Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
In the nfs-utils package, providing support files for Network File System (NFS) including the rpc.statd daemon, the directory /var/lib/nfs is owned by statd:no…
* Rebase to 1.8.28 * Fixed CVE-2019-14287
An update that fixes four vulnerabilities is now available.
An update that fixes one vulnerability is now available.
It was discovered that the Special:Redirect functionality of MediaWiki, a website engine for collaborative work, could expose suppressed user names, resulting …
The fix for CVE-2019-10871 broke xpdf. This change has been reverted until a better fix can be developed.
The 5.3.6 update contains a number of important fixes across the tree.
The 5.3.6 update contains a number of important fixes across the tree.
== Security fixes == * (T230402, CVE-2019-16738) SECURITY: Add permission check for suppressed account to Special:Redirect. == Links to all mentioned tasks ==…
kernel: Use-after-free in __blk_drain_queue() function in block/blk-core.c (CVE-2018-20856) * kernel: Heap overflow in mwifiex_update_bss_desc_with_ie function…
Two buffer allocation issues were identified in poppler. CVE-2019-9959
Several cross-site scripting (XSS) vulnerabilities were discovered in Wordpress, a popular content management framework. An attacker can use these flaws to sen…
In sudo, a program that provides limited super user privileges to specific users, an attacker with access to a Runas ALL sudoer account can bypass certain poli…
The 5.3.6 update contains a number of important fixes across the tree.
The 5.3.6 update contains a number of important fixes across the tree.
An update that fixes one vulnerability is now available.
OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949) * OpenJDK: Unexpected exception thrown during regular expression p…
OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302) (CVE-2019-2949) * OpenJDK: Unexpected exception thrown during regular expression p…
An update that fixes one vulnerability is now available.
Several security issues were fixed in LibTIFF.
The update of libsdl2 released as DLA 1714-1 led to several regressions, as reported by Avital Ostromich. These regressions are caused by libsdl1.2 patches for…
The update of libsdl1.2 released as DLA 1713-1 led to a regression, caused by an incomplete fix for CVE-2019-7637. This issue was known upstream and resulted, …
An update that solves two vulnerabilities and has three fixes is now available.
An update that fixes 6 vulnerabilities is now available.
