Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves 9 vulnerabilities and has two fixes is now available.
An update that fixes two vulnerabilities is now available.
An update that solves three vulnerabilities and has three fixes is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Various security, performance, accuracy and stability issues have been fixed, including a critical evasion assigned CVE-2021-35063.
Various security, performance, accuracy and stability issues have been fixed, including a critical evasion assigned CVE-2021-35063.
An update that contains security fixes can now be installed.
An update that fixes one vulnerability is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes 29 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes three vulnerabilities is now available.
The package ruby-addressable before version 2.8.0-1 is vulnerable to denial of service.
The package gitlab before version 14.0.3-1 is vulnerable to multiple issues including cross-site request forgery, access restriction bypass, arbitrary code exe…
The package rabbitmq before version 3.8.19-1 is vulnerable to cross- site scripting.
The package php7 before version 7.4.21-1 is vulnerable to multiple issues including denial of service and insufficient validation.
The package php before version 8.0.8-1 is vulnerable to multiple issues including denial of service and insufficient validation.
The package openexr before version 3.0.5-1 is vulnerable to arbitrary code execution.
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes …
This update backports some significant security fixes relating to session security from the upstream 9.19 release. See https://github.com/mojolicious/mojo/pull…
Security fixes. CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513 CVE-2021-30514 CVE-2021…
This update backports some significant security fixes relating to session security from the upstream 9.19 release. See https://github.com/mojolicious/mojo/pull…
