The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
XML Security Library could be made to crash if it opened a specially crafted file.
The NSA and CISA released the guide '' Securing the Software Supply Chain: Recommended Practices Guide for Developers '' last month and while David Wheeler, th…
Several security vulnerabilities were discovered in mediawiki, a website engine for collaborative work. CVE-2022-41765
Several security vulnerabilities have been discovered in Git, a fast, scalable, distributed revision control system, which may affect multi-user systems. CVE-2…
Several security vulnerabilities were discovered in Wordpress, a popular content management framework. Server Side Request Forgery and cross-site scripting (XS…
New libksba packages are available for Slackware 14.2, 15.0, and -current to fix a security issue.
Bash has been updated to version 5.1.16 using a patch from Fedora to fix a security issue by adding a null check in the parameter_brace_transform() function. R…
The chromium-browser-stable package has been updated to the new 106 branch with the 106.0.5249.61 version, fixing many bugs and 20 vulnerabilities; it brings a…
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in restriction bypass, information leaks, cr…
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Denial of service attack via crafted regular expressions. (CVE-2022-40023) References: - https://bugs.mageia.org/show_bug.cgi?id=30878 - https://ubuntu.com/sec…
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. Debian follows the Thunder…
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the stable distributio…
Several security vulnerabilities were discovered in mediawiki, a website engine for collaborative work. Insufficiently escaped input text may allow a malicious…
New vim packages are available for Slackware 15.0 and -current to fix a security issue.
F5 Ethernet Trailer dissector infinite loop (wnpa-sec-2022-06) References: - https://bugs.mageia.org/show_bug.cgi?id=30832 - https://www.wireshark.org/security…
Open-source security has been high on the agenda this year, with a number of initiatives, projects, and guidance launched in 2022 to help improve the cyber res…
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
A security issue was discovered in pcs, a corosync and pacemaker configuration tool: CVE-2022-1049
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
Two security vulnerabilities were discovered in Jetty, a Java servlet engine and webserver. CVE-2022-2047
New vim packages are available for Slackware 15.0 and -current to fix a security issue.