chromium-browser: Use after free in ANGLE (CVE-2020-6463) * chromium-browser: Inappropriate implementation in WebRTC (CVE-2020-6514) * Mozilla: Potential leak of redirect targets when loading scripts in a worker (CVE-2020-15652) * Mozilla: Memory safet… Continue Reading — SciLinux: SLSA-2020-3233-1 Important: firefox on SL6.x i386/x86_64>

A dangerous new vulnerability has been discovered in Secure Boot that affects a huge number of Linux and Windows systems that use the UEFI specification during boot. Continue Reading — New BootHole flaw in Secure Boot affects a huge number of Linux and Windows systems>

IBM claims to have developed a new fully homomorphic encryption toolkit for Linux, which is available on GitHub for public use. Continue Reading — IBM announces homomorphic encryption toolkit for Linux>

The updated packages fix security vulnerabilities: A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a … Continue Reading — Mageia 2020-0294: podofo security update>

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is availa… Continue Reading —...

It was discovered that there was an issue where kdepim-runtime would default to using unencrypted POP3 communication despite the UI indicating that encryption was in use. Continue Reading — Debian LTS: DLA-2300-1: kdepim-runtime security update>

A privilege escalation vulnerability vulnerability was discovered in Net-SNMP, a set of tools for collecting and organising information about devices on computer networks. Continue Reading — Debian LTS: DLA-2299-1: net-snmp security update>

An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rat… Continue Reading —...

The LWN.net Weekly Edition for July 30, 2020 is available. Continue Reading — [$] LWN.net Weekly Edition for July 30, 2020

Multiple vulnerabilities have been found in Mozilla Firefox, the worst of which could result in the arbitrary execution of code. Continue Reading — Gentoo: GLSA-202007-60: Mozilla Firefox: Multiple vulnerabilities>