Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
**Archive_Tar 1.4.14** * Properly fix symbolic link path traversal (**CVE-2021-32610**)
An issue has been found in libsndfile, a library for reading/writing audio files. A crafted WAV file can trigger a heap buffer overflow and might allow exectut…
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in bypass of sandbox restrictions, incorrect validation of signed Jars or i…
An update that fixes one vulnerability is now available.
PEAR could be made to overwrite files as the administrator.
Several security issues were fixed in QPDF.
libsndfile could be made to crash or run programs as your login if it opened a specially crafted file.
An update that solves one vulnerability, contains two features and has two fixes is now available.
libsndfile could be made to crash or run programs as your login if it opened a specially crafted file.
* Properly set the cookies settings after a network process crash. * Fix accessibility tree after a cross site navigation with PSON enabled. * Ensure WebKitScr…
Security fix for CVE-2020-36327 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066
USN-4944-1 caused a regression.
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-21775
Several security issues were fixed in WebKitGTK.
* Update to go1.16.6 * Security fix for CVE-2021-34558
An update that fixes one vulnerability is now available.
An update that fixes 8 vulnerabilities is now available.
To say that it's an exciting time in the cybersecurity community is an understatement! Two of the most prestigious cybersecurity conferences - Black Hat USA 20…
* Update to upstream 20210716 release * update NXP 8897/8997 firmware images * rtlwifi: de-dupe rtl8723b/rtl8192e SDIO/USB WiFi firmware * Mediatek: update WiF…
This update upgrades Thunderbird to version 78.12.0. * Mozilla: IMAP server responses sent by a MITM prior to STARTTLS could be processed (CVE-2021-29969) * Mo…
OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066) (CVE-2021-2388) * OpenJDK: FTP PASV command response can cause FtpClient to con…
OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066) (CVE-2021-2388) * OpenJDK: FTP PASV command response can cause FtpClient to con…
kernel: size_t-to-int conversion vulnerability in the filesystem layer (CVE-2021-33909) * kernel: use-after-free in net/bluetooth/hci_event.c when destroying a…
The Drupal project uses the pear Archive_Tar library, which has released a security update that impacts Drupal. The vulnerability is mitigated by the fact that…
