Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves two vulnerabilities and has 15 fixes is now available.
Miguel Onoro reported that qbittorrent, a bittorrent client with a Qt5 GUI user interface, allows command injection via shell metacharacters in the torrent nam…
It was discovered that some user-generated CSS selectors in MediaWiki, a website engine for collaborative work, were not escaped. The oldstable distribution (s…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that solves three vulnerabilities and has two fixes is now available.
An update that fixes one vulnerability is now available.
Several security issues were fixed in Apport.
Felix Wilhelm of Google Project Zero discovered that HAProxy, a TCP/HTTP reverse proxy, did not properly handle HTTP/2 headers. This would allow an attacker to…
libplist is a library for reading and writing the Apple binary and XML property lists format. It's part of the libimobiledevice stack, providing access to iDev…
This update includes a rebase from 9.0.30 up to 9.0.31 which resolves one CVE along with various other bugs/features: * rhbz#1806805 CVE-2020-1938 tomcat: Apac…
This update includes a rebase from 9.0.30 up to 9.0.31 which resolves one CVE along with various other bugs/features: * rhbz#1806805 CVE-2020-1938 tomcat: Apac…
The package pam-krb5 before version 4.9-1 is vulnerable to arbitrary code execution.
The package chromium before version 80.0.3987.162-1 is vulnerable to arbitrary code execution.
An update that solves 6 vulnerabilities and has 6 fixes is now available.
An update that fixes two vulnerabilities is now available.
An update that solves 6 vulnerabilities and has two fixes is now available.
The krb5 PAM module (pam_krb5.so) had a buffer overflow that might have caused remote code execution in situations involving supplemental prompting by a Kerber…
A vulnerability was discovered in python-bleach, a whitelist-based HTML-sanitizing library. Calls to bleach.clean with an allowed tag with an allowed style att…
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that solves 5 vulnerabilities and has 58 fixes is now available.
An update that solves three vulnerabilities and has two fixes is now available.
An update that fixes one vulnerability is now available.
