanitization during pasti…