Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to latest version
Cyku Hong from DEVCORE discovered that php-nette, a PHP MVC framework, is vulnerable to a code injection attack by passing specially formed parameters to URL t…
- fix TLS 1.3 session ticket proxy host mixup (CVE-2021-22890) - prevent automatic referer from leaking credentials (CVE-2021-22876)
In XStream there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed …
update to version 1.1.1k
Fix for CVE-2021-28831.
Update to upstream 20210315 release ---- Update to upstream 20210208 release: * rtl_bt: Updates for RTL8822C, RTL8821C, added RTL8852A * Link Cypress brcmfmac …
Security fix for CVE-2020-11988
Upgrade to version 1.1.1.k Fixes CVEs CVE-2021-3449 CVE-2021-3450
Multiple vulnerabilities were discovered in cURL, an URL transfer library: CVE-2020-8169
Several issues have been found by ClusterFuzz in leptonlib, an image processing library.
Two issues have been found in ldb, an LDAP-like embedded database, for example used with samba.
Fix for CVE-2021-28831.
Upstream version 3.4.5. See http://mail-archives.apache.org/mod_mbox/www- announce/202103.mbox/%3cd028983e-bad3-854b-ec9a-e8b0f922d627@apache.org%3e for detail…
Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious use…
The 5.11.10 stable kernel update contains a "quick revert" of some 5.11.9 commits that caused noisy warnings to show up in the kernel log of some systems. ----…
An out of bounds read in function QRadialFetchSimd from crafted svg file may lead to information disclosure or other potential consequences. This update includ…
An update that fixes two vulnerabilities is now available.
An update that solves two vulnerabilities and has one errata is now available.
Security fix for CVE-2020-11988
An update that solves one vulnerability and has one errata is now available.
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-27918
HVM soft-reset crashes toolstack [XSA-368, CVE-2021-28687] (#1940610)
This is the monthly .NET Core 3.1 update for March 2021. Release notes: https://github.com/dotnet/core/blob/main/release-notes/3.1/3.1.13/3.1.13.md This update…
