Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
- Update to 2.16.11 Release notes: https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.11
Backport fix for CVE-2021-34552.
Backport fix for CVE-2021-34552.
Backport fix for CVE-2021-34552.
Several security vulnerabilities have been discovered in lrzip, a compression program. Heap-based and stack buffer overflows, use-after-free and infinite loops…
HTCondor, a distributed workload management system, has Incorrect Access Control. It is possible to use a different authentication method to submit a job than …
A buffer overflow was discovered in the Aspell spell checker, which could result in the execution of arbitrary code. For the stable distribution (buster), thes…
# New in release OpenJDK 11.0.12 (2021-07-20): Live versions of these release notes can be found at: * https://bitly.com/openjdk11012 * https://builds.shipilev…
# New in release OpenJDK 8u302 (2021-07-20) Live versions of these release notes can be found at: * https://bitly.com/openjdk8u302 * https://builds.shipilev.ne…
Upstream 6.2.5 release (RHBZ #1984631). Fix CVE-2021-32761: 32-bit systems BITFIELD command integer overflow.
# New in release OpenJDK 8u302 (2021-07-20) Live versions of these release notes can be found at: * https://bitly.com/openjdk8u302 * https://builds.shipilev.ne…
# New in release OpenJDK 11.0.12 (2021-07-20): Live versions of these release notes can be found at: * https://bitly.com/openjdk11012 * https://builds.shipilev…
** Redis 6.0.15** - Released Wed Jul 21 16:32:19 IDT 2021 Upgrade urgency: SECURITY, contains fixes to security issues that affect authenticated client connect…
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
The package vivaldi before version 4.1.2369.11-1 is vulnerable to multiple issues including access restriction bypass, arbitrary code execution, content spoofi…
The package powerdns before version 4.5.1-1 is vulnerable to denial of service.
The package 389-ds-base before version 2.0.7-1 is vulnerable to multiple issues including authentication bypass and denial of service.
The package geckodriver before version 0.29.1-1 is vulnerable to cross- site request forgery.
The package containerd before version 1.5.4-1 is vulnerable to directory traversal.
The package consul before version 1.9.8-1 is vulnerable to multiple issues including access restriction bypass and certificate verification bypass.
Andrea Fioraldi discovered a buffer overflow in libsndfile, a library for reading/writing audio files, which could result in denial of service or potentially t…
An update that fixes one vulnerability is now available.
Update to 2.53.8.1 Includes fixes for mailnews archiving, as well as account creation after news subscribing. Show just an icon (instead of a big image etc.) w…
**Archive_Tar 1.4.14** * Properly fix symbolic link path traversal (**CVE-2021-32610**)
