Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DSA-5101-1: libphp-adodb security upda
Emmet Leahy reported that libphp-adodb, a PHP database abstraction layer library, allows to inject values into a PostgreSQL connection string. Depending on how…
Researchers Warn of Linux Kernel ‘Dirty Pipe’ Arbitrary File Overwrite Vulnerability
Linux distributions are in the process of issuing patches to address a newly disclosed security vulnerability in the kernel that could allow an attacker to ove…
Mageia 2022-0092: kernel security upda
This kernel update is based on upstream 5.15.25 and fixes at least the following security issues: A vulnerability in the Linux kernel since version 5.8 due to …
Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities
An analysis of data crowdsourced from more than 200,000 network-connected infusion pumps used in hospitals and healthcare entities has revealed that 75% of tho…
Ubuntu 5304-1: PolicyKit vulnerabili
policykit-1 could be made to crash if it received specially crafted data.
SciLinux: SLSA-2022-0620-1 Important: kernel on SL7.x x86_
kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466) * kernel: Use After Free in unix_gc() which could result in a local p…
Master Key for Hive Ransomware Retrieved Using a Flaw in its Encryption Algorithm
Researchers have detailed what they call the "first successful attempt" at decrypting data infected with Hive ransomware without relying on the private key use…
A Free Solution to Protect Your Business from 6 Biggest Cyber Threats in 2022
For the last few years, the cybersecurity threat landscape has gotten progressively more complex and dangerous. The online world is now rife with data thieves,…
Debian LTS: DLA-2927-1: twisted security upda
It was discovered that Twisted, a Python event-based framework for internet applications, is affected by HTTP request splitting vulnerabilities, and may expose…
VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products
VMware on Tuesday patched severalhigh-severityvulnerabilitiesimpacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could …
Fedora 34: rust-afterburn 2022-06569a0a
Rebuild to fix [RUSTSEC-2022-0006](https://rustsec.org/advisories/RUSTSEC-2022-0006.html) (possible memory corruption caused by a data race) and [CVE-2022-2165…
Fedora 35: rust-afterburn 2022-1b76e3a1
Rebuild to fix [RUSTSEC-2022-0006](https://rustsec.org/advisories/RUSTSEC-2022-0006.html) (possible memory corruption caused by a data race) and [CVE-2022-2165…
Mageia 2022-0049: lrzsz security upda
lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap…
Mageia 2022-0047: cryptsetup security upda
An attacker can modify on-disk metadata to simulate decryption in progress with crashed (unfinished) reencryption step and persistently decrypt part of the LUK…
Mageia 2022-0045: connman security upda
TCP Receive Path does not Check for Presence of Sufficient Header Data. (CVE-2022-23096) Possibly invalid memory reference in 'strnlen()' call in 'forward_dns_…
Debian LTS: DLA-2895-1: qt4-x11 security upda
Multiple out-of-bounds error were discovered in qt4-x11. The highest threat from CVE-2021-3481 (at least) is to data confidentiality the application availabili…
Debian LTS: DLA-2885-1: qtsvg-opensource-src security upda
Multiple out-of-bounds error were discovered in qtsvg-opensource-src. The highest threat from CVE-2021-3481 (at least) is to data confidentiality the applicati…
Debian LTS: DLA-2888-1: nvidia-graphics-drivers security upda
Multiple security vulnerabilities have been discovered in the NVIDIA binary driver and libraries that provide optimized hardware acceleration which may lead to…
Mageia 2022-0022: kernel-linus security upda
This kernel-linus update is based on upstream 5.15.15 and fixes atleast the following security issues: A data leak flaw was found in the way XFS_IOC_ALLOCSP IO…
Mageia 2022-0021: kernel security upda
This kernel update is based on upstream 5.15.15 and fixes atleast the following security issues: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in…
Debian LTS: DLA-2870-1: apache-log4j2 security upda
Apache Log4j2, a Java Logging Framework, is vulnerable to a remote code execution (RCE) attack where an attacker with permission to modify the logging configur…
Mageia 2021-0582: ldns security upda
Heap out-of-bound read vulnerability in rr_frm_str_internal function Heap out-of-bound read vulnerability in ldns_nsec3_salt_data function Fixed time memory co…
Mageia 2021-0572: log4j security upda
Updated log4j packages fix security vulnerability: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 did not protect from uncontrolled recursion from self-refer…
Mageia 2021-0566: log4j security upda
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers wi…