Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Michael Catanzaro reported a problem in Grilo, a framework for discovering and browsing media. TLS certificate verification is not enabled on the SoupSessionAs…
- CVE-2021-37750 (explicit NULL deref on KDC)
A security flaw was found on rubygem-addressable that a crafted template may cause DOS. This issue is now assinged as CVE-2021-32740. This new rpm should fix t…
A security flaw was found on rubygem-addressable that a crafted template may cause DOS. This issue is now assinged as CVE-2021-32740. This new rpm should fix t…
An update that fixes one vulnerability is now available.
An update that solves 7 vulnerabilities and has one errata is now available.
An update that solves one vulnerability, contains two features and has 6 fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes 15 vulnerabilities is now available.
Security fix for CVE-2021-39240, CVE-2021-39241, CVE-2021-39242
https://lib.openmpt.org/libopenmpt/2021/08/22/security- updates-0.5.11-0.4.23-0.3.32/
Security fix for CVE-2021-39240, CVE-2021-39241, CVE-2021-39242
exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291) For more details about the security issue(s), including the impact, a CVSS sco…
exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291) For more details about the security issue(s), including the impact, a CVSS sco…
libssh could be made to crash or run programs if it received specially crafted network traffic.
OpenSSL could be made to crash or expose sensitive information if it received a specially crafted ASN.1 string.
OpenSSL could be made to crash or expose sensitive information if it received a specially crafted ASN.1 string.
MongoDB could provide unintended access.
An update that solves one vulnerability and has one errata is now available.
An update that fixes 7 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
**MySQL 8.0.26** Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-26.html
