The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Introduction If you have been reading the news, you might know that cyber attacks have…Cybersecurity And Web Hosting: What Businesses Need To Know on Latest Ha…
Two security issue have been discovered in nghttp2: server, proxy and client implementing HTTP/2. CVE-2018-1000168
Two security issues have been discovered in LibreOffice's support for digital signatures in ODF documents, which could result in incorrect signature indicators…
Vulnerabilities in the life cycle of open-source software development can start from tiny crumbs but grow into substantial issues. This week's KubeCon + CloudN…
Updated thunderbird packages fix security vulnerabilities: Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker qu…
Multiple security vulnerabilities have been discovered in XStream. See references for details. References: - https://bugs.mageia.org/show_bug.cgi?id=29512
Debian GNU/Linux 11.1 has been released as the first point release to the latest and greatest Debian GNU/Linux 11 ''Bullseye'' OS series, featuring 24 security…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Although not at supersonic speed, the changes the world experiences in the digital environment multiply,…Growing Threats to Enterprise Security Require a Conso…
After serving as a trusted login authenticator for years, Yubico has now stepped up to…Yubico's New Bio Series Security Keys Support Biometric Authentication o…
Two security issues were found in TIFF, a widely used format for storing image data, as follows: CVE-2020-19131
Multiple security issues were found in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting, denial of service and ce…
New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.
The U.S. government on Wednesday announced the formation of a new Civil Cyber-Fraud Initiative that aims to hold contractors accountable for failing to meet re…
A crafted WebSocket frame could result in a crash in the weechat Relay plugin. References: - https://bugs.mageia.org/show_bug.cgi?id=29513 - https://www.debian…
The updated packages fix a security vulnerabilities: While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processi…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
New httpd packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues.
This kernel-linus update is based on upstream 5.10.70 and fixes atleast the following security issues: Use-after-free vulnerability in the Linux kernel exploit…
This kernel update is based on upstream 5.10.70 and fixes atleast the following security issues: Use-after-free vulnerability in the Linux kernel exploitable b…
The updated sqlite packages fix a security vulnerability: Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potenti…
Multiple security vulnerabilities have been discovered in fig2dev, utilities for converting XFig figure files. Buffer overflows, out-of-bounds reads and NULL p…
Multiple security issues were discovered in QEMU, a fast processor emulator, which could result in denial of service or the the execution of arbitrary code.
Denial of service when identifying crafted invalid RFCs Security fix for CVE-2021-3737: python client can enter an infinite loop on a 100 Continue response fro…