Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2021-0396: exiv2 security upda
Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denia…
Mageia 2021-0353: tpm2-tools security upda
A flaw was found in tpm2-tools. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and re…
Mageia 2021-0331: connman security upda
Updated connman packages fix security vulnerability. ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsp…
Mageia 2021-0310: busybox security upda
Updated busybox packages fix security vulnerability: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, w…
Debian LTS: DLA-2699-1: ipmitool security upda
An issue has been found in ipmitool, an utility for IPMI control with kernel driver or LAN interface. Neglecting proper checking of input data might result in …
Mageia 2021-0302: openvpn security upda
OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authe…
Mageia 2021-0242: thunderbird security upda
The updated packages fix security vulnerabilities: Out of bounds-read when parsing a `WM_COPYDATA` message. (CVE-2021-29964) Memory safety bugs fixed in Thunde…
SQL Injection Vulnerability Found In CleanTalk AntiSpam WordPress Plugin
A serious vulnerability recently appeared in another WordPress plugin that could allow extracting sensitive data…SQL Injection Vulnerability Found In CleanTalk…
Mageia 2021-0203: nvidia-current security upda
Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko)…
Mageia 2021-0202: nvidia390 security upda
Updated nvidia390 packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko) wher…
Linux kernel bug opens door to all manner of attac
Security researchers have discovered an information disclosure vulnerability in the Linux kernel that can be exploited to leak data, at least on 32-bit Arm dev…
Fedora 32: openvpn 2021-d6b9d849
Security update - OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured w…
2 New Chrome 0-Days Under Attack ' Update Your Browser ASAP!
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with fixes for two security vulnerabilities, both of which…
Mageia 2021-0186: curl security upda
libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and th…
Malware Can Exploit New Flaw in Intel CPUs to Launch Side-Channel Attacks
A new research has yielded yet another means to pilfer sensitive data by exploiting what's the first "on-chip, cross-core" side-channel attack targeting the ri…
RedHat: RHSA-2021-0837:01 Moderate: openvswitch2.11 security upda
An update for openvswitch2.11 is now available in Fast Datapath for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a secu…
Mageia 2021-0133: quartz security upda
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description (CVE-2019-13990…
Debian LTS: DLA-2386-1: libdbi-perl security upda
Several vulnerabilities were discovered in the Perl5 Database Interface (DBI). An attacker could trigger a denial-of-service (DoS) and possibly execute arbitra…
Ubuntu: USN-4517-1 Email-Address-List vulnerabili
Email-Address-List could be made to remotely exhaust resources if it received specially crafted email data.
Ubuntu 4496-1: Apache XML-RPC vulnerabili
Apache XML-RPC could be made to execute arbitrary code if it received specially crafted data by a malicious XML-RPC server.
Ubuntu 4495-1: Apache Log4j vulnerabili
Apache Log4j could be made to remotely execute arbitrary code if it received specially crafted log data.
Mageia 2020-0366: libetpan security upda
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server…
Serious Vulnerabilities Found In MAGMI Magento Plugin
Researchers found two security vulnerabilities affecting the Magento database plugin MAGMI. These flaws could allow remote code execution attacks. MAGMISerious…
Gentoo: GLSA-202008-23: chrony: Symlink vulnerabili
A vulnerability in chrony may allow a privileged attacker to cause data loss via a symlink.