Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 31: gnutls FEDORA-2020-76b705bb
Update to upstream 3.6.14 release, and security fix for CVE-2020-13777. ---- - Fix certificate chain validation involving the expired "AddTrust External Root".…
Debian LTS: DLA-2233-2: python-django regression upda
It was discovered that there was a regression in the latest update to Django, the Python web development framework. The upstream fix for CVE-2020-13254 to addr…
Debian: DSA-4701-1: intel-microcode security upda
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for the Special Register Buffer Data Sampling (CVE-2020-0543), Ve…
Mageia 2020-0242: vino security upda
Updated vino packages fix security vulnerabilities: The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer did not properly han…
How open source software vulnerabilities create risk for organizatio
Security flaws in open source software have increased and can take a long time to be added to the National Vulnerability Database, says RiskSense.
Debian LTS: DLA-2222-1: libexif security upda
Various minor vulnerabilities have been addredd in libexif, a library to parse EXIF metadata files.
Mageia 2020-0236: php security upda
Updated php packages fix security vulnerabilities: - Fixed bug #78875 (Long filenames cause OOM and temp files are not cleaned). [1] - Fixed bug #78876 (Long v…
RedHat: RHSA-2020-2298:01 Moderate: openvswitch securit
An update for openvswitch is now available in Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security…
RedHat: RHSA-2020-2296:01 Moderate: openvswitch2.11 securit
An update for openvswitch2.11 is now available for Fast Datapath for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2020-2295:01 Important: openvswitch2.13 securit
An update for openvswitch2.13 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
RedHat: RHSA-2020-2297:01 Moderate: openvswitch2.11 securit
An update for openvswitch2.11 is now available for Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a sec…
Fedora 30: php FEDORA-2020-9fa7f4e2
**PHP version 7.3.18** (14 May 2020) **Core:** * Fixed bug php#78875 (Long filenames cause OOM and temp files are not cleaned). (**CVE-2019-11048**) (cmb) * Fi…
Fedora 31: php FEDORA-2020-8838d072
**PHP version 7.3.18** (14 May 2020) **Core:** * Fixed bug php#78875 (Long filenames cause OOM and temp files are not cleaned). (**CVE-2019-11048**) (cmb) * Fi…
New Bluetooth Vulnerability Exposes Billions of Devices to Hackers
Academics from àcole Polytechnique Fédérale de Lausanne (EPFL) disclosed a security vulnerability in Bluetooth that could potentially allow an attacker to spo…
Debian LTS: DLA-2214-1: libexif security upda
Various vulnerabilities have been addressed in libexif, a library to parse EXIF metadata files.
Debian LTS: DLA-2212-1: openconnect security upda
OpenConnect, a VPN software, had a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certifica…
Debian: DSA-4686-1: apache-log4j1.2 security upda
It was discovered that the SocketServer class included in apache-log4j1.2, a logging library for java, is vulnerable to deserialization of untrusted data. An a…
7 New Flaws Affect All Thunderbolt-equipped Computers Sold in the Last 9 Years
A cybersecurity researcher today uncovers a set of 7 new unpatchable hardware vulnerabilities that affect all desktops and laptops sold in the past 9 years wit…
SQL Injection Vulnerability In Sophos XG Firewall That Was Under Active Exploit
A serious vulnerability in Sophos XG Firewall was under exploit. Specifically, hackers abused this bug to steal data from targetSQL Injection Vulnerability In …
Researcher Discloses 4 Zero-Day Bugs in IBM's Enterprise Security Software
A cybersecurity researcher today publicly disclosed technical details and PoC for 4 unpatched zero-day vulnerabilities affecting an enterprise security softwar…
SciLinux: SLSA-2020-1509-1 Important: java-11-openjdk on SL7.x x86_
OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) (CVE-2020-2803) * OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 82…
Researchers Find Security Vulnerabilities In Some of The Top Password Managers
While password managers are meant to protect users' credentials and underlying sensitive data, they do not necessarily warrant fool-proof security.Researchers …
Debian: DSA-4643-1: python-bleach security upda
It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleach.clean when strip=False and 'm…
SciLinux: SLSA-2020-0905-1 Important: thunderbird on SL7.x x86_
Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputStreamReady was missing protections against state confus…