Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (CVE-2021-42574) The following changes were introduce…
CVE-2021-25219 Kishore Kumar Kothapalli discovered that the lame server cache in BIND, a DNS server implementation, can be abused by an attacker to
Rebuild with updated stb_image to patch CVE-2021-28021, CVE-2021-42715, and CVE-2021-42716
Update to 2.9.27 bugfix release. Includes fix for CVE-2021-3620
Multiple security vulnerabilities were discovered in GlusterFS, a clustered file system. Buffer overflows and path traversal issues may lead to information dis…
Several security issues were fixed in Ceph.
An update that fixes 7 vulnerabilities is now available.
Several security issues were fixed in Mailman.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, incorrect Kerberos ticket use, selection of we…
Multiple vulnerabilities have been discovered in Asterisk, an open source PBX and telephony toolkit, which may result in denial of service. For the stable dist…
An update that fixes 7 vulnerabilities is now available.
Several security issues were fixed in WebKitGTK.
The package bind before version 9.16.22-1 is vulnerable to denial of service.
The package freerdp before version 2:2.4.1-1 is vulnerable to arbitrary code execution.
The package wpewebkit before version 2.34.1-1 is vulnerable to multiple issues including arbitrary code execution and sandbox escape.
The package webkit2gtk before version 2.34.1-1 is vulnerable to multiple issues including arbitrary code execution and sandbox escape.
The package opera before version 80.0.4170.63-1 is vulnerable to multiple issues including arbitrary code execution and sandbox escape.
The package chromium before version 95.0.4638.69-1 is vulnerable to multiple issues including arbitrary code execution and insufficient validation.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that fixes 14 vulnerabilities is now available.
An update that fixes two vulnerabilities, contains one feature is now available.
An update that solves two vulnerabilities, contains one feature and has one errata is now available.
