Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This update updates .NET Core 3.1 to SDK 3.1.108 and Runtime 3.1.8. This update includes a fix for CVE-2020-1045 Release Notes: https://github.com/dotnet/core/…
The 5.8.9 stable kernel update contains a number of important fixes across the tree.
websocket-extensions could be made to exhaust the server's capacity to process incoming requests if it received specially crafted requests.
LuaJIT could be made crash or expose sensitive information if it received specially crafted input.
bsdiff could be made to crash or run programs as your login if it opened a specially crafted file.
Loofah could be made to perform XSS attacks if a crafted SVG element is republished
MilkyTracker could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in OpenJPEG.
Apache XML-RPC could be made to execute arbitrary code if it received specially crafted data by a malicious XML-RPC server.
Update to version 0.9.5 * https://www.libssh.org/2020/09/10/libssh-0-9-5/ * Fixes CVE-2020-16135
QEMU: usb: out-of-bounds r/w access issue [XSA-335, CVE-2020-14364] (#1871850)
Apache Log4j could be made to remotely execute arbitrary code if it received specially crafted log data.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that fixes two vulnerabilities is now available.
gupnp could be made to expose sensitive information or perform network attacks if it received specially crafted network traffic.
An update that solves 5 vulnerabilities and has 124 fixes is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that solves one vulnerability and has 8 fixes is now available.
It was discovered that insufficient sanitising of received network packets in the game server of Teeworlds, an online multi-player platform 2D shooter, could r…
