The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
It was discovered that there was a NULL pointer dereference issue in the IW44 encoder/decoder within DjVu, a set of compression technologies for high-resolutio…
An update that fixes one vulnerability is now available.
Applications using FriBidi could be made to crash or run programs as your login if it displayed specially crafted text.
Alex Murray discovered a stack-based buffer overflow vulnerability in fribidi, an implementation of the Unicode Bidirectional Algorithm algorithm, which could …
This update upgrades Thunderbird to version 68.2.0. * Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764) * Mozilla: Use-afte…
Several security issues were fixed in WebKitGTK+.
An update that fixes 9 vulnerabilities is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that solves one vulnerability and has two fixes is now available.
The package squid before version 4.9-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing and information disclosure.
Chromium 78. Fixes these: CVE-2019-5870 CVE-2019-5871 CVE-2019-5872 CVE-2019-5874 CVE-2019-5875 CVE-2019-13691 CVE-2019-13692 CVE-2019-5876 CVE-2019-5877 CVE-…
Security fix for CVE-2019-16275
- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)
An update that fixes 86 vulnerabilities is now available.
sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287) SL6 x86_64 sudo-1.8.6p3-29.el6_10.2.x86_64.rpm sudo-debuginfo-1.8.6p3-…
The system could be made to expose sensitive information.
An update that fixes one vulnerability is now available.
GNU cpio could be made to expose sensitive information if it received a specially crafted input.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.