Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, i…
* CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, i…
An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segm…
tpm2: Reset too large size indicators in TPM2B to avoid access beyond buffer
**Version 1.1.4** * Reject paths with funky whitespace.
Fixes CVE-2021-3618 nginx: ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
**Version 1.1.4** * Reject paths with funky whitespace.
Fixes CVE-2021-3618 nginx: ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication
Several vulnerabilities were discovered in OpenEXR, a library and tools for the OpenEXR high dynamic-range (HDR) image format. An attacker could cause a denial…
The package mruby before version 3.0.0-1 is vulnerable to arbitrary code execution.
The package libtpms before version 0.8.4-1 is vulnerable to information disclosure.
The package puppet before version 6.23.0-1 is vulnerable to privilege escalation.
The package mediawiki before version 1.36.1-1 is vulnerable to access restriction bypass.
The package python-fastapi before version 0.65.2-1 is vulnerable to cross-site request forgery.
The package jenkins before version 2.300-1 is vulnerable to multiple issues including authentication bypass and access restriction bypass.
An update that fixes three vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
The container ses/7/cephcsi/cephcsi was updated. The following patches have been included in this update:
Upgrade to 2.9.23. Fixes CVE-2021-3583
Update to 2.53.8 Some improvements for performance and stability. Following the upstream and Firefox behaviour, no more use system colors (some backgrounds etc…
Upgrade to 2.9.23. Fixes CVE-2021-3583
An update that solves four vulnerabilities and has one errata is now available.
An update that fixes 14 vulnerabilities is now available.
An update that fixes 14 vulnerabilities is now available.
