Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to 80.0.3987.132. Lots of security fixes here. VAAPI re-enabled by default except on NVIDIA. List of CVEs fixed (since last update): * CVE-2019-20446 * …
Update to WebKitGTK 2.28.0. * Add API to enable Process Swap on (Cross-site) Navigation. * Add user messages API for the communication with the web extension.…
Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code. For the oldstable distribution (stre…
Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputStreamReady was missing protections against state confus…
Several security issues were fixed in Twisted.
An update that fixes one vulnerability is now available.
An update that fixes 7 vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes 7 vulnerabilities is now available.
tif_getimage.c in LibTIFF, as used in GDAL has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a …
Update to NetHack 3.6.6
Update to NetHack 3.6.6
Update to NetHack 3.6.6
An update that solves two vulnerabilities and has 7 fixes is now available.
An update that fixes one vulnerability is now available.
ICU: Integer overflow in UnicodeString::doAppend() (CVE-2020-10531) SL6 x86_64 icu-debuginfo-4.2.1-15.el6_10.i686.rpm icu-debuginfo-4.2.1-15.el6_10.x86_64.rpm …
python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c (CVE-2020-5312) SL6 x86_64 python-imaging-1.1.6-20.el6_10.x86_64.rpm…
Have you heard about IPFire's new method of cryptographic kernel rootkit protection?ÂIPFire is an open-source software that protects the network from external …
An update that solves one vulnerability and has one errata is now available.
USN-4171-1 introduced a regression in Apport.
Security and performance fixes.
In libvncserver, through libvncclient/cursor.c, there is a possibility of a heap overflow, as reported by Pavel Cheremushkin.
python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060) * python-urllib3: CRLF injection due to…
tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability (CVE-2020-1938) SL7 noarch tomcat-servlet-3.0-api-7.0.76-11.el7_7.noarch.rpm tomcat-7.0.76-11.el7_7…
