Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-2699-1: ipmitool security upda
An issue has been found in ipmitool, an utility for IPMI control with kernel driver or LAN interface. Neglecting proper checking of input data might result in …
Mageia 2021-0302: openvpn security upda
OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authe…
Mageia 2021-0242: thunderbird security upda
The updated packages fix security vulnerabilities: Out of bounds-read when parsing a `WM_COPYDATA` message. (CVE-2021-29964) Memory safety bugs fixed in Thunde…
SQL Injection Vulnerability Found In CleanTalk AntiSpam WordPress Plugin
A serious vulnerability recently appeared in another WordPress plugin that could allow extracting sensitive data…SQL Injection Vulnerability Found In CleanTalk…
Mageia 2021-0203: nvidia-current security upda
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko)…
Mageia 2021-0202: nvidia390 security upda
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) wher…
Linux kernel bug opens door to all manner of attac
Security researchers have discovered an information disclosure vulnerability in the Linux kernel that can be exploited to leak data, at least on 32-bit Arm dev…
Fedora 32: openvpn 2021-d6b9d849
Security update - OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured w…
2 New Chrome 0-Days Under Attack ' Update Your Browser ASAP!
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with fixes for two security vulnerabilities, both of which…
Mageia 2021-0186: curl security upda
libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and th…
Malware Can Exploit New Flaw in Intel CPUs to Launch Side-Channel Attacks
A new research has yielded yet another means to pilfer sensitive data by exploiting what's the first "on-chip, cross-core" side-channel attack targeting the ri…
RedHat: RHSA-2021-0837:01 Moderate: openvswitch2.11 security upda
An update for openvswitch2.11 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secu…
Mageia 2021-0133: quartz security upda
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description (CVE-2019-13990…
Debian LTS: DLA-2386-1: libdbi-perl security upda
Several vulnerabilities were discovered in the Perl5 Database Interface (DBI). An attacker could trigger a denial-of-service (DoS) and possibly execute arbitra…
Ubuntu: USN-4517-1 Email-Address-List vulnerabili
Email-Address-List could be made to remotely exhaust resources if it received specially crafted email data.
Ubuntu 4496-1: Apache XML-RPC vulnerabili
Apache XML-RPC could be made to execute arbitrary code if it received specially crafted data by a malicious XML-RPC server.
Ubuntu 4495-1: Apache Log4j vulnerabili
Apache Log4j could be made to remotely execute arbitrary code if it received specially crafted log data.
Mageia 2020-0366: libetpan security upda
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server…
Serious Vulnerabilities Found In MAGMI Magento Plugin
Researchers found two security vulnerabilities affecting the Magento database plugin MAGMI. These flaws could allow remote code execution attacks. MAGMISerious…
Gentoo: GLSA-202008-23: chrony: Symlink vulnerabili
A vulnerability in chrony may allow a privileged attacker to cause data loss via a symlink.
Debian LTS: DLA-2341-1: inetutils security upda
In inetutils-telnetd, an implementation of a telnet daemon, arbitrary remote code execution might have been possible via short writes or urgent data.
Debian LTS: DLA-2340-1: sqlite3 security upda
Several vulnerabilities have been discovered in sqlite3, a C library that implements an SQL database engine. CVE-2018-8740
Mageia 2020-0338: freerdp security upda
Integer overflow due to missing input sanitation in rdpegfx channel. The input rectangles from the server are not checked against local surface coordinates and…
Mageia 2020-0335: x11-server security upda
Allocation for pixmap data in AllocatePixmap() does not initialize the memory in xserver, it leads to leak uninitialize heap memory to clients. When the X serv…