Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves one vulnerability and has two fixes is now available.
The package chromium before version 79.0.3945.130-1 is vulnerable to multiple issues including arbitrary code execution and insufficient validation.
Security and bug fixes.
Security fix for [CVE-2018-17942] - Update on 2020-01-07 - CVE-2018-17942
fix CVE-2019-19844 (rhbz#1788426)
Security fix for CVE-2019-17632
**Version 4.9.4** (2020-01-07) - issue #15724 Fix 2FA was disabled by a bug - issue [security] Fix SQL injection vulnerability on the user accounts page (PM…
Security fix for [CVE-2018-17942] - Update on 2020-01-07 - CVE-2018-17942
Several security issues were fixed in Thunderbird.
An update that solves 5 vulnerabilities and has one errata is now available.
kamailio could be made to crash if it opened a specially crafted file.
Update to latest upstream version
Per Upstream, a malicious CA could result in unexpected inventory access with the System CA patch. The risk is very low. That patch is now dropped.
git: Remote code execution in recursive clones with nested submodules (CVE-2019-1387) SL7 x86_64 git-1.8.3.1-21.el7_7.x86_64.rpm git-daemon-1.8.3.1-21.el7_7.x8…
OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS (Security, 8229951) (CVE-2020-2601) * OpenJDK: Serialization filter changes via jdk.serialFilter propert…
An update that solves three vulnerabilities and has three fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes 5 vulnerabilities is now available.
An update that fixes 5 vulnerabilities is now available.
An update that solves 26 vulnerabilities and has 30 fixes is now available.
An update that fixes one vulnerability is now available.
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own…
nginx could be made to expose sensitive information over the network.
An update that solves one vulnerability and has three fixes is now available.
