Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2021-0478: thunderbird security upda
Updated thunderbird packages fix security vulnerabilities: Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker qu…
Debian LTS: DLA-2783-1: hiredis security upda
It was discovered that there was an integer-overflow vulnerability in hiredis, a C client library for communicating with Redis databases. This occurred within …
Debian LTS: DLA-2777-1: tiff security upda
Two security issues were found in TIFF, a widely used format for storing image data, as follows: CVE-2020-19131
Mageia 2021-0469: firefox security upda
Due to a data race in the crossbeam-deque in the crossbeam crate, one or more tasks in the worker queue could have been be popped twice instead of other tasks …
Debian LTS: DLA-2772-1: taglib security upda
Several problems were corrected in TagLib, a library for reading and editing audio meta data. CVE-2017-12678
Fedora 35: lynx 2021-57287bd0
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug
Unidentified threat actors breached a server running an unpatched, 11-year-old version of Adobe's ColdFusion 9 software in minutes to remotely take over contro…
Fedora 33: lynx 2021-232161e4
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
HAProxy Found Vulnerable to Critical HTTP Request Smuggling Atta
A critical security vulnerability ( CVE-2021-40346 ) has been disclosed in HAProxy , a widely used open-source load balancer and proxy server, that could be ab…
HAProxy Found Vulnerable to Critical HTTP Request Smuggling Attack
A critical security vulnerability has been disclosed inÂHAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary…
Fedora 34: lynx 2021-f59bda7d
- fix disclosure of HTTP auth credentials via SNI data (CVE-2021-38165)
Debian LTS: DLA-2750-1: exiv2 security upda
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
Mageia 2021-0413: libass security upda
Updated libass packages fix security vulnerability: libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and p…
Researchers Detail Modus Operandi of ShinyHunters Cyber Crime Group
ShinyHunters, a notorious cybercriminal underground group that's been on a data breach spree since last year, has been observed searching companies' GitHub rep…
Debian: DSA-4958-1: exiv2 security upda
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
Mageia 2021-0396: exiv2 security upda
Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denia…
Mageia 2021-0353: tpm2-tools security upda
A flaw was found in tpm2-tools. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and re…
Mageia 2021-0331: connman security upda
Updated connman packages fix security vulnerability. ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsp…
Mageia 2021-0310: busybox security upda
Updated busybox packages fix security vulnerability: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, w…
Debian LTS: DLA-2699-1: ipmitool security upda
An issue has been found in ipmitool, an utility for IPMI control with kernel driver or LAN interface. Neglecting proper checking of input data might result in …
Mageia 2021-0302: openvpn security upda
OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authe…
Mageia 2021-0242: thunderbird security upda
The updated packages fix security vulnerabilities: Out of bounds-read when parsing a `WM_COPYDATA` message. (CVE-2021-29964) Memory safety bugs fixed in Thunde…
SQL Injection Vulnerability Found In CleanTalk AntiSpam WordPress Plugin
A serious vulnerability recently appeared in another WordPress plugin that could allow extracting sensitive data…SQL Injection Vulnerability Found In CleanTalk…
Mageia 2021-0203: nvidia-current security upda
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko)…