Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several vulnerabilities were discovered in OpenEXR, a library and tools for the OpenEXR high dynamic-range (HDR) image format. An attacker could cause a denial…
Multiple vulnerabilities were discovered in Jetty, a Java servlet engine and webserver which could result in cross-site scripting, information disclosure, priv…
An update that solves three vulnerabilities and has one errata is now available.
One security issue affects WordPress, a weblog manager, versions between 3.7 and 5.7. This update fixes the following security issues: Object injection in PHPM…
It was discovered that there was an issue in libpam-tacplus (a security module for using the TACACS+ authentication service) where shared secrets such as priva…
openCryptoki could be made to allow invalid curve attacks if it received a specially crafted key.
PEAR could be made to overwrite files as the administrator.
Several security issues were fixed in Perl DBI module.
An update that fixes four vulnerabilities is now available.
Security fix for CVE-2021-34558
Security fix for CVE-2021-34558
An update that fixes 13 vulnerabilities is now available.
The package chromium before version 92.0.4515.131-1 is vulnerable to multiple issues including arbitrary code execution, information disclosure and content spo…
The package nodejs-lts-erbium before version 12.22.4-1 is vulnerable to arbitrary code execution.
The package nodejs-lts-fermium before version 14.17.4-1 is vulnerable to arbitrary code execution.
The package nodejs before version 16.6.0-1 is vulnerable to arbitrary code execution.
lasso: XML signature wrapping vulnerability when parsing SAML responses (CVE-2021-28091) For more details about the security issue(s), including the impact, a …
Exiv2 could be made to denial of service if received a specially crafted image.
Several security issues were fixed in GnuTLS.
An update that solves 9 vulnerabilities and has two fixes is now available.
Several security issues were fixed in QPDF.
The container sles-15-sp3-chost-byos-v20210729 was updated. The following patches have been included in this update:
The 5.13.6 stable kernel update contains a number of important fixes across the tree.
The 5.13.6 stable kernel update contains a number of important fixes across the tree.
