Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two issues have been found in bind9, an Internet Domain Name Server. CVE-2020-8622
An issue has been found in ndpi, an extensible deep packet inspection library. The Oracle protocol dissector contains an heap-based buffer over-read, which cou…
An issue has been found in bacula, a network backup service. By sending oversized digest strings a malicious client can cause a heap overflow in the director's…
The File Manager (gollem) module in Horde Groupware has allowed remote attackers to bypass Horde authentication for file downloads via a crafted fn parameter t…
In Horde Groupware, there has been an XSS via the Name field during creation of a new Resource. This could have been leveraged for remote code execution after …
An update that solves one vulnerability and has one errata is now available.
An update that solves three vulnerabilities and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
Faidon Liambotis discovered that Lilypond, a program for typesetting sheet music, did not restrict the inclusion of Postscript and SVG commands when operating …
Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when …
Multiple security issues have been found in Thunderbird which could result in the execution of arbitrary code or the unintended installation of extensions.
A heap-based buffer overflow flaw was discovered in MuPDF, a lightweight PDF viewer, which may result in denial of service or the execution of arbitrary code i…
An update that fixes three vulnerabilities is now available.
Several minor vulnerabilities have been discovered in libvncserver, a server and client implementation of the VNC protocol. CVE-2019-20839
An update that solves one vulnerability and has 35 fixes is now available.
An update that fixes one vulnerability is now available.
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [i…
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [i…
An update that solves one vulnerability and has two fixes is now available.
An update that fixes two vulnerabilities is now available.
An update that contains security fixes can now be installed.
An update that fixes one vulnerability is now available.
An update that contains security fixes can now be installed.
An update that solves one vulnerability and has two fixes is now available.
