Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
An update that solves one vulnerability and has two fixes is now available.
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, it was possible to circumvent XML signature verification on SAML messages.
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, it was possible to circumvent XML signature verification on SAML messages.
Update to latest upstream version.
Several security vulnerabilities were discovered in OpenAFS, a distributed file system. CVE-2019-18601
USN-4165-1 caused some minor regressions in Firefox.
Stephan Zeisberg discovered that missing input validation in ProFTPD, a FTP/SFTP/FTPS server, could result in denial of service via an infinite loop.
USN-4171-1 introduced a regression in Apport.
Several vulnerabilities in wordpress, a web blogging tool, have been fixed.
An update that solves two vulnerabilities and has three fixes is now available.
An update that fixes one vulnerability is now available.
An update that solves 7 vulnerabilities and has 96 fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes 28 vulnerabilities is now available.
An update that solves three vulnerabilities and has two fixes is now available.
An update that fixes one vulnerability is now available.
A vulnerability was discovered in the cpio package. CVE-2019-14866
An update that fixes 11 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
USN-4170-2 caused a regression in Whoopsie
Nokogiri could be made to execute programs if it received specially crafted input.
USN-4171-2 introduced a regression in Apport.
HAproxy would allow unintended access if ii received specially crafted HTTP request.
