Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string. Therefore, there was a need to explicitly specify the numb…
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
An update that solves one vulnerability and has one errata is now available.
An update that contains security fixes can now be installed.
An update that solves three vulnerabilities and has one errata is now available.
An update that solves three vulnerabilities and has one errata is now available.
x86 pv: Crash when handling guest access to MSR_MISC_ENABLE [XSA-333, CVE-2020-25602] (#1881619) Missing unlock in XENMEM_acquire_resource error path [XSA-334,…
Update to 85.0.4183.121. Why? Because security, that's why. It fixes these CVEs: CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE…
* Update to edk2 stable 202008
Update built with the new CMake settings Number of files which should have been owned by the testsuite subpackage are now owned by it Started building MeCab pl…
kramdown could be made to crash, run programs, or leak sensitive information if it opened a specially crafted file.
Rack could be made to expose sensitive information over the network.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
Gon gem could be made to run programs if it received specially crafted network traffic.
An update that solves four vulnerabilities and has two fixes is now available.
Several security improvements were added to Samba.
Several security issues were fixed in Tomcat.
An update that solves one vulnerability and has one errata is now available.
https://lists.wikimedia.org/pipermail/mediawiki- announce/2020-September/000260.html https://lists.wikimedia.org/pipermail/mediawiki- announce/2020-September/0…
An update that fixes one vulnerability is now available.
Various vulnerabilities were fixed in nss, the Network Security Service libraries. CVE-2018-12404
The package podman before version 2.1.0-1 is vulnerable to information disclosure.
The package firefox before version 81.0-1 is vulnerable to multiple issues including arbitrary code execution, content spoofing, cross-site scripting and denia…
