Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Rebase to version 2.4.3
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Matthias Gerstner reported that usbview, a USB device viewer, does not properly handle authorization in the PolicyKit policy configuration, which could result …
USBView could be made to crash or run programs as an administrator.
Several security issues were fixed in Thunderbird.
An update that fixes one vulnerability is now available.
Two issues have been found in libspf2, a library for validating mail senders with SPF. Both issues are related to heap-based buffer overflows.
An update that fixes one vulnerability is now available.
David Bouman discovered a heap-based buffer overflow vulnerability in the base64 functions of aide, an advanced intrusion detection system, which can be trigge…
An update that fixes two vulnerabilities is now available.
An update that contains security fixes can now be installed.
AIDE could be made to crash or run programs as an administrator if it opened a specially crafted file.
Several vulnerabilities were discovered in Flatpak, an application deployment framework for desktop apps. CVE-2021-43860
An update that fixes 14 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
Open vSwitch could be made to hang or crash if it received specially crafted network traffic.
A security issue was fixed in the kernel.
curl could be made to expose sensitive information if it received a specially crafted input.
The 5.15.15 stable kernel update contains a number of important fixes across the tree.
## 2022-01-10, Version 14.18.3 'Fermium' (LTS), @richardlau This is a security release. ### Notable changes #### Improper handling of URI Subject Alternative N…
Resolves: CVE-2022-23094
New version 3.6.1, Security fix for CVE-2021-4181, CVE-2021-4182, CVE-2021-4183, CVE-2021-4184, CVE-2021-4185, CVE-2021-4186, CVE-2021-4190
The Drupal project includes a very old version of jQuery. Security vulnerabilities leading to cross-site scripting attacks in different components of the jQuer…
