Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The package shadow before version 4.8-1 is vulnerable to privilege escalation.
It was discovered that there was a potential account hijack vulnerabilility in Django, the Python-based web development framework.
Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821) Bug Fix(es): * KEYS: prevent creating a different user's keyrings SL-6.10 * BUG: unable to…
freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to information disclosure (CVE-2015-9381) * freetype: mishandling ps_…
Security fix for CVE-2019-5544
An update that fixes 37 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
Update to Chromium 79. Fixes the usual giant pile of bugs and security issues. This time, the list is: CVE-2019-13725 CVE-2019-13726 CVE-2019-13727 CVE-2019-13…
Update to version 0.9.3 to address CVE-2019-14889
Security fix for CVE-2019-18397
Security fix for CVE-2019-5544
Several security issues were fixed in OpenJDK.
An issue has been found in harfbuzz, an OpenType text shaping engine. Due to a buffer over-read, remote attackers are able to cause a denial of
Two issues have been found in libvorbis, a decoder library for Vorbis General Audio Compression Codec.
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use this iss…
It was found that libssh, a tiny C SSH library, does not sufficiently sanitize path parameters provided to the server, allowing an attacker with only SCP file …
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which could result in unauthorized access by bypassing intended path mat…
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which could result in unauthorized access by bypassing intended path mat…
An update for openshift-enterprise-cli-container, openshift-enterprise-hyperkube-container, openshift-enterprise-hypershift-container, openshift-enterprise-nod…
The 5.3.16 update contains a number of important fixes across the tree
This is a security release fixing the following issues: * CVE-2019-1348: the fast-import stream command "feature export-marks=path" allows writing to arbitrary…
An update that fixes 37 vulnerabilities is now available.
