Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly (CVE-2021-25214) For more details about the security issue(s), in…
libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution (CVE-2021-3246) For more details about the security issue(s), including t…
hivex: stack overflow due to recursive call of _get_children() (CVE-2021-3622) For more details about the security issue(s), including the impact, a CVSS score…
It was discovered that a buffer overflow in rekeying in libssh could result in denial of service or potentially the execution of arbitrary code.
Several security issues were fixed in Thunderbird.
The update for ledgersmb released as DSA 4862-1 introduced a regression in the display of some search results. Updated ledgersmb packages are now available to …
An update that fixes 5 vulnerabilities is now available.
squashfs-tools could be made to overwrite files.
An update that fixes one vulnerability is now available.
An update that fixes 5 vulnerabilities is now available.
An update that fixes 6 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
4.5 release (includes security fix for CVE-2021-40153)
uWSGI could be made to crash if it received specially crafted input.
APR could be made to expose sensitive information if it received a specially crafted input.
grilo could be made to allow MITM attacks.
Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of servic…
An update that fixes 7 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
New upstream stable version 1.24.6; fixes CVE-2021-3716.
New upstream stable version 1.26.5; fixes CVE-2021-3716.
An issue has been found in gthumb, an image viewer and browser. A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/…
An update that solves one vulnerability and has two fixes is now available.
