Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update radare2 to 5.3.1 Also fixes CVS-2021-32613 ---- bump to radare2 5.3.0 fixes CVE-2021-32613
Update radare2 to 5.3.1 Also fixes CVS-2021-32613 ---- bump to radare2 5.3.0 fixes CVE-2021-32613
Update radare2 to 5.3.1 Also fixes CVS-2021-32613 ---- bump to radare2 5.3.0 fixes CVE-2021-32613
Backport fix for CVE-2021-3589 and a heap buffer overflow.
Backport fix for CVE-2021-3589 and a heap buffer overflow.
It was discovered that the previous upload of the package prosody versioned 0.9.12-2+deb9u3 introduced a regression in the mod_auth_internal_hashed module. Big…
Update to 1.6.15 Security If an authenticated client connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur. Affects ver…
CVE-2021-3560 mitigation
Backport fix for CVE-2021-33503.
Several security issues were fixed in GRUB 2.
An update that solves two vulnerabilities and has one errata is now available.
An update that fixes one vulnerability is now available.
Steven Seeley discovered that in jetty, a Java servlet engine and webserver, requests to the ConcatServlet and WelcomeFilter are able to access protected resou…
Several security issues were fixed in libxml2.
The package python-django before version 3.2.4-1 is vulnerable to multiple issues including insufficient validation and directory traversal.
The package radare2 before version 5.3.1-1 is vulnerable to denial of service.
The package thefuck before version 3.31-1 is vulnerable to arbitrary file overwrite.
The package aspnet-runtime-3.1 before version 3.1.16.sdk116-1 is vulnerable to denial of service.
The package aspnet-runtime before version 5.0.7.sdk204-1 is vulnerable to denial of service.
Several security issues were fixed in Nettle.
xen/arm: Boot modules are not scrubbed [XSA-372, CVE-2021-28693] inappropriate x86 IOMMU timeout detection / handling [XSA-373, CVE-2021-28692] Speculative Cod…
Update to upstream 2.1-33. 20210608 * Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010; * Addition of 06-6a-05/0x87 (ICX-SP C0) microcode …
An update that solves 5 vulnerabilities and has three fixes is now available.
An update that fixes one vulnerability is now available.
