Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two issues have been found in netkit-rsh, client and server programs for remote shell connections. Due to insufficient input validation in path names sent by s…
An update that fixes 12 vulnerabilities is now available.
Several security issues were fixed in Mailman.
rpki-client 7.5 untrusted input: - Fail repository synchronisation after 15min runtime. - Limit the number of repositories per TAL. - Don't allow `DOCTYPE` def…
Security fix for CVE-2021-3927 and CVE-2021-3928
rpki-client 7.5 untrusted input: - Fail repository synchronisation after 15min runtime. - Limit the number of repositories per TAL. - Don't allow `DOCTYPE` def…
New version of software. References to locally tested API removed in this version. Public instance is used instead.
rpki-client 7.5 untrusted input: - Fail repository synchronisation after 15min runtime. - Limit the number of repositories per TAL. - Don't allow `DOCTYPE` def…
New version of software. References to locally tested API removed in this version. Public instance is used instead.
An update that fixes 10 vulnerabilities is now available.
OpenEXR could be made to crash if it opened a specially crafted file.
An issue has been found in axis, a SOAP implementation in Java. The issue is related to a cross-site scripting (XSS) attack in the default servlet/services.
- Update to 2.4.1 containing security fixes for CVE-2021-41159 and CVE-2021-41160. - Remmina 1.4.21 with bugfixes.
- Update to 2.4.1 containing security fixes for CVE-2021-41159 and CVE-2021-41160. - Remmina 1.4.21 with bugfixes.
- Update to 2.4.1 containing security fixes for CVE-2021-41159 and CVE-2021-41160. - Remmina 1.4.21 with bugfixes.
Backport upstream exif fixes
Two issues have been found in atftp, an advanced TFTP client. Both are related to sending crafted requests to the server and triggering a denial-of-service due…
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE. A local user can take advantage of these flaws for local root privilege …
An update that solves 15 vulnerabilities and has 56 fixes is now available.
hivex could be made to crash or leak information if it received specially crafted input.
AccountsService could be made to crash or run programs as an administrator if it received a specially crafted command.
An update that fixes 10 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
