Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2021-0532: bluez security upda
BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be …
Mageia 2021-0514: tinyxml security upda
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML …
Debian LTS: DLA-2817-1: postgresql-9.6 security upda
Jacob Champion discovered two vulnerabilities in the PostgreSQL database system, which could result in man-in-the-middle attacks. For Debian 9 stretch, these p…
Debian: DSA-5007-1: postgresql-13 security upda
Jacob Champion discovered two vulnerabilities in the PostgreSQL database system, which could result in man-in-the-middle attacks. For the stable distribution (…
Debian: DSA-5006-1: postgresql-11 security upda
Jacob Champion discovered two vulnerabilities in the PostgreSQL database system, which could result in man-in-the-middle attacks. For the oldstable distributio…
Debian: DSA-5001-1: redis security upda
Multiple vulnerabilities were discovered in Redis, a persistent key-value database, which could result in denial of service or the execution of arbitrary code.
Mageia 2021-0499: squid security upda
Updated squid packages fix security vulnerability: Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of a…
Mageia 2021-0478: thunderbird security upda
Updated thunderbird packages fix security vulnerabilities: Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker qu…
Debian LTS: DLA-2783-1: hiredis security upda
It was discovered that there was an integer-overflow vulnerability in hiredis, a C client library for communicating with Redis databases. This occurred within …
Debian LTS: DLA-2777-1: tiff security upda
Two security issues were found in TIFF, a widely used format for storing image data, as follows: CVE-2020-19131
Mageia 2021-0469: firefox security upda
Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker queue could have been be popped twice instead of other tasks …
Debian LTS: DLA-2772-1: taglib security upda
Several problems were corrected in TagLib, a library for reading and editing audio meta data. CVE-2017-12678
Fedora 35: lynx 2021-57287bd0
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Fedora 33: lynx 2021-232161e4
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
HAProxy Found Vulnerable to Critical HTTP Request Smuggling Atta
A critical security vulnerability ( CVE-2021-40346 ) has been disclosed in HAProxy , a widely used open-source load balancer and proxy server, that could be ab…
HAProxy Found Vulnerable to Critical HTTP Request Smuggling Attack
A critical security vulnerability has been disclosed inÂHAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary…
Fedora 34: lynx 2021-f59bda7d
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Debian LTS: DLA-2750-1: exiv2 security upda
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
Mageia 2021-0413: libass security upda
Updated libass packages fix security vulnerability: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and p…
Debian: DSA-4958-1: exiv2 security upda
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
Mageia 2021-0396: exiv2 security upda
Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denia…
Mageia 2021-0353: tpm2-tools security upda
A flaw was found in tpm2-tools. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and re…
Mageia 2021-0331: connman security upda
Updated connman packages fix security vulnerability. ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsp…
Mageia 2021-0310: busybox security upda
Updated busybox packages fix security vulnerability: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, w…