The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issues has been found in libbsd, a package containing utility functions from BSD systems.
An update that solves one vulnerability and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes three vulnerabilities is now available.
Several security bugs have been identified and fixed in php5, a server-side, HTML-embedded scripting language. The affected components include the exif module …
Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-19948
Several issues were discovered in the Tomcat servlet and JSP engine, which could result in session fixation attacks, information disclosure, cross- site script…
Guido Vranken discovered an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. For the oldstable distribution…
It was found that freeimage, a graphics library, was affected by the following two security issues: CVE-2019-12211
An update that fixes one vulnerability is now available.
An update that solves 24 vulnerabilities and has 75 fixes is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that fixes one vulnerability is now available.
It was discovered that the Title blacklist functionality in MediaWiki, a website engine for collaborative work, could by bypassed. For the oldstable distributi…
An issue was discovered in libopensc/card-setcos.c in OpenSC, which has an incorrect read operation during parsing of a SETCOS file attribute.
An update that solves one vulnerability and has three fixes is now available.
An update that fixes one vulnerability is now available.
An issue has been found in cups, the Common UNIX Printing System(tm). An incorrect bounds check could lead to a possible out-of-bounds read and
A change introduced in libssh 0.6.3-4+deb8u4 (which got released as DLA 2038-1) has broken x2goclient's way of scp'ing session setup files from client to serve…
An update that fixes two vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
Several vulnerabilities have recently been discovered in TightVNC 1.x, an X11 based VNC server/viewer application for Windows and Unix.
An update that solves 26 vulnerabilities and has 14 fixes is now available.
- Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8