Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Exiv2 could be made to crash if it opened a specially crafted image.
Several security issues were fixed in mbedtls.
An update that solves two vulnerabilities and has one errata is now available.
Several security issues were fixed in systemd.
An update that fixes one vulnerability is now available.
OpenSMTPD could be made to run programs as root if it received specially crafted input over the network.
ipa: Denial of service in IPA server due to wrong use of ber_scanf() (CVE-2019-14867) * ipa: Batch API logging user passwords to /var/log/httpd/error_log (CVE-…
hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135) * QEMU: slirp: heap buffer overflow during packet reassembly (CVE-2019-14378) SL7 x86_64 qemu-img…
Sudo could allow unintended access to the administrator account.
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Several security issues were fixed in SpamAssassin.
An update that fixes three vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
Several security issues were fixed in SpamAssassin.
An update that fixes 5 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Django could be vulnerable to SQL injection attacks.
container-tools:rhel8 security, bug fix, and enhancement update
The package salt before version 2019.2.3-1 is vulnerable to arbitrary command execution.
