Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself (CVE-2021-25215) For more …
# New in release OpenJDK 8u292 (2021-04-20): Live versions of these release notes can be found at: * https://bitly.com/openjdk8u292 * https://builds.shipilev.n…
Update to Samba 4.14.4 - security fixes for CVE-2021-20254 ---- Fix wrong conditional build check of AD DC
Update to Jetty 9.4.40 (fixes multiple CVEs)
The package bind before version 9.16.15-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
The package virtualbox before version 6.1.20-1 is vulnerable to multiple issues including arbitrary code execution, arbitrary filesystem access and information…
Update to Jetty 9.4.40 (fixes multiple CVEs)
ceph 14.2.20 GA Security fix for CVE-2021-20288 bugs=1938031,1952085
Security update - OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured w…
Update to Jetty 9.4.40 (fixes multiple CVEs)
ceph 15.2.11 GA Security fix for CVE-2021-20288 bugs=1938031,1952085
Update to feature release 3003-1 for Python 3, Security fix for CVE-2021-31607
Several vulnerabilities have been discovered in the chromium web browser. CVE-2021-21201
openldap: NULL pointer dereference for unauthenticated packet in slapd (CVE-2020-25692) For more details about the security issue(s), including the impact, a C…
nss: TLS 1.3 CCS flood remote DoS Attack (CVE-2020-25648) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, an…
ceph 16.2.1 GA Security fix for CVE-2021-20288 bugs=1938031,1952085
It was discovered that the Shibboleth Service Provider is prone to a NULL pointer dereference flaw in the cookie-based session recovery feature. A remote, unau…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of ar…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of ar…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of ar…
Multiple vulnerabilities were discovered in plugins for the GStreamer media framework, which may result in denial of service or potentially the execution of ar…
A use-after-free vulnerability was found in the Matroska plugin of the the GStreamer media framework, which may result in denial of service or potentially the …
An update that fixes one vulnerability is now available.
