(Sep 18) Multiple security issues have been found in Iceweasel, Debian’s version of the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows may lead to the execution of arbitrary code. [More…]
Comment
(Sep 18) Jockey could be tricked into bypassing polkit authorizations.
(Sep 18) systemd could be tricked into bypassing polkit authorizations.
(Sep 18) Florian Weimer discovered two security problems in the Chrony time synchronisation software (buffer overflows and use of uninitialised data in command replies). [More…]
(Sep 13) It was discovered that in Mediawiki, a wiki engine, several API modules allowed anti-CSRF tokens to be accessed via JSONP. These tokens protect against cross site request forgeries and are confidential. [More…]