Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability and has one errata is now available.
An update that fixes 7 vulnerabilities is now available.
An update that solves one vulnerability and has two fixes is now available.
An update that fixes 13 vulnerabilities is now available.
Rebase to version 3.32.1
Update to version 1.10.8. Resolves: CVE-2020-1945
The 5.6.15 stable kernel update contains a number of important fixes across the tree. ---- The 5.6.14 stable kernel update contains a number of important fixes…
Update to sympa 6.2.56. Fixes CVE-2020-10936. For details, see: - https://github.com/sympa-community/sympa/releases/tag/6.2.56 - https://sympa- community.githu…
Update to version 1.10.8. Resolves: CVE-2020-1945
The package freerdp before version 2:2.1.1-1 is vulnerable to information disclosure.
The package ant before version 1.10.8-1 is vulnerable to arbitrary command execution.
The package unbound before version 1.10.1-1 is vulnerable to denial of service.
The package bind before version 9.16.3-1 is vulnerable to denial of service.
In httplib2, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests…
Apache Ant could leak sensitive information or be made to run programs as your login.
Several security issues were fixed in FreeRDP.
An expired certificate was removed from ca-certificates.
python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060) * python-urllib3: CRLF injection due to…
python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060) * python-urllib3: CRLF injection due to…
Flask could be made to consume a large amount of memory if it received a specially crafted input.
An expired certificate was removed from ca-certificates.
bind: BIND does not sufficiently limit the number of fetches performed when processing referrals (CVE-2020-8616) * bind: A logic error in code which checks TSI…
freerdp: Out-of-bounds write in planar.c (CVE-2020-11521) * freerdp: Integer overflow in region.c (CVE-2020-11523) * freerdp: Out-of-bounds write in interleave…
- Update to 1.22.14 release - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rhbz#1841395, CVE-2020-10754)
