The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has three fixes is now available.
openslp: Heap-based buffer overflow in ProcessSrvRqst() in slpd_process.c leading to remote code execution (CVE-2019-5544) SL7 x86_64 openslp-2.0.0-8.el7_7.i68…
Several security issues were fixed in GraphicsMagick.
An update that solves 9 vulnerabilities and has one errata is now available.
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805
An issue has been found in libpgf, a library to handle Progressive Graphics File (PGF).
An update that fixes 17 vulnerabilities is now available.
An update that contains security fixes can now be installed.
Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis. CVE-2018-11805
Multiple cross-site scripting and cross-site request forgery issues were discovered in the DAViCal CalDAV Server.
A vulnerability has been found in php-horde, the Horde Application Framework, which may result in information disclosure via cross-site scripting.
An update that solves 16 vulnerabilities and has 124 fixes is now available.
An update that fixes 6 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
This update ships updated CPU microcode for CFL-S (Coffe Lake Desktop) models of Intel CPUs which were not yet included in the Intel microcode update released …
A vulnerability was discovered in the SPIP publishing system, which could result in unauthorised writes to the database by authors. The oldstable distribution …
Multiple cross-site scripting and cross-site request forgery issues were discovered in the DAViCal CalDAV Server. For the oldstable distribution (stretch), the…
- update to upstream version 4.3.0 - fixes CVE-2019-19331 - root.keys is moved to /var/lib/knot-resolver - knot-resolver no longer requires write permission to…
Device quarantine for alternate pci assignment methods [XSA-306]
- update to upstream version 4.3.0 - fixes CVE-2019-19331 - root.keys is moved to /var/lib/knot-resolver - knot-resolver no longer requires write permission to…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Update to Samba 4.11.3 - Security fixes for CVE-2019-14861, CVE-2019-14870 ---- Restart winbindd on samba-winbind package upgrade