Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The 5.12.10 stable kernel update contains a number of important fixes across the tree.
postgresql: Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027) For more details about the security issue(s), including th…
dhcp: stack-based buffer overflow when parsing statements with colon- separated hex digits in config or lease files in dhcpd and dhclient (CVE-2021-25217) For …
hw: vt-d related privilege escalation (CVE-2020-24489) * hw: improper isolation of shared resources in some Intel Processors (CVE-2020-24511) * hw: observable …
Several vulnerabilities were discovered in Squid, a proxy caching server. CVE-2021-28651
Update to 2.9.12 * Fix CVE-2021-3516, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541 * Verify sources with GPG signature
This glibc update fixes a use-after-free in the `mq_notify` function (CVE-2021-33574).
Add proposed patches for CVE-2021-29338 and a heap buffer overflow.
Add proposed patches for CVE-2021-29338 and a heap buffer overflow.
Add proposed patches for CVE-2021-29338 and a heap buffer overflow.
Add proposed patches for CVE-2021-29338 and a heap buffer overflow.
The package wireshark-cli before version 3.4.6-1 is vulnerable to denial of service.
The package kube-apiserver before version 1.21.1-1 is vulnerable to insufficient validation.
The package nettle before version 3.7.3-1 is vulnerable to denial of service.
The package isync before version 1.4.2-1 is vulnerable to arbitrary code execution.
The package python-websockets before version 9.1-1 is vulnerable to private key recovery.
The package python-urllib3 before version 1.26.5-1 is vulnerable to denial of service.
The container sles-15-sp2-chost-byos-v20210610 was updated. The following patches have been included in this update:
- Update to Firefox 89.0
CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses
1965325 - CVE-2021-20718 mod_auth_openidc: DoS in oidc_util_read_post_params() in util.c
**Redis 6.0.14** - Released Tue June 1 12:00:00 IST 2021 Upgrade urgency: SECURITY, Contains fixes to security issues that affect authenticated client connecti…
Fix log permissions issue ---- Security: 1-byte memory overwrite might occur during DNS server response processing if the "resolver" directive was used, allowi…
- version update - security update
