The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfe…
Several security issues were fixed in WebKitGTK.
WEBrick could allow a HTTP request smuggling attack.
Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent file descript…
Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent file descript…
Several security issues were fixed in WebKitGTK.
Fix web process cache suspend/resume when sandbox is enabled. Fix accelerated images disappearing after scrolling. Fix video flickering with DMA-BUF sink. Fix …
Fix web process cache suspend/resume when sandbox is enabled. Fix accelerated images disappearing after scrolling. Fix video flickering with DMA-BUF sink. Fix …
Multiple vulnerabilities have been discovered in WebKitGTK+, the worst of which could lead to arbitrary code execution
Update to 2.44.2: Make gamepads visible on axis movements, and not only on button presses. Disable the gst-libav AAC decoder. Make user scripts and style sheet…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a security flaw impacting the Oracle WebLogic Server to the Known Exploited …
Several security issues were fixed in WebKitGTK.
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
The US government's cybersecurity agency CISA is giving federal agencies an early February deadline to patch a critical -- and already exploited -- security vu…
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain acc…
Microsoft on Monday revealed new malware deployed by the hacking group behind the SolarWinds supply chain attack last December to deliver additional payloads a…
Microsoft has recently warned users of a new phishing campaign active in the wild. This…This Phishing Campaign Delivers IcedID Malware Via Web Contact Forms ' …
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Update the rustls-webpki crate to version 0.103.16. Update the webpki-roots and webpki-root-certs crates to version 1.0.10. This addresses security advisories …
An update that solves 243 vulnerabilities and has 15 bug fixes can now be installed.
An update that solves 15 vulnerabilities and has one fix can now be installed.
An update that solves one vulnerability can now be installed.
Security update
Update to 2.54.0