Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060) * python-urllib3: CRLF injection due to…
Several security issues were fixed in dino-im.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
It was discovered that there were a number of HTTP request splitting vulnerabilities in Twisted, an Python event-based framework for building various types of …
An update that solves 5 vulnerabilities and has one errata is now available.
ICU could be made to execute arbitrary code if it received a specially crafted string.
Ceph could be made to stop responding if it received specially crafted network traffic.
The system could be made to expose sensitive information.
The system could be made to expose sensitive information.
**Horde_Form 2.0.20** * [mjr] SECURITY: Prevent ability to specify temporary filename (CVE-2020-8866, Reported By: Andrea Cardaci working with Trend Micro Zero…
An update that solves one vulnerability and has two fixes is now available.
The package thunderbird before version 68.6.0-1 is vulnerable to multiple issues including arbitrary code execution, arbitrary command execution and informatio…
The package okular before version 19.12.3-3 is vulnerable to arbitrary command execution.
The package webkit2gtk before version 2.28.0-1 is vulnerable to arbitrary code execution.
This update upgrades Firefox to version 68.6.0 ESR. * Mozilla: Use-after-free when removing data about origins (CVE-2020-6805) * Mozilla: BodyStream::OnInputSt…
This update fixes several vulnerabilities in Graphicsmagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in…
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
sudo: Stack based buffer overflow when pwfeedback is enabled (CVE-2019-18634) SL6 x86_64 sudo-1.8.6p3-29.el6_10.3.x86_64.rpm sudo-debuginfo-1.8.6p3-29.el6_10.3…
An update that solves three vulnerabilities and has one errata is now available.
An update that fixes one vulnerability is now available.
An update that solves 11 vulnerabilities and has 57 fixes is now available.
