Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
CVE-2021-3480: invalid BIND DN crash
Patch for CVE-2020-24119.
CVE-2021-3480: invalid BIND DN crash
An update that fixes one vulnerability is now available.
nginx could be made to crash or run programs if it received specially crafted network traffic.
The package thunderbird before version 78.10.2-1 is vulnerable to multiple issues including content spoofing and information disclosure.
The package hivex before version 1.3.20-1 is vulnerable to denial of service.
The package lz4 before version 1:1.9.3-2 is vulnerable to denial of service.
The package gupnp before version 1.2.6-1 is vulnerable to information disclosure.
The package prometheus before version 2.27.1-1 is vulnerable to open redirect.
The container caasp/v4.5/k8s-sidecar was updated. The following patches have been included in this update:
The container ingress-nginx-controller was updated. The following patches have been included in this update:
The container caasp/v4.5/helm-tiller was updated. The following patches have been included in this update:
**Version 2.0.13** 2021-04-27 * Security: Fixed command injection vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and downloaders (GHSA-h…
** Wordpress 5.7.2**
3.11 ---- Latest releases.
**Version 2.0.13** 2021-04-27 * Security: Fixed command injection vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and downloaders (GHSA-h…
** Wordpress 5.7.2**
libx11 could allow unintended access to services.
Several security issues were fixed in Exiv2.
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
Mitigation for CVE-2021-21419 See: https://github.com/eventlet/eventlet/security/advisories/GHSA-9p9m-jm8w-94p2 for more details.
An update that fixes one vulnerability is now available.
An update for openshift-serverless-1-kn-cli-artifacts-rhel8-container, openshift-serverless-1-knative-rhel8-operator-container, and openshift-serverless-1-serv…
