Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Tom Lane discovered that "ALTER ... DEPENDS ON EXTENSION" sub commands in the PostgreSQL database did not perform authorisation checks. For the oldstable distr…
The package webkit2gtk before version 2.26.3-1 is vulnerable to arbitrary code execution.
The package dovecot before version 2.3.9.3-1 is vulnerable to denial of service.
The package ksh before version 2020.0.0-2 is vulnerable to arbitrary command execution.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in denial of service, incorrect implementation of Kerberos GSSAPI and TGS r…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
An update that solves two vulnerabilities and has one errata is now available.
An update that solves two vulnerabilities and has one errata is now available.
An denial of service via an algorithmic complexity attack on email address parsing have been identified in libemail-address-list-perl.
An update that fixes 38 vulnerabilities is now available.
An update that solves two vulnerabilities and has 12 fixes is now available.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes two vulnerabilities is now available.
Several security issues were fixed in libexif.
Yubico PIV Tool could be made to crash or run programs as an administrator if it received specially crafted input.
spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows (CVE-2018-10893) SL6 x86_64 spice-glib-0.26-8.el6_10.2.i686.rpm …
Security fix for CVE-2019-14494.
Security researchers from Snyk discovered that the fix for CVE-2019-9658 was incomplete. Checkstyle, a development tool to help programmers write Java code tha…
an out-of-bounds write vulnerability due to an integer overflow was reported in libexif, a library to parse exif files. This flaw might be leveraged by remote …
Several security issues were fixed in libxml2.
Several security issues were fixed in Qt.
Add patch for CVE-2020-6750 and related issues.
Christopher Ertl found that multiple functions in ipmitool neglect proper checking of the data received from a remote LAN party, which may lead to buffer overf…
