Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
We just published a security update to the LTS version 1.4 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerability: * Cross-site scrip…
Multiple vulnerabilities were discovered in Cloudflare's RPKI validator, which could result in denial of service or path traversal. For the stable distribution…
An out-of-bounds memory access was discovered in the mod_extforward plugin of the lighttpd web server, which may result in denial of service. For the oldstable…
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities, contains one feature and has 13 fixes is now available.
An update that fixes one vulnerability is now available.
Introduced regression Exiv2.
An update that solves one vulnerability and has two fixes is now available.
Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, b…
The system could be made to crash or run programs as an administrator.
Multiple issues have been discovered in vim: an enhanced vi text editor: CVE-2017-17087 fileio.c in Vim sets the group ownership of a .swp file to the editor's…
Version 0.102 of ClamAV, an anti-virus toolkit, is end-of-life. ClamAV has been updated to version 0.103 to be able to receive virus signature updates.
An update that solves one vulnerability and has two fixes is now available.
Several security issues were fixed in Apache HTTP Server.
- Update to 2.16.12 Release notes: https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12
- Update to 2.16.12 Release notes: https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execut…
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attack…
Security fix for CVE-2021-45463
https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.3
Security fix for CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4186
Add wayland detection and pass flags to improve experience when wayland is used. ---- Update to 96.0.4664.110. You know the drill, lots of security bugs fixed,…
It was discovered that sphinxsearch, a fast standalone full-text SQL search engine, could allow arbitrary files to be read by abusing a configuration option.
Several security issues were fixed in WebKitGTK.
