The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The developers of LibreOffice have released updates for the open source Office suite to patch three security issues.
This update provides the upstream 6.1.36 maintenance release that fixes at least the following security vulnerabilities: A vulnerability in the Oracle VM Virtu…
Atlassian has rolled out fixes to remediate a critical security vulnerability pertaining to the use of hard-coded credentials affectingthe Questions For Conflu…
Apple on Wednesday rolled outsoftware fixesfor iOS, iPadOS, macOS, tvOS, and watchOS to address a number of security flaws affecting its platforms.This include…
This kernel-linus update is based on upstream 5.15.55 and fixes at least the following security issues: There are use-after-free vulnerabilities caused by time…
This kernel update is based on upstream 5.15.55 and fixes at least the following security issues: There are use-after-free vulnerabilities caused by timer hand…
Apache XML Security for Java could be made to expose sensitive information.
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities. CVE-2022-21123, CVE-2022-21125, CVE…
Arseniy Sharoglazov discovered multiple security issues in LDAP Account Manager (LAM), a web frontend for managing accounts in an LDAP directory, which could r…
Several security vulnerabilities have been discovered in isync, an IMAP and MailDir mailbox synchronizer. An malicious attacker who can control an IMAP server …
Multiple security issues were discovered in the Squid proxy caching server: CVE-2021-28116
Microsoft has rolled out its monthly Patch Tuesday updates for June 2022 which addresses numerous…Microsoft Patch Tuesday June Arrives With 55 Security Updates…
This kernel-linus update is based on upstream 5.15.46 and fixes at least the following security issues: KVM: x86/mmu: fix NULL pointer dereference on guest INV…
This kernel update is based on upstream 5.15.46 and fixes at least the following security issues: KVM: x86: avoid calling x86 emulator without a decoded instru…
Infinite loop with manipulated inline images (CVE-2022-24859) References: - https://bugs.mageia.org/show_bug.cgi?id=30511 - https://www.debian.org/lts/security…
Several security vulnerabilities were found in glib2.0, a general-purpose utility library for the GNOME environment. CVE-2021-27218
Researchers have found a serious code execution vulnerability in the web-based groupware Horde Webmail. Exploiting…Serious RCE Vulnerability In Horde Webmail T…
While allowing public access to the sensitive behind-the-scenes operation of a program sounds risky, open-source software actually has the potential to be even…
Several security vulnerabilities have been discovered in smarty3, the compiling PHP template engine. Template authors are able to run restricted static php met…
MITM vulnerability when DNSSEC wasn't used (CVE-2022-26491) References: - https://bugs.mageia.org/show_bug.cgi?id=30438 - https://lists.suse.com/pipermail/sle-…
Multiple security vulnerabilities were discovered in Puma, a HTTP server for Ruby/Rack applications, which could result in HTTP request smuggling or informatio…
This update provides ffmpeg version 4.3.4, which fixes several security vulnerabilities and other bugs which were corrected upstream. References: - https://bug…
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer, where an unprivilege…
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer, where an unprivileged reg…