Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes two vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
Security release for the 0.4 branch: https://lib.openmpt.org/libopenmpt/2021/08/22/security- updates-0.5.11-0.4.23-0.3.32/
**PHP version 7.4.23** (26 Aug 2021) **Core:** * Fixed bug php#72595 (php_output_handler_append illegal write access). (cmb) * Fixed bug php#66719 (Weird behav…
This update fixes a potential security issue with TLS certificates not being correctly verified.
Update to latest upstream 8.8.15 Fix for security issue https://research.cs.wisc .edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0003.html
**PHP version 7.4.23** (26 Aug 2021) **Core:** * Fixed bug php#72595 (php_output_handler_append illegal write access). (cmb) * Fixed bug php#66719 (Weird behav…
When constructing an OpenSSL EC public or private key from PKCS#11 attributes or ECDH public data, check that the key is valid, i.e. that the point is on the c…
Update to latest upstream 8.8.15 Fix for security issue https://research.cs.wisc .edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0003.html
Several security vulnerabilities have been found in Qemu, a fast processor emulator. CVE-2021-3713
An update that solves 11 vulnerabilities and has 7 fixes is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes 8 vulnerabilities is now available.
The container sles-15-sp3-chost-byos-v20210827 was updated. The following patches have been included in this update:
USN-5051-2 introduced a regression in OpenSSL.
An update that solves two vulnerabilities, contains one feature and has one errata is now available.
Update to 1.17.2, fixes security issues including CVE-2021-3672.
update to version 1.1.1l
Multiple security issues were discovered in the GPAC multimedia framework which could result in denial of service or the execution of arbitrary code. The oldst…
NTFS-3G could be made to execute arbitrary code if it received a specially crafted image file.
NTFS-3G could be made to execute arbitrary code if it received a specially crafted image file.
An issue has been found in squashfs-tools, a tool to create and append to squashfs filesystems. As unsquashfs did not validate all filepaths, it would allow wr…
sssd: shell command injection in sssctl (CVE-2021-3621) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and …
kernel: out-of-bounds write in xt_compat_target_from_user() in net/netfilter/x_tables.c (CVE-2021-22555) * kernel: race condition for removal of the HCI contro…
