Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 31: curl 2020-55f1f7cb
- avoid overwriting a local file with -J (CVE-2020-8177) - fix partial password leak over DNS on HTTP redirect (CVE-2020-8169)
Fedora 32: ntp 2020-a0b39d58
This update fixes a security issue causing a memory leak when an AES-CMAC key is enabled for authentication.
7 Best Linux Distros for Security and Privacy in 20
Privacy and security are pressing concerns for all of us these days '' not a day goes by that we aren't bombarded with security news headlines about hacks, bre…
Debian LTS: DLA-2258-1: zziplib security upda
Several issues have been fixed in zziplib, a library providing read access on ZIP-archives. They are basically all related to invalid memory access and resulti…
Fedora 32: curl FEDORA-2020-6af1dd29
- avoid overwriting a local file with -J (CVE-2020-8177) - fix partial password leak over DNS on HTTP redirect (CVE-2020-8169)
SciLinux: SLSA-2020-2615-1 Important: thunderbird on SL7.x x86_
Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage (CVE-2020-12398) * Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405) …
SciLinux: SLSA-2020-2613-1 Important: thunderbird on SL6.x i386/x86_
Mozilla: Security downgrade with IMAP STARTTLS leads to information leakage (CVE-2020-12398) * Mozilla: Use-after-free in SharedWorkerService (CVE-2020-12405) …
Debian: DSA-4705-1: python-django security upda
It was discovered that Django, a high-level Python web development framework, did not properly sanitize input. This would allow a remote attacker to perform SQ…
Fedora 31: libvirt FEDORA-2020-5cd83efd
* Fix iptables No chain/target/match by that name (bz #1813830) * systemd: start libvirtd after firewalld/iptables services (bz #1697636) * CVE-2020-12430: mem…
Debian LTS: DLA-2233-2: python-django regression upda
It was discovered that there was a regression in the latest update to Django, the Python web development framework. The upstream fix for CVE-2020-13254 to addr…
Linus Torvalds rejects 'beyond stupid' AWS-made Linux patch for Intel CPU Snoop atta
After much debate, Linus Torvalds has rejected a controversial patch to address potential leaks of secrets from a CPU's cores.
Ubuntu 4380-1: Apache Ant vulnerabili
Apache Ant could leak sensitive information or be made to run programs as your login.
SciLinux: SLSA-2020-2337-1 Important: git on SL7.x x86_
git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak (CVE-2020-11008) SL7 x86_64 git-1.8.3.1-23.el7_8.x86_64.rpm git-d…
Fedora 32: php FEDORA-2020-3ea22534
**PHP version 7.4.6** (14 May 2020) **Core:** * Fixed bug php#78434 (Generator yields no items after valid() call). (Nikita) * Fixed bug php#79477 (casting obj…
Fedora 31: php FEDORA-2020-62ee541b
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid poi…
Fedora 30: php FEDORA-2020-96cb0120
**PHP version 7.3.17** (16 Apr 2020) **Core:** * Fixed bug php#79364 (When copy empty array, next key is unspecified). (cmb) * Fixed bug php#78210 (Invalid poi…
IPFire Firewall Using Cryptography To Secure Linux Kernel Against RootK
Have you heard about IPFire's new method of cryptographic kernel rootkit protection?ÂIPFire is an open-source software that protects the network from external …
Debian LTS: DLA-2087-1: suricata security upda
Two vulnerabilities have recently been discovered in the stream-tcp code of the intrusion detection and prevention tool Suricata.
Debian: DSA-4602-1: xen security upda
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, guest-to-host privilege escalation or information…
Debian LTS: DLA-2061-1: firefox-esr security upda
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltrati…
Debian: DSA-4600-1: firefox-esr security upda
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, data exfiltrati…
Debian LTS: DLA-1999-1: symfony security upda
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code executi…
Debian: DSA-4573-1: symfony security upda
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code executi…
Fedora 31: libell FEDORA-2019-17419b24a3
bluez 5.52: * improvements for bluetooth mesh * audio bug fixes * general bug fixes ---- ell 0.26: * Fix issue with memory leak and TLS certificates. * Fix iss…