Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2020-0027: firefox security upda
When pasting a tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into c…
Are You Ready for Microsoft Windows 7 End of Support on 14th January 2020?
January 14, 2020, is a day cybersecurity stakeholders should pay attention to, as it marks the end of Microsoft support in Windows 7.From a security perspectiv…
Mageia 2020-0019: freeimage security upda
The updated packages fix security vulnerabilities: When FreeImage 3.18.0 reads a tiff file, it will be handed to the Load function of the PluginTIFF.cpp file,…
Mageia 2019-0419: pdfresurrect security upda
Updated pdfresurrect package fixes security vulnerabilities: A vulnerability was found in PDFResurrect 0.15 has a buffer overflow via a crafted PDF file becau…
Mageia 2019-0407: apache security upda
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to …
Debian: DSA-4583-1: spip security upda
A vulnerability was discovered in the SPIP publishing system, which could result in unauthorised writes to the database by authors. The oldstable distribution …
New PlunderVolt Attack Targets Intel SGX Enclaves by Tweaking CPU Voltage
A team of cybersecurity researchers demonstrated a novel yet another technique to hijack Intel SGX, a hardware-isolated trusted space on modern Intel CPUs that…
Ubuntu 4221-1: libpcap vulnerabili
Applications using libpcap could be made to crash if given specially crafted data.
Fedora 30: libidn2 FEDORA-2019-160303eb
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Fedora 31: mingw-libidn2 FEDORA-2019-1ebb5c92
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Fedora 31: libidn2 FEDORA-2019-f454c7a1
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Debian LTS: DLA-1998-1: python-psutil security upda
It was discovered that there were multiple double free vulnerabilities in python-psutil, a Python module providing convenience functions for accessing system p…
Serious XSS Vulnerability Found In Avast Desktop Antivirus For Windows
Recently, Avast disclosed a security breach aimed at its CCleaner app. Once again, Avast made it to the news dueSerious XSS Vulnerability Found In Avast Deskto…
RedHat: RHSA-2019-3699:01 Moderate: evolution security and bug fix update
An update for evolution, evolution-data-server, and evolution-ews is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this upda…
Kernel Address Space Isolation Is Still Being Explored For Better Security
IBM developers and others continue exploring the potential for address space isolation in the Linux kernel to reduce the risk of leaking sensitive data in atta…
Mageia 2019-0311: aspell security update
Updated aspell packages fix security vulnerability: libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/…
Fedora 30: jackson-parent FEDORA-2019-b171554877
- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to versi…
Fedora 30: jackson-core FEDORA-2019-b171554877
- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to versi…
Mageia 2019-0291: nghttp2 security update
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulati…
Social engineering explained: How criminals exploit human behavior
Social engineering is the art of exploiting human psychology, rather than technical hacking techniques, to gain access to buildings, systems or data. Learn how…
Debian SPIP Significant Unauthenticated Access DSA-4532-1 CVE-2019-16391
Debian announced security fixes for SPIP, addressing issues that permitted unauthorized content modification, data manipulation, and user enumeration. Users ar…
Cynet 360: The Next Generation of EDR
Many organizations regard Endpoint Detection and Response (EDR) as their main protection against breaches. EDR, as a category, emerged in 2012 and was rapidly …
Server-squashing zero-day published for phpMyAdmin tool
Are you a phpMyAdmin user? A researcher has just published a zero-day security bug in one of the webs most popular database administration software packages. L…
125 New Flaws Found in Routers and NAS Devices from Popular Brands
The world of connected consumer electronics, IoT, and smart devices is growing faster than ever with tens of billions of connected devices streaming and sharin…