The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This update upgrades Thunderbird to version 68.3.0. * Mozilla: Use-after-free in worker destruction (CVE-2019-17008) * Mozilla: Memory safety bugs fixed in Fir…
An update that fixes 118 vulnerabilities is now available.
RabbitMQ could be made to execute arbitrary code if it received a specially crafted input.
Several security issues were fixed in Samba.
An update that fixes three vulnerabilities is now available.
nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate (CVE-2019-11745) SL6 x86_64 nss-softokn-3.44.0-6.el6_10…
nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate (CVE-2019-11745) * nss: Empty or malformed p256-ECDH pu…
An update that solves two vulnerabilities and has one errata is now available.
This update upgrades Thunderbird to version 68.3.0. * Mozilla: Use-after-free in worker destruction (CVE-2019-17008) * Mozilla: Memory safety bugs fixed in Fir…
An update that solves three vulnerabilities and has one errata is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities and has three fixes is now available.
It was discovered that there was unsafe deserialisation issue in cacti, server monitoring system system. Unsafe deserialisation of objects which can lead to ab…
The package crypto++ before version 8.2.0-2 is vulnerable to private key recovery.
The package thunderbird before version 68.3.0-1 is vulnerable to arbitrary code execution.
Fix intermittent SEC_ERROR_UNKNOWN_ISSUER (#1752303, #1648617) ---- Updates the nss package to upstream NSS 3.47.1. For details about new functionality and a l…
Applications using libpcap could be made to crash if given specially crafted data.
USN-4202-1 caused a regression in Thunderbird.
Several vulnerabilities have been discovered in git, a fast, scalable, distributed revision control system. CVE-2019-1348
More deserialization flaws were discovered in jackson-databind which could allow an unauthenticated user to perform remote code execution. The issue was resolv…
Several security issues were fixed in Git.
libssh could be made to run programs under certain conditions.
It was found that freeimage, a graphics library, was affected by the following two security issues: CVE-2019-12211