Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
- Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
An update that fixes 8 vulnerabilities is now available.
Stephan Zeisberg reported an out-of-bounds write vulnerability in the _sasl_add_string() function in cyrus-sasl2, a library implementing the Simple Authenticat…
There has been an out-of-bounds write in Cyrus SASL leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP c…
An update that fixes 7 vulnerabilities is now available.
While preparing a fix for CVE-2017-6314 an unknown symbol g_uint_checked_mul() was introduced.
An update that solves 24 vulnerabilities and has 58 fixes is now available.
- Update to 1.2.8 Release notes: https://www.cacti.net/release_notes.php?version=1.2.8
Security fix for CVE-2019-18397
It was discovered that the lmtpd component of the Cyrus IMAP server created mailboxes with administrator privileges if the "fileinto" was used, bypassing ACL c…
fribidi: buffer overflow in fribidi_get_par_embedding_levels_ex() in lib /fribidi-bidi.c leading to denial of service and possible code execution (CVE-2019-183…
An update that fixes one vulnerability is now available.
An update that fixes 8 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
Several issues in gdk-pixbuf, a library to handle pixbuf, have been found. CVE-2016-6352 fix for denial of service (out-of-bounds write and crash) via
An update that fixes two vulnerabilities is now available.
An update that solves two vulnerabilities and has one errata is now available.
Django accounts could be hijacked through password reset requests.
bugfix release for CVE-2019-19118
An update that fixes 8 vulnerabilities is now available.
An update that solves 7 vulnerabilities and has two fixes is now available.
An update that fixes 8 vulnerabilities is now available.
The package git before version 2.24.1-1 is vulnerable to arbitrary code execution.
The package libgit2 before version 1:0.28.4-1 is vulnerable to arbitrary code execution.
