Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
## 2021-10-12, Version 14.18.1 'Fermium' (LTS), @danielleadams This is a security release. ### Notable changes * **CVE-2021-22959**: HTTP Request Smuggling due…
The newest upstream commit Security fix for CVE-2021-3778 Security fix for CVE-2021-3796 Security fix for CVE-2021-3875 Security fix for CVE-2021-3872
Security fix for CVE-2021-39360
## 2021-10-12, Version 14.18.1 'Fermium' (LTS), @danielleadams This is a security release. ### Notable changes * **CVE-2021-22959**: HTTP Request Smuggling due…
fix memory leak when verbose mode is on
Several vulnerabilities were discovered in mailman, a web-based mailing list manager, which could result in arbitrary content injection via the options and pri…
Several security issues were fixed in Mailman.
The package nodejs-lts-erbium before version 12.22.7-1 is vulnerable to multiple issues including arbitrary code execution, url request injection and certifica…
The package nodejs-lts-fermium before version 14.18.1-1 is vulnerable to multiple issues including arbitrary code execution, url request injection and certific…
The package nodejs before version 16.11.1-1 is vulnerable to url request injection.
The package virtualbox before version 6.1.28-1 is vulnerable to multiple issues including sandbox escape, denial of service and information disclosure.
The package chromium before version 95.0.4638.54-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and insufficient…
The package apache before version 2.4.51-1 is vulnerable to directory traversal.
fix memory leak when verbose mode is on
Security fix for CVE-2021-3618
libcaca could be made to crash if it received a specially crafted image.
Tenable discovered that in Babel, a set of tools for internationalizing Python applications, Babel.Locale allows attackers to load arbitrary locale .dat files …
The container bci/golang was updated. The following patches have been included in this update:
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967) (CVE-2021-35565) * OpenJDK: Incorrect principal selection when using Kerberos C…
OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967) (CVE-2021-35565) * OpenJDK: Incorrect principal selection when using Kerberos C…
An update that solves one vulnerability and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
