Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability and has one errata is now available.
Simon Charette discovered that Django, a high-level Python web development framework, did not properly handle input in its PostgreSQL module. A remote attacker…
Update to latest upstream version
- Update to 1.2.9 - CVE-2020-7106, CVE-2020-7237 Release notes: https://www.cacti.net/release_notes.php?version=1.2.9
- Update to 1.2.9 - CVE-2020-7106, CVE-2020-7237 Release notes: https://www.cacti.net/release_notes.php?version=1.2.9
- Update to 2.16.4 - CVE-2019-18222 Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.4-and-2.7.13-released Security Advisory: https://tl…
- Update to 1.2.9 - CVE-2020-7106, CVE-2020-7237 Release notes: https://www.cacti.net/release_notes.php?version=1.2.9
- Update to 1.2.9 - CVE-2020-7106, CVE-2020-7237 Release notes: https://www.cacti.net/release_notes.php?version=1.2.9
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in information disclosure, denial o…
OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951) (CVE-2020-2601) * OpenJDK: Serialization filter changes via jdk.serialFilter proper…
An update that solves two vulnerabilities and has 5 fixes is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Several security issues were fixed in QEMU.
ClamAV could be made to crash if it opened a specially crafted file.
An update that fixes one vulnerability is now available.
An update that fixes 5 vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
A vulnerability was discovered in libgd2, the GD graphics library, whereby an attacker can employ a specific function call sequence to trigger a NULL pointer d…
Add patch to fix segfault after sleep
Mozilla: Missing bounds check on shared memory read in the parent process (CVE-2020-6796) * Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.…
Several security issues were fixed in PHP.
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-3862
