Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3456-1: requests security update
Requests, a Python HTTP library, has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. For HTTP connections…
Debian: DSA-5425-1: php8.2 security update
It was discovered that PHP's implementation of SOAP HTTP Digest authentication performed insufficient error validation, which may result in a stack information…
Debian: DSA-5424-1: php7.4 security update
It was discovered that PHP's implementation of SOAP HTTP Digest authentication performed insufficient error validation, which may result in a stack information…
Debian LTS: DLA-3435-1: rainloop security update
Cross-site scripting (XSS) vulnerabilities were found in rainloop, a web-based email client, which could lead to information disclosure including passphrase le…
Ubuntu 6082-1: EventSource vulnerability
EventSource could leak sensitive information if it opened a specially crafted input file.
Debian LTS: DLA-3395-1: golang-1.11 security update
Multiple vulnerabilities were discovered in the Go programming language. An attacker could trigger a denial-of-service (DoS), invalid cryptographic computation…
Debian: DSA-5388-1: haproxy security update
It was reported that HAProxy, a fast and reliable load balancing reverse proxy, does not properly initialize connection buffers when encoding the FCGI_BEGIN_RE…
Debian LTS: DLA-3369-1: runc security update
Multiple vulnerabilities were discovered in runc, the Open Container Project runtime, which is often used with virtualization environments such as Docker. Mali…
Debian: DSA-5378-1: xen security update
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.
Debian LTS: DLA-3362-1: qemu security update
Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service, information leak, or potentially the exec…
Debian LTS: DLA-3357-1: imagemagick security update
Several vulnerabilities have been discovered in imagemagick that may lead to a privilege escalation, denial of service or information leaks. CVE-2020-19667
SciLinux: SLSA-2023-0817-1 Important: thunderbird on SL7.x x86_64
This update upgrades Thunderbird to version 102.8.0. * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy le…
SciLinux: SLSA-2023-0812-1 Important: firefox on SL7.x x86_64
This update upgrades Firefox to version 102.8.0 ESR. * Mozilla: Arbitrary memory write via PKCS 12 in NSS (CVE-2023-0767) * Mozilla: Content security policy le…
Debian: DSA-5354-1: snort security update
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Debian LTS: DLA-3317-1: snort security update
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacke…
Debian LTS: DLA-3316-1: postgresql-11 security update
Jacob Champion discovered that libpq can leak memory contents after GSSAPI transport encryption initiation fails. A modified server, or an unauthenticated man-…
Debian: DSA-5332-1: git security update
Multiple issues were found in Git, a distributed revision control system. An attacker may trigger remote code execution, cause local users into executing arbit…
Fedora 37: jpegoptim 2023-d9c91f39a5
v1.5.1 - fix logging to stdout when --stdout is used *thanks to Eta - update --treshold option accept decimal numbers as parameter - fix crashes when processin…
SciLinux: SLSA-2022-9072-1 Important: firefox on SL7.x x86_64
This update upgrades Firefox to version 102.6.0 ESR. * Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872) * Mozilla: Memory safet…
SciLinux: SLSA-2022-9079-1 Important: thunderbird on SL7.x x86_64
This update upgrades Thunderbird to version 102.6.0. * Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872) * Mozilla: Memory safet…
Debian LTS: DLA-3239-1: git security update
Multiple issues were found in Git, a distributed revision control system. An attacker may cause other local users into executing arbitrary commands, leak infor…
Debian LTS: DLA-3235-1: node-eventsource security update
Timothee Desurmont discovered an information leak vulnerability in node-eventsource, a W3C compliant EventSource client for Node.js: the module was not honorin…
Debian LTS: DLA-3222-1: node-fetch security update
ranjit-git discovered an information leak vulnerability in node-fetch, a Node.js module exposing a window.fetch compatible API on Node.js runtime: the module w…
Ubuntu 5737-1: APR-util vulnerability
APR-util could be made to crash or leak sensitive information if it opened a specially crafted SDBM file.