Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-2950-1: python-scrapy security upda
It was found that Scrapy, a framework for extracting data from websites, could send HTTP Authorization as well as cookies to other domains in case of redirecti…
SciLinux: SLSA-2022-0620-1 Important: kernel on SL7.x x86_
kernel: use after free in eventpoll.c may lead to escalation of privilege (CVE-2020-0466) * kernel: Use After Free in unix_gc() which could result in a local p…
Debian: DSA-5047-2: prosody regression upda
The update for prosody released as DSA 5047 introduced a memory leak. Updated prosody packages are now available to correct this issue. For the oldstable distr…
Debian LTS: DLA-2903-1: libraw security upda
Several vulnerabilities have been discovered in libraw that may lead to the execution of arbitrary code, denial of service, or information leaks.
Debian LTS: DLA-2894-1: aide security upda
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
Fedora 35: webkit2gtk3 2022-25a98f5d
Update to 2.34.4: * Fix dire ["Safari Leaks"](https://safarileaks.com/) IndexedDB privacy violation. * Make audio tools (like mixers) display the actual name o…
Debian LTS: DLA-2892-1: golang-1.7 security upda
Several vulnerabilities were discovered in the Go programming language. An attacker could trigger a denial-of-service (DoS) and information leak.
Debian LTS: DLA-2891-1: golang-1.8 security upda
Several vulnerabilities were discovered in the Go programming language. An attacker could trigger a denial-of-service (DoS) and information leak.
Debian: DSA-5051-1: aide security upda
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
Debian: DSA-5025-1: tang security upda
A flaw was discovered in tang, a network-based cryptographic binding server, which could result in leak of private keys. For the stable distribution (bullseye)…
SciLinux: SLSA-2021-5046-1 Important: thunderbird on SL7.x x86_
This update upgrades Thunderbird to version 91.4.0. * Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 * Mozilla: URL leakage when navigati…
SciLinux: SLSA-2021-5014-1 Important: firefox on SL7.x x86_
This update upgrades Firefox to version 91.4.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 * Mozilla: URL leakage when navigati…
Debian: DSA-5017-1: xen security upda
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.
Threat Advisory: Linux Ransomware Risks and Prevention Insights
Ransomware has dominated cybersecurity news headlines for the past decade, and for good reason. Through a combination of advanced encryption and effective exto…
Anatomy of a Linux Ransomware Atta
Ransomware has dominated cybersecurity news headlines for the past decade, and for good reason. Through a combination of advanced encryption and effective exto…
Ubuntu 5148-1: hivex vulnerabili
hivex could be made to crash or leak information if it received specially crafted input.
Debian: DSA-5009-1: tomcat9 security upda
Apache Tomcat, the servlet and JSP engine, did not properly release an HTTP upgrade connection for WebSocket connections once the WebSocket connection was clos…
Fedora 34: watchdog 2021-31748c40
fix memory leak when verbose mode is on
Fedora 33: watchdog 2021-45b7585d
fix memory leak when verbose mode is on
Fedora 33: cifs-utils 2021-c87ed133
Fix for CVE-2021-20208 Update to 6.13 cifs.upcall: fix regression in kerberos mount mount.cifs: fix crash when mount point does not exist ---- Fix for CVE-2021…
Fedora 34: cifs-utils 2021-b1bb3d3b
Fix for CVE-2021-20208 Update to 6.13 cifs.upcall: fix regression in kerberos mount mount.cifs: fix crash when mount point does not exist ---- Fix for CVE-2021…
Debian: DSA-4977-1: xen security upda
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.
SciLinux: SLSA-2021-3336-1 Important: sssd on SL7.x x86_
sssd: shell command injection in sssctl (CVE-2021-3621) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and …
SciLinux: SLSA-2021-3327-1 Important: kernel on SL7.x x86_
kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c (CVE-2021-22555) * kernel: race condition for removal of the HCI contro…