Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2021-4076
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, incorrect Kerberos ticket use, selection of we…
An update that fixes 33 vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
It was discovered that missing SAML signature validation in the SOGo groupware could result in impersonation attacks. For the oldstable distribution (buster), …
An update that fixes three vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting and SQL injection attacks, or execut…
This update provides log4j 2.16.0, to address the critical vulnerability CVE-2021-44228 ("Log4Shell"). Note with 2.16.0, JNDI is entirely disabled by default; …
This update provides log4j 2.16.0, to address the critical vulnerability CVE-2021-44228 ("Log4Shell"). Note with 2.16.0, JNDI is entirely disabled by default; …
An update that fixes three vulnerabilities is now available.
Jan-Niklas Sohn discovered that multiple input validation failures in X server extensions of the X.org X server may result in privilege escalation if the X ser…
USN-5186-1 caused some minor regressions in Firefox.
An update that fixes four vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Apache Log4j 2 could be made to crash if it received specially crafted input.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
A flaw was discovered in tang, a network-based cryptographic binding server, which could result in leak of private keys. For the stable distribution (bullseye)…
An update that fixes two vulnerabilities is now available.
