Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Multiple vulnerabilities were discovered in libwebp, the implementation of the WebP image format, which could result in denial of service, memory disclosure or…
USN-4986-1 caused a regression in rpcbind.
libwebp could be made to crash or run programs as your login if it opened a specially crafted file.
A vulnerability was discovered in lasso, a library for Liberty Alliance and SAML protocols, which results to a improper verification of a cryptographic signatu…
Update to upstream 2.1-33. 20210608 * Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010; * Addition of 06-6a-05/0x87 (ICX-SP C0) microcode …
- Updated to Firefox 89.0
Fix security issues.
An update that fixes one vulnerability is now available.
Multiple security issues were discovered in the Rails web framework which could result in denial of service. For the stable distribution (buster), these proble…
A buffer overflow was discovered in HTMLDOC, a HTML processor that generates indexed HTML, PS, and PDF, which could potentially result in the execution of arbi…
libwebp: heap-based buffer overflow in PutLE16() (CVE-2018-25011) * libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014) * libwebp: heap-based …
samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token (CVE-2021-20254) For more details about the securi…
hivex: Buffer overflow when provided invalid node key length (CVE-2021-3504) For more details about the security issue(s), including the impact, a CVSS score, …
QEMU: ide: atapi: OOB access while processing read commands (CVE-2020-29443) For more details about the security issue(s), including the impact, a CVSS score, …
389-ds-base: information disclosure during the binding of a DN (CVE-2020-35518) For more details about the security issue(s), including the impact, a CVSS scor…
libwebp: heap-based buffer overflow in PutLE16() (CVE-2018-25011) * libwebp: heap-based buffer overflow in WebPDecode*Into functions (CVE-2020-36328) * libwebp…
rxvt, VT102 terminal emulator for the X Window System, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ES…
mrxvt, lightweight multi-tabbed X terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC …
eterm, an enlightened terminal emulator, allowed (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q).
An update that fixes three vulnerabilities is now available.
Several security issues were fixed in Intel Microcode.
An update that fixes one vulnerability is now available.
rpcbind could be made to consume resources and crash if it received specially crafted network traffic.
An update that solves one vulnerability and has one errata is now available.
