Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A security vulnerability has been found in Kaminari, a pagination engine plugin for Rails 3+ and other modern frameworks, that would allow an attacker to injec…
Several security issues were fixed in WebKitGTK.
SQL parse could be made to denial of service if it received a specially crafted regular expression.
IBM s390x systems could be made to crash or run programs as an administrator.
An update that fixes 28 vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
An issue has been found in grilo, a framework for discovering and browsing media. Due to missing TLS certificate verification, users are vulnerable to network …
An update that solves 20 vulnerabilities and has 107 fixes is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has one errata is now available.
Update to 2.32.4: * Do not append .asc extension to downloaded text/plain files. * Fix several crashes and rendering issues. * Fix CVE-2021-30858
- CVE-2021-22947 - STARTTLS protocol injection via MITM - CVE-2021-22946 - protocol downgrade required TLS bypassed - CVE-2021-22945 - use-after-free and doubl…
Backport patch for CVE-2021-23437.
Backport patch for CVE-2021-23437.
Backport patch for CVE-2021-23437.
Backport patch for CVE-2021-23437.
USN-5079-2 introduced a regression in curl.
LibTIFF could be made to crash or run programs if it opened a specially crafted file.
USN-5079-1 introduced a regression in curl.
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30858
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30858
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.
Rebase with Security fix for CVE-2021-3781
