Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2021-0469: firefox security upda
Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker queue could have been be popped twice instead of other tasks …
Debian LTS: DLA-2772-1: taglib security upda
Several problems were corrected in TagLib, a library for reading and editing audio meta data. CVE-2017-12678
Fedora 35: lynx 2021-57287bd0
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug
Unidentified threat actors breached a server running an unpatched, 11-year-old version of Adobe's ColdFusion 9 software in minutes to remotely take over contro…
Fedora 33: lynx 2021-232161e4
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
HAProxy Found Vulnerable to Critical HTTP Request Smuggling Atta
A critical security vulnerability ( CVE-2021-40346 ) has been disclosed in HAProxy , a widely used open-source load balancer and proxy server, that could be ab…
HAProxy Found Vulnerable to Critical HTTP Request Smuggling Attack
A critical security vulnerability has been disclosed inÂHAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary…
Fedora 34: lynx 2021-f59bda7d
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Debian LTS: DLA-2750-1: exiv2 security upda
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
Mageia 2021-0413: libass security upda
Updated libass packages fix security vulnerability: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and p…
Researchers Detail Modus Operandi of ShinyHunters Cyber Crime Group
ShinyHunters, a notorious cybercriminal underground group that's been on a data breach spree since last year, has been observed searching companies' GitHub rep…
Debian: DSA-4958-1: exiv2 security upda
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
Mageia 2021-0396: exiv2 security upda
Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denia…
Mageia 2021-0353: tpm2-tools security upda
A flaw was found in tpm2-tools. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and re…
Mageia 2021-0331: connman security upda
Updated connman packages fix security vulnerability. ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsp…
Mageia 2021-0310: busybox security upda
Updated busybox packages fix security vulnerability: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, w…
Debian LTS: DLA-2699-1: ipmitool security upda
An issue has been found in ipmitool, an utility for IPMI control with kernel driver or LAN interface. Neglecting proper checking of input data might result in …
Mageia 2021-0302: openvpn security upda
OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authe…
Mageia 2021-0242: thunderbird security upda
The updated packages fix security vulnerabilities: Out of bounds-read when parsing a `WM_COPYDATA` message. (CVE-2021-29964) Memory safety bugs fixed in Thunde…
SQL Injection Vulnerability Found In CleanTalk AntiSpam WordPress Plugin
A serious vulnerability recently appeared in another WordPress plugin that could allow extracting sensitive data…SQL Injection Vulnerability Found In CleanTalk…
Mageia 2021-0203: nvidia-current security upda
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko)…
Mageia 2021-0202: nvidia390 security upda
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) wher…
Linux kernel bug opens door to all manner of attac
Security researchers have discovered an information disclosure vulnerability in the Linux kernel that can be exploited to leak data, at least on 32-bit Arm dev…
Fedora 32: openvpn 2021-d6b9d849
Security update - OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured w…