Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple issues have been discovered in scilab, particularly in ezXML embedded library: CVE-2021-30485
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes …
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
The 5.12.14 stable kernel update contains a number of important fixes across the tree.
**PHP version 7.4.21** (01 Jul 2021) **Core:** * Fixed bug php#81068 (Double free in realpath_cache_clean()). (Dimitry Andric) * Fixed bug php#76359 (open_base…
The 5.12.14 stable kernel update contains a number of important fixes across the tree.
**PHP version 7.4.21** (01 Jul 2021) **Core:** * Fixed bug php#81068 (Double free in realpath_cache_clean()). (Dimitry Andric) * Fixed bug php#76359 (open_base…
Avahi could be made to denial of service if it received a specially crafted input.
Several security issues were fixed in Avahi.
Learn about common defense evasion techniques used in malicious shell scripts and how Uptycs detects them.
Several security issues were fixed in PHP.
libuv could be made to crash or expose sensitive information if it received a specially crafted input.
This `glibc` update re-enables `valgrind` suppression support for string functions. It addresses `valgrind` false positives on the aarch64 architecture in part…
An update that fixes 20 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes 29 vulnerabilities is now available.
RabbitMQ ver. 3.8.18
RabbitMQ ver. 3.8.18
The package python-django before version 3.2.5-1 is vulnerable to insufficient validation.
A vulnerability in XStream, a Java library to serialize objects to and from XML, may allow a remote attacker to execute commands of the host only by manipulati…
An out-of-bounds read was discovered in the uv__idna_to_ascii() function of Libuv, an asynchronous event notification library, which could result in denial of …
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result an SSRF bypass of the FILTER_VALIDA…
An update that contains security fixes can now be installed.
DjVuLibre could be made to crash or execute arbitrary code if it opened a specially crafted file.
