Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011
It was found that Apache Log4j2, a Logging Framework for Java, did not protect from uncontrolled recursion from self-referential lookups. When the logging conf…
An update that fixes one vulnerability is now available.
It was discovered that modsecurity-apache, an Apache module to tighten the Web application security, does not properly handles excessively nested JSON objects,…
xwayland 21.1.4 Security fix for CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, CVE-2021-4011 Store EGLcontext to avoid superfluous eglMakeCurrent() calls Prefer…
Update log4j to 2.16.0 - Disables JNDI by default
Fix out of bounds read issue in *larrv functions (CVE-2021-4048)
- Update the libsqlite3-sys crate to version 0.23.2. - Update the rusqlite crate to version 0.26.3. This update also contains a fix for RUSTSEC-2021-0128.
- Update the libsqlite3-sys crate to version 0.23.2. - Update the rusqlite crate to version 0.26.3. This update also contains a fix for RUSTSEC-2021-0128.
An update that fixes 7 vulnerabilities is now available.
An update that fixes 9 vulnerabilities is now available.
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features u…
- Update to latest upstream (95.0)
**MariaDB 10.5.13** Release notes: https://mariadb.com/kb/en/mariadb-10513-release-notes/ Maintainer notes: This update contains - conditionally only on=35 - p…
**MariaDB 10.5.13** Release notes: https://mariadb.com/kb/en/mariadb-10513-release-notes/ Maintainer notes: This update contains - conditionally only on=35 - p…
An update that contains security fixes can now be installed.
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities and has one errata is now available.
An update that fixes one vulnerability is now available.
Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary c…
An update that fixes 9 vulnerabilities is now available.
An update that fixes 8 vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes 7 vulnerabilities is now available.
