Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to Samba 4.11.11
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that fixes 13 vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in code execution or denial of service. For the stable distrib…
Several vulnerabilities were discovered in NSS, a set of cryptographic libraries, which may result in side channel/timing attacks or denial of service.
Update to 3.9.0b4
0.9.24 release
Update to 3.9.0b4
An update that fixes three vulnerabilities is now available.
Mozilla: Information disclosure due to manipulated URL object (CVE-2020-12418) * Mozilla: Use-after-free in nsGlobalWindowInner (CVE-2020-12419) * Mozilla: Use…
Damian Poddebniak and Fabian Ising discovered a response injection vulnerability in Evolution data server, which could enable MITM attacks.
Update to v2.45.2 to fix CVE-2020-11933 and CVE-2020-11934
The 5.7.8 stable kernel update contains a number of important fixes across the tree.
Update to v2.45.2 to fix CVE-2020-11933 and CVE-2020-11934
incorrect error handling in event channel port allocation leads to DoS [XSA-317, CVE-2020-15566] (#1854465) inverted code paths in x86 dirty VRAM tracking lead…
Damian Poddebniak and Fabian Ising discovered a response injection vulnerability in Evolution data server, which could enable MITM attacks.
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-9802
An update that solves 5 vulnerabilities and has one errata is now available.
An update that fixes 5 vulnerabilities is now available.
An intended access restriction in snapd could be bypassed by strict mode snaps.
Several security issues were fixed in libvpx.
kernel: powerpc: incomplete Spectre-RSB mitigation leads to information exposure (CVE-2019-18660) SL6 x86_64 kernel-2.6.32-754.31.1.el6.x86_64.rpm kernel-debug…
