Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak (CVE-2020-11008) SL7 x86_64 git-1.8.3.1-23.el7_8.x86_64.rpm git-d…
## Python 3.8.3 This is the third maintenance release of Python 3.8. See [the c hangelog](https://docs.python.org/release/3.8.3/whatsnew/changelog.html#changel…
An update that fixes three vulnerabilities is now available.
An update that fixes 6 vulnerabilities is now available.
APT could be made to crash if it opened a specially crafted file.
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine.
Various minor vulnerabilities have been addredd in libexif, a library to parse EXIF metadata files.
An update that fixes 5 vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
json-c could be made to execute arbitrary code if it received a specially crafted JSON file.
Several security issues were fixed in OpenSSL.
Fix cvws CVE-2020-10726,CVE-2020-10724,CVE-2020-10723,CVE-2020-10722,CVE-2020-10725
- fixes CVE-2020-12667
Security fix for CVE-2020-12662 and CVE-2020-12663
- CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a par…
An update that solves one vulnerability and has one errata is now available.
PHP could be made to crash if it received a specially crafted file.
An update that fixes three vulnerabilities is now available.
Several security issues were fixed in Unbound.
Backported patch for CVE-2018-10756.
Latest upstream release fixing security issues.
Two vulnerabiliites have been discovered in Unbound, a recursive-only caching DNS server; a traffic amplification attack against third party authoritative name…
An update that fixes two vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
