Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A potential Cross-Site Scripting (XSS) vulnerability was found in rails, a ruby based MVC framework. Views that allow the user to control the default (not foun…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Backport fix for CVE-2020-26159
Backport fix for CVE-2020-26159
autobuilt v2.1.0,Security fix for CVE-2020-14370
autobuilt v2.1.0,Security fix for CVE-2020-14370
An update that solves 9 vulnerabilities and has 105 fixes is now available.
CVE-2019-11840 An issue was discovered in supplementary Go cryptography libraries, aka golang-googlecode-go-crypto. If more than 256 GiB of keystream is
Apache ActiveMQ, a Java message broker, uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is p…
**PHP version 7.3.23** (01 Oct 2020) **Core:** * Fixed bug php#80048 (Bug php#69100 has not been fixed for Windows). (cmb) * Fixed bug php#80049 (Memleak when …
x86 pv: Crash when handling guest access to MSR_MISC_ENABLE [XSA-333, CVE-2020-25602] (#1881619) Missing unlock in XENMEM_acquire_resource error path [XSA-334,…
**PHP version 7.4.11** (01 Oct 2020) **Core:** * Fixed bug php#79699 (PHP parses encoded cookie names so malicious `__Host-` cookies can be sent). (**CVE-2020-…
An update that solves four vulnerabilities and has two fixes is now available.
An update that fixes 9 vulnerabilities, contains 10 features is now available.
Several security vulnerabilities have been discovered in puma, highly concurrent HTTP server for Ruby/Rack applications. CVE-2020-11076
An update that fixes one vulnerability is now available.
Spice could be made to crash or run programs if it received specially crafted network traffic.
Several security issues were fixed in Vino.
The package samba before version 4.13.0-1 is vulnerable to access restriction bypass.
The package zeromq before version 4.3.3-1 is vulnerable to denial of service.
The package lib32-zeromq before version 4.3.3-1 is vulnerable to denial of service.
The package yaws before version 2.0.8-1 is vulnerable to multiple issues including arbitrary command execution and information disclosure.
