Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The package brotli before version 1.0.9-1 is vulnerable to denial of service.
The package lib32-brotli before version 1.0.9-1 is vulnerable to denial of service.
An update that solves one vulnerability and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has two fixes is now available.
Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark- gfm/securi…
Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark- gfm/securi…
Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark- gfm/securi…
Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 https://github.com/github/cmark- gfm/securi…
OpenDMARC could allow signature bypass under certain conditions.
Cyrus IMAP Server could be made to overwrite files as the administrator.
OpenConnect could be made to crash if it received specially crafted input.
Apache Tika could be made to crash if it opened a specially crafted file.
Rebase to latest upstream version.
autobuilt v2.1.0, Security fix for CVE-2020-14370 ---- correct release tag on account of prior faulty build_tag macro ---- Add back in capability SYS_CHROOT. -…
autobuilt v2.1.0, Security fix for CVE-2020-14370 ---- correct release tag on account of prior faulty build_tag macro ---- Add back in capability SYS_CHROOT. -…
autobuilt v2.1.0, Security fix for CVE-2020-14370 ---- correct release tag on account of prior faulty build_tag macro ---- Add back in capability SYS_CHROOT. -…
An update that fixes 7 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
urllib3 could be used to perform a CRLF injection if it received a specially crafted request.
rack-cors would allow unintended access to files over the network.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
