Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two vulnerabilities were fixed in the reSIProcate SIP stack. CVE-2017-11521
An update that fixes 33 vulnerabilities is now available.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
A couple of vulnerabilites were found in python-gnupg, a Python wrapper for the GNU Privacy Guard. CVE-2018-12020
Rebase to 0.18.0 that covers CVE-2021-3639
A couple of vulnerabilites were found in paramiko, an implementation of SSHv2 protocol in Python. CVE-2018-1000805
An XSS vulnerability was discovered in noVNC, a HTML5 VNC client, in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the me…
A cookie prefix spoofing vulnerability in CGI::Cookie.parse and a regular expression denial of service vulnerability (ReDoS) on date parsing methods were disco…
Several vulnerabilities were discovered in djvulibre, a library and set of tools to handle documents in the DjVu format. An attacker could crash document viewe…
The python-rdflib-tools package (tools for converting to and from RDF) had wrappers that could load Python modules from the current working directory, allowing…
An update that contains security fixes can now be installed.
An update that fixes 41 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
In PostGIS, which adds support for geographic objects to the PostgreSQL database, denial of service via crafted ST_AsX3D function input was fixed.
An issue has been found in zziplib, a library providing read access on ZIP-archive. Because of mishandling a return value, an attacker might cause a denial of
An issue has been found in libzip, a library for reading, creating, and modifying zip archives. Crafted ZIP archives could allow remote attackers to cause deni…
Two vulnerabilities were fixed in monit, a utility for monitoring and managing Unix systems. CVE-2019-11454
Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
Backport fix for CVE-2021-45078
Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack
Backport fix for CVE-2021-45078
Several security vulnerabilities were found in Apache Log4j2, a Logging Framework for Java, which could lead to a denial of service or information disclosure.
Several vulnerabilities were fixed in the network traffic analyzer Wireshark. CVE-2021-22207
An update that fixes one vulnerability is now available.
