Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves two vulnerabilities and has one errata is now available.
The package chromium before version 80.0.3987.87-1 is vulnerable to multiple issues including arbitrary code execution, access restriction bypass, information …
- Use Apple upstream instead of non-fresh Github one - New upstream in 1.8 dev branch with 417.1 subversion - Close CVE-2018-17093 - Close CVE-2018-17094 - Clo…
3.96, multiple security fixes. ---- Patch for CVE-2019-20021
MariaDB clients could be made to crash if they received specially crafted input.
Guillaume Teissier reported that the XMLRPC client in libxmlrpc3-java, an XML-RPC implementation in Java, does perform deserialization of the server-side excep…
An out-of-bounds write vulnerability due to an integer overflow was reported in libexif, a library to parse EXIF files, which could result in denial of service…
An update that fixes one vulnerability is now available.
An update that solves four vulnerabilities and has one errata is now available.
An update that fixes 5 vulnerabilities is now available.
An update that solves one vulnerability and has 13 fixes is now available.
An update that fixes four vulnerabilities is now available.
ReportLab could be made to run programs as your login if it opened a specially crafted file.
This package allowed ../ directory traversal to access private resources because resource matching did not ensure that pathnames were in a canonical format.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
Several security issues were fixed in Pillow.
The package sudo before version 1.8.31-1 is vulnerable to privilege escalation.
The package python-django before version 3.0.3-1 is vulnerable to sql injection.
An update that fixes 13 vulnerabilities is now available.
An update that solves two vulnerabilities and has 12 fixes is now available.
An update that solves one vulnerability and has 9 fixes is now available.
