Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that contains security fixes can now be installed.
An update that contains security fixes can now be installed.
An update that solves 12 vulnerabilities and has 139 fixes is now available.
The package lib32-openssl before version 1.1.1.g-1 is vulnerable to denial of service.
An update that contains security fixes can now be installed.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that solves 9 vulnerabilities and has 14 fixes is now available.
re2c could be made to execute arbitrary code if it received a specially crafted file.
Several security issues were fixed in OpenJDK.
The package openssl before version 1.1.1.g-1 is vulnerable to denial of service.
Several security issues were fixed in Thunderbird.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
The package webkit2gtk before version 2.28.1-1 is vulnerable to arbitrary code execution.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
Bernd Edlinger discovered that malformed data passed to the SSL_check_chain() function during or after a TLS 1.3 handshake could cause a NULL dereference, resu…
Several security issues were fixed in Python.
OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) (CVE-2020-2803) * OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 82…
Carlo Arenas discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline or empty host, or lack…
An update that fixes one vulnerability is now available.
The package openvpn before version 2.4.9-1 is vulnerable to denial of service.
It was discovered that there was a path-traversal issue in Apache Shiro, a security framework for the Java programming language. A specially-crafted request co…
