Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Backport fixes for CVE-2021-32617, CVE-2021-29623.
Apply fix for CVE-2021-3500. ---- Apply fix for CVE-2021-32490, CVE-2021-32491, CVE-2021-32492, CVE-2021-32493
Apply fix for CVE-2021-3500. ---- Apply fix for CVE-2021-32490, CVE-2021-32491, CVE-2021-32492, CVE-2021-32493
Upgrade to upstream security release 3.7.4
Backport fixes for CVE-2021-32617, CVE-2021-29623.
Upgrade to upstream security release 3.7.4
An update that fixes 15 vulnerabilities is now available.
An update that fixes 15 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
It was discovered that lasso, a library which implements SAML 2.0 and Liberty Alliance standards, did not properly verify that all assertions in a SAML respons…
Several security issues were fixed in Squid.
An update that fixes one vulnerability is now available.
This update upgrades Firefox to version 78.11.0 ESR. * Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 (CVE-2021-29967) For more details …
It was found that the fix for CVE-2020-25712 in the Xorg X server, addressed in DLA-2486-1, caused a regression in caribou, making it crash whenever special (s…
Jon Franklin and Pawel Wieczorkiewicz found an issue in the ISC DHCP client and server when parsing lease information, which could lead to denial of service vi…
This advisory resolves CVE issues filed against XP1 releases that have been fixed in the underlying EAP 7.3.x base. There are no changes to the EAP XP1 code ba…
Dnsmasq could be exposed to cache poisoning.
Several security issues were fixed in Django.
Applications using Lasso could be made to allow unintended access.
Fix for CVE-2021-25217
LZ4 could be made to crash or run programs if it opened a specially crafted file.
The Dynamic Code Evolution Virtual Machine (DCE VM), an alternative VM for OpenJDK 11 with enhanced class redefinition, has been updated for compatibility with…
Upgrade to 1.4.1 bugfix release.
An issue has been found in libxml2, the GNOME XML library. This issue is called "Parameter Laughs"-attack and is related to parameter entities expansion.
