Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702]
Security fix for CVE-2021-3802
https://www.mediawiki.org/wiki/Release_notes/1.36#MediaWiki_1.36.2
**Redis 6.2.** - 6 Released Mon Oct 4 12:00:00 IDT 2021 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2021-41099**) In…
``` * Mon Oct 04 2021 Didik Supriadi - 1.4.18-2 - Enable activation, cglib, dom4j, jdom, and jdom2 * Fri Oct 01 2021 Didik Supriadi - 1.4.18-1 - Update to vers…
An update that fixes 12 vulnerabilities is now available.
This update includes the changes in tzdata 2021e. Notable changes are: - - Fiji suspends DST for the 2021/2022 season.
A security vulnerability was discovered in gpsd, the Global Positioning System daemon. A stack-based buffer overflow may allow remote attackers to execute arbi…
Two issues have been found in jbig2dec, a JBIG2 decoder library. One issue is related to an overflow with a crafted image file. The other is related to a NULL …
The following vulnerabilities have been discovered in the wpewebkit web engine: CVE-2021-30846
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30846
Kishore Kumar Kothapalli discovered that the lame server cache in BIND, a DNS server implementation, can be abused by an attacker to significantly degrade reso…
# New in release OpenJDK 8u312 (2021-10-19): Live versions of these release notes can be found at: * https://bitly.com/openjdk8u312 * https://builds.shipilev.n…
**PHP version 7.4.25** (21 Oct 2021) **DOM:** * Fixed bug php#81433 (DOMElement::setIdAttribute() called twice may remove ID). (Viktor Volkov) **FFI:** * Fixed…
# New in release OpenJDK 11.0.13 (2021-10-19): Live versions of these release notes can be found at: * https://bitly.com/openjdk11013 * https://builds.shipilev…
# New in release OpenJDK 8u312 (2021-10-19): Live versions of these release notes can be found at: * https://bitly.com/openjdk8u312 * https://builds.shipilev.n…
**PHP version 7.4.25** (21 Oct 2021) **DOM:** * Fixed bug php#81433 (DOMElement::setIdAttribute() called twice may remove ID). (Viktor Volkov) **FFI:** * Fixed…
Update to 1.10.5 * Fix CVE-2021-41133
Bind could be made to consume resources if it received specially crafted network traffic.
PHP-PFM in PHP could be made to run program as an administrator if it received specially crafted input.
An update that fixes one vulnerability is now available.
One security issue has been discovered in mosquitto: MQTT message broker. A null dereference vulnerability was found which could lead to crashes for applicatio…
An update that fixes two vulnerabilities is now available.
An update that solves two vulnerabilities, contains one feature and has one errata is now available.
