The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves three vulnerabilities and has 9 fixes is now available.
Several security issues were fixed in Apport.
USN-4170-1 caused a regression in Whoopsie.
FreeTDS could be made to crash or run programs if it received specially crafted network traffic.
file could be made to crash or run programs if it opened a specially crafted file.
An update that fixes one vulnerability is now available.
Whoopsie could be made to crash, expose sensitive information or run programs if it processed a specially crafted crash report.
An update that solves 8 vulnerabilities and has 8 fixes is now available.
An update that fixes one vulnerability is now available.
LibVNC contained a memory leak (CWE-655) in VNC server code, which allowed an attacker to read stack memory and could be abused for information disclosure.
The imapfilter tool, a utility for scripting IMAP operations in lua, lacked server name / certificate peer hostname validation support.
New version 4.9.3, Security fix for CVE-2017-16808, CVE-2018-14468, CVE-2018-14469, CVE-2018-14470, CVE-2018-14466, CVE-2018-14461, CVE-2018-14462, CVE-2018-14…
Malte Kraus discovered that libpam-python, a PAM module allowing PAM modules to be written in Python, didn't sanitise environment variables which could result …
An update that fixes one vulnerability is now available.
This update upgrades Thunderbird to version 68.2.0. * Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764) * Mozilla: Use-afte…
libarchive could be made to execute arbitrary code if it received specially crafted archive file.
An update that solves one vulnerability and has two fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Several security issues were fixed in Samba.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities and has three fixes is now available.
Several security issues were fixed in Libidn2.