Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two vulnerabilities have been discovered in the libtiff library and the included tools, which may result in denial of service or the execution of arbitrary cod…
Kernel developers have gracefully accepted suggestions concerning release signing process
An update that fixes three vulnerabilities is now available.
An update that contains security fixes can now be installed.
Two issues have been found in bluez, a package with Bluetooth tools and daemons. One issue is about a man-in-the-middle attack during secure pairing, the other…
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities which could result in privilege esca…
Add fix to CVE-2021-28041
**Version 6.5.0** (June 16th, 2021) * **SECURITY** Fixes **CVE-2021-34551**, a complex RCE affecting Windows hosts. See SECURITY.md for details. * The fix for …
**Version 6.5.0** (June 16th, 2021) * **SECURITY** Fixes **CVE-2021-34551**, a complex RCE affecting Windows hosts. See SECURITY.md for details. * The fix for …
An update that solves three vulnerabilities and has three fixes is now available.
An update that fixes two vulnerabilities is now available.
Several security issues were fixed in Thunderbird.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that contains security fixes can now be installed.
Several security issues were fixed in Ceph.
An issue has been found in libgcrypt20, a crypto library. Mishandling of ElGamal encryption results in a possible side-channel attack and an interoperability p…
An update that fixes two vulnerabilities is now available.
The package pigeonhole before version 0.5.15-1 is vulnerable to denial of service.
The package dovecot before version 2.3.15-1 is vulnerable to information disclosure.
The package tpm2-tools before version 5.1.1-1 is vulnerable to man-in- the-middle.
The package exiv2 before version 0.27.4-1 is vulnerable to multiple issues including arbitrary code execution, denial of service and information disclosure.
The package keycloak before version 14.0.0-1 is vulnerable to certificate verification bypass.
