Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves two vulnerabilities and has 6 fixes is now available.
An update that solves four vulnerabilities and has one errata is now available.
Various vulnerabilities have been addressed in libexif, a library to parse EXIF metadata files.
Update to OpenJDK 8u252 (April Critical Patch Update) - JDK-8223898, CVE-2020-2754: Forward references to Nashorn - JDK-8223904, CVE-2020-2755: Improve Nashorn…
Update to latest upstream 8.8.8
An update that fixes two vulnerabilities is now available.
An update that solves two vulnerabilities and has one errata is now available.
8u252 update
Update to latest upstream 8.8.8
Are you ready, kids? I said, are you ready? Whoooooo has another update for you to see? Google Chromium! For browsing and tweeting (but not FTP) Google Chromiu…
Update to 4.9.0
Update to latest upstream 8.8.8
Are you ready, kids? I said, are you ready? Whoooooo has another update for you to see? Google Chromium! For browsing and tweeting (but not FTP) Google Chromiu…
It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authenticati…
OpenConnect, a VPN software, had a buffer overflow, causing a denial of service (application crash) or possibly unspecified other impact, via crafted certifica…
Version update + security fix
Version update + security fix
Update to OpenEXR-2.4.1, see https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 for details.
Update to OpenEXR-2.4.1, see https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 for details.
Version update + security fix
It was discovered that the SocketServer class included in apache-log4j1.2, a logging library for java, is vulnerable to deserialization of untrusted data. An a…
An update that solves one vulnerability and has 6 fixes is now available.
An update that solves one vulnerability and has one errata is now available.
USN-4360-1 introduced a regression in json-c.
