Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-2899-1: policykit-1 security upda
The Qualys Research Labs discovered a local privilege escalation in PolicyKit's pkexec. Details can be found in the Qualys advisory at
Fedora 35: rust 2022-1bafa3fc
Security fix for CVE-2022-21658, a TOCTOU race condition in std::fs::remove_dir_all. Privileged programs should be rebuilt if they use this function on paths t…
Fedora 34: rust 2022-2c737894
Security fix for CVE-2022-21658, a TOCTOU race condition in std::fs::remove_dir_all. Privileged programs should be rebuilt if they use this function on paths t…
RedHat: RHSA-2022-0146:03 Moderate: EAP XP 2 security update to CVE fix
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
Fedora 35: flatpak 2022-825ca6bf
Update to 1.12.3 Fixes these two security issues: * CVE-2021-43860 or https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j * CVE-2022-216…
Threat Advisory: Linux Ransomware Risks and Prevention Insights
Ransomware has dominated cybersecurity news headlines for the past decade, and for good reason. Through a combination of advanced encryption and effective exto…
Fedora 33: rust 2021-443139f6
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Fedora 35: rust 2021-7ad3a01f
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
Fedora 34: rust 2021-0578e239
Rust 1.56.1 adds a mitigation for CVE-2021-42574, the "trojan source" attack that obfuscates code with BiDi control characters. The compiler will now error on …
RedHat: RHSA-2021-3516:01 Important: EAP XP 2 security update to CVE fix
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
Fedora 33: salt 2021-93a7c8b7
Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security- advisory-2021-sep-02/ CVE-2021-21996 CVE-2021-22004 CVE-2021-31607
Fedora 34: salt 2021-00ada7e6
Update to CVE release 3003.3-1 https://saltproject.io/security_announcements/salt-security- advisory-2021-sep-02/ CVE-2021-21996 CVE-2021-22004 CVE-2021-31607
Fedora 33: prosody 2021-1d574ae4
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
Fedora 34: prosody 2021-fe9513e0
Prosody 0.11.10 release from their stable branch. This release primarily fixes CVE-2021-37601, a remote information disclosure vulnerability. See the previousl…
RedHat: RHSA-2021-2755:01 Moderate: EAP XP 2 security update to CVE fix
This advisory resolves CVE issues filed against XP2 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP2 code ba…
RedHat: RHSA-2021-2210:01 Moderate: EAP XP 1 security update to CVE fix
This advisory resolves CVE issues filed against XP1 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP1 code ba…
Fedora 33: python-eventlet 2021-9fde3d7a
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
Fedora 34: python-eventlet 2021-d5915c24
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
AlmaLinux 8 libyang Bug Fix Advisory ALEA-2021-1906 Moderate
libyang bug fix and enhancement update
AlmaLinux 8 Xorg and Mesa Graphics Security Update - Security Advisory
userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update
Fedora 33: firefox 2021-beac175a
- New upstream version (88.0.1) - Fixes CVE-2021-29952 (https://www.mozilla.org/en-US/security/advisories/mfsa2021-20/) ---- - Fixed WebRTC indicator (mozbz#17…
Debian LTS: DLA-2637-1: drupal7 security upda
The Drupal project identified a vulnerability in the sanitization performed in the _filter_xss_arttributes function, potentially allowing a cross-site scriptin…
Debian LTS: DLA-2599-1: shibboleth-sp2 security upda
Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks. For additional…
Fedora 31: ghc-cmark-gfm 2020-fe299b3f
Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark- gfm/securi…