Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
USN-4360-1 introduced a regression in json-c.
An update that fixes one vulnerability is now available.
Fix for CVE-2020-5283. ViewVC 1.1.28 ChangeLog - security fix: escape subdir lastmod file name (#211) - fix standalone.py first request failure (#195) ViewVC 1…
The 5.6.12 stable update contains a number of important fixes across the tree.
New version v2.1.32 Security fix for CVE-2020-12137 Change mode of /etc/mailman to 2755 (#1656765)
When normalizing ar member names by removing trailing whitespace and slashes, an out-out-bound read can be caused if the ar member name consists only of such c…
json-c could be made to execute arbitrary code if it received a specially crafted JSON file.
An update that solves two vulnerabilities and has four fixes is now available.
An update that fixes one vulnerability is now available.
An update that solves 35 vulnerabilities and has 21 fixes is now available.
NOTE: This DLA was intially sent on 2020-04-14 but for reasons unknown failed to reach the mailing list. It is being re-sent now to ensure that it appears in t…
An update that fixes one vulnerability is now available.
APT could be made to crash if it opened a specially crafted file.
Shuaibing Lu discovered that missing input validation in the ar/tar implementations of APT, the high level package manager, could result in denial of service w…
Last Upstream release, including (among others): - (security) Prevent execution of SQL injection while assigning a technician, - (security) Permit to change ke…
rebase to upstream Grafana 6.7.3 - including fix for CVE-2020-12458 and CVE-2020-12459
OpenJDK 14 April CPU update
An update that fixes 6 vulnerabilities is now available.
Stephan Zeisberg discovered that the libreswan IPsec implementation could be forced into a crash/restart via a malformed IKEv1 Informational Exchange packet, r…
Several security issues were fixed in libexif.
An update that fixes three vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
Kernel: NetLabel: null pointer dereference while receiving CIPSO packet with null category may cause kernel panic (CVE-2020-10711) SL6 x86_64 kernel-2.6.32-754…
USN-3911-1 introduced a regression in file.
