The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to latest release and include fix for CVE-2019-19630
**PHP version 7.3.13** (18 Dec 2019) **Bcmath:** * Fixed bug php#78878 (Buffer underflow in bc_shift_addsub). (**CVE-2019-11046**). (cmb) **Core:** * Fixed bug…
Update to new upstream version 3.0.13, which includes a fix for CVE-2019-19783 and other minor fixes. Release notes: https://www.cyrusimap.org/imap/download/re…
- https://www.drupal.org/project/webform/releases/7.x-4.21 - https://www.drupal.org/sa-contrib-2019-096 - https://www.drupal.org/project/webform/releases/7.x…
- https://www.drupal.org/project/l10n_update/releases/7.x-2.3 - https://www.drupal.org/sa-contrib-2019-072
Update to latest release and include fix for CVE-2019-19630
Update to new upstream version 3.0.13, which includes a fix for CVE-2019-19783 and other minor fixes. Release notes: https://www.cyrusimap.org/imap/download/re…
- https://www.drupal.org/project/webform/releases/7.x-4.21 - https://www.drupal.org/sa-contrib-2019-096 - https://www.drupal.org/project/webform/releases/7.x…
- https://www.drupal.org/project/l10n_update/releases/7.x-2.3 - https://www.drupal.org/sa-contrib-2019-072
Security fix for CVE-2019-13767.
Update to NetHack 3.6.4 - fixes security issue with privilege escalation: http://nethack.org/security/index.html
**PHP version 7.3.13** (18 Dec 2019) **Bcmath:** * Fixed bug php#78878 (Buffer underflow in bc_shift_addsub). (**CVE-2019-11046**). (cmb) **Core:** * Fixed bug…
denial of service in find_next_bit() [XSA-307, CVE-2019-19581, CVE-2019-19582] (#1782211) denial of service in HVM/PVH guest userspace code [XSA-308, CVE-2019-…
Update to version 0.9.3 to address CVE-2019-14889
Update to Samba 4.10.11, Security fixes for CVE-2019-14861 and CVE-2019-14870
It was reported that Netty, a Java NIO client/server framework, is prone to a HTTP request smuggling vulnerability due to mishandling whitespace before the col…
An update that fixes 16 vulnerabilities is now available.
An update that solves one vulnerability and has three fixes is now available.
It was discovered that there was a HTTP request smuggling vulnerability in waitress, pure-Python WSGI server. If a proxy server is used in front of waitress, a…
An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, which are in the queue where attacker doesn't have permission…
An issue has been found in igraph, a library for creating and manipulating graphs. A NULL pointer dereference vulneribility was detected in
An update that fixes two vulnerabilities is now available.
An update that solves one vulnerability and has three fixes is now available.
An update that fixes one vulnerability is now available.