Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes four vulnerabilities is now available.
- update to latest development version 1.9.0b1 - added sudo_logsrvd and sudo_sendlog to files and their appropriate man pages Resolves: rhbz#1787823 - Stack ba…
The package opensc before version 0.20.0-1 is vulnerable to denial of service.
The package chromium before version 80.0.3987.132-1 is vulnerable to access restriction bypass.
The package opensmtpd before version 6.6.4p1-1 is vulnerable to arbitrary command execution.
The package weechat before version 2.7.1-1 is vulnerable to multiple issues including arbitrary code execution and denial of service.
An update that fixes three vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs (CVE-2018-1311) SL6 x86_64 xerces-c-3.0.1-21.el6_10.i686.rp…
An update that fixes two vulnerabilities is now available.
It was discovered that there was an out-of-bounds write vulnerability in pdfresurrect, a tool for extracting or scrubbing versioning data from PDF documents.
xerces-c: XML parser contains a use-after-free error triggered during the scanning of external DTDs (CVE-2018-1311) SL7 x86_64 xerces-c-3.1.1-10.el7_7.i686.rpm…
nodejs: HTTP request smuggling using malformed Transfer-Encoding header (CVE-2019-15605) SL7 x86_64 http-parser-2.7.1-8.el7_7.2.i686.rpm http-parser-2.7.1-8.el…
An update that fixes one vulnerability is now available.
An update that solves two vulnerabilities and has three fixes is now available.
An update that fixes three vulnerabilities is now available.
Release 6.6.4p1 (2020-02-24) --- - An out of bounds read in smtpd allows an attacker to inject arbitrary commands into the envelope file which are then execute…
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2019-17569
An update that solves 22 vulnerabilities and has 152 fixes is now available.
An update that solves two vulnerabilities and has one errata is now available.
An update that fixes one vulnerability is now available.
Django could allow unintended access to the database.
It was discovered that there was an issue where incorrect default permissions on a HTTP cookie store could have allowed local attackers to read private credent…
An update that fixes three vulnerabilities is now available.
