Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 31: libidn2 FEDORA-2019-f454c7a1
Libidn 2.3.0 (released 2019-11-14) has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 (commit 241e8f48) * Update the data…
Debian LTS: DLA-1998-1: python-psutil security upda
It was discovered that there were multiple double free vulnerabilities in python-psutil, a Python module providing convenience functions for accessing system p…
RedHat: RHSA-2019-3699:01 Moderate: evolution security and bug fix update
An update for evolution, evolution-data-server, and evolution-ews is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this upda…
Kernel Address Space Isolation Is Still Being Explored For Better Security
IBM developers and others continue exploring the potential for address space isolation in the Linux kernel to reduce the risk of leaking sensitive data in atta…
Mageia 2019-0311: aspell security update
Updated aspell packages fix security vulnerability: libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/…
Fedora 30: jackson-parent FEDORA-2019-b171554877
- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to versi…
Fedora 30: jackson-core FEDORA-2019-b171554877
- Update jackson-parent to version 2.10. - Update jackson-bom to version 2.10.0. - Update jackson-annotations to version 2.10.0. - Update jackson-core to versi…
Mageia 2019-0291: nghttp2 security update
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulati…
Social engineering explained: How criminals exploit human behavior
Social engineering is the art of exploiting human psychology, rather than technical hacking techniques, to gain access to buildings, systems or data. Learn how…
Debian SPIP Significant Unauthenticated Access DSA-4532-1 CVE-2019-16391
Debian announced security fixes for SPIP, addressing issues that permitted unauthorized content modification, data manipulation, and user enumeration. Users ar…
Server-squashing zero-day published for phpMyAdmin tool
Are you a phpMyAdmin user? A researcher has just published a zero-day security bug in one of the webs most popular database administration software packages. L…
125 New Flaws Found in Routers and NAS Devices from Popular Brands
The world of connected consumer electronics, IoT, and smart devices is growing faster than ever with tens of billions of connected devices streaming and sharin…
Zero-Interaction Authentication
Laptops are vulnerable to theft, greatly increasing the likelihood of exposing sensitive files. Unfortunately, storing data in a cryptographic file system does…