Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 5 vulnerabilities is now available.
It was discovered that the jQuery version embedded in OTRS, a ticket request system, was prone to a cross site scripting vulnerability in jQuery.extend().
libapache2-mod-auth-mellon could be made to redirect users to malicious sites.
libpam-radius-auth could be made to crash if it received specially crafted network traffic.
An update that fixes 6 vulnerabilities is now available.
Fix for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c
Fix for CVE-2020-7105 hiredis: NULL pointer dereference in async.c and dict.c
Resolves: #1795838, #1802904 - Security fix for CVE-2020-8945
Resolves: #1795838, #1802904 - Security fix for CVE-2020-8945
* Always use a light theme for rendering form controls. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-3862, CVE-2020-3864, CVE-2020-38…
Add patch for CVE-2020-6750 and related issues.
Update to 10.19.0
Update to Node.js 12.5.0
A vulnerability was found in pam_radius: the password length check was done incorrectly in the add_password() function in pam_radius_auth.c, resulting in a sta…
Ilja Van Sprundel reported a logic flaw in the Extensible Authentication Protocol (EAP) packet parser in the Point-to-Point Protocol Daemon (pppd). An unauthen…
- New upstream release (73.0.1)
This update backports a patch for CVE-2020-8112.
This update backports a patch for CVE-2020-8112.
Backport patches for CVE-2020-5313, CVE-2020-5312, CVE-2020-5311, CVE-2020-5310, CVE-2019-19911
An update that solves 8 vulnerabilities and has two fixes is now available.
It was discovered that there was a a use-after-free vulnerability in in the proftpd-dfsg FTP server. Exploitation of this vulnerability within the memory pool …
Multiple security issues were discovered in Pillow, a Python imaging library, which could result in denial of service and potentially the execution of arbitrar…
It was discovered that pysaml2, a Python implementation of SAML to be used in a WSGI environment, was susceptible to XML signature wrapping attacks, which coul…
An update that solves one vulnerability and has 10 fixes is now available.
