Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 21 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
NSS could be made to crash or run programs if it verified a specially crafted signature.
Thunderbird could be made to crash or run programs if it verified a specially crafted signature.
NSS could be made to crash or run programs if it verified a specially crafted signature.
Two heap overflows were fixed in the rsyslog logging daemon. CVE-2019-17041
Out-of-bounds read for an incomplete URI with an IPv6 address containing an embedded IPv4 address has been fixed in uriparser, a library to parse Uniform Resou…
guests may exceed their designated memory limit [XSA-385, CVE-2021-28706] PoD operations on misaligned GFNs [XSA-388, CVE-2021-28704, CVE-2021-28707 CVE-2021-2…
Update containerd and moby-engine - Security fix for CVE-2021-41190
Update containerd and moby-engine - Security fix for CVE-2021-41190
Update containerd and moby-engine - Security fix for CVE-2021-41190
In rsync, a remote file-copying tool, remote attackers were able to bypass the argument-sanitization protection mechanism by passing additional --protect-args.
An update that fixes 16 vulnerabilities is now available.
Andrew Bartlett discovered that Samba, a SMB/CIFS file, print, and login server for Unix, may map domain users to local users in an undesired way. This could a…
Several security issues were fixed in ImageMagick.
The 5.15.5 stable kernel update contains a number of important fixes across the tree.
The 5.15.5 stable kernel update contains a number of important fixes across the tree.
An update that fixes one vulnerability is now available.
Several vulnerabilities were fixed in the OpenSC smart card utilities. CVE-2019-15945
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
Release of stargz snapshotter v0.10.1. This release contains the mitigation for CVE-2021-41190. Please see the release note for details. https://github.com/con…
Ransomware has dominated cybersecurity news headlines for the past decade, and for good reason. Through a combination of advanced encryption and effective exto…
Ransomware has dominated cybersecurity news headlines for the past decade, and for good reason. Through a combination of advanced encryption and effective exto…
Rongxin Wu discovered a use-after-free vulnerability in the International Components for Unicode (ICU) library which could result in denial of service or poten…
