The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
NSS could be made to execute arbitrary code if it received a specially crafted input.
An update that solves 9 vulnerabilities and has two fixes is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes 11 vulnerabilities is now available.
Several security issues were fixed in GraphicsMagick.
The package firefox before version 72.0-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation, access restriction bypa…
ClamAV could be made to crash if it opened a specially crafted file.
Several security issues were fixed in the kernel.
An update that solves one vulnerability and has 5 fixes is now available.
Security fix for CVE-2019-19722: null pointer dereference in push notification driver
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cros…
Simon Charette reported that the password reset functionality in Django, a high-level Python web development framework, uses a Unicode case-insensitive query t…
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes 17 vulnerabilities is now available.
An update that fixes 16 vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes four vulnerabilities is now available.
It was found that certain cryptographic primitives in nss, the Network Security Service libraries, did not check the length of the input text. This could resul…
It was discovered that there were three vulnerabilities in Pillow, an imaging library for the Python programming language: * CVE-2019-19911: Prevent a denial-o…
Update to NetHack 3.6.4 - fixes security issue with privilege escalation: http://nethack.org/security/index.html
Upgrade to upstream 3.5.2, still using golang-1.11 on epel8 ---- Upgrade to upstream 3.5.1, use golang-1.11 on epel8 ---- Upgrade to upstream 3.5.0