Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that solves 5 vulnerabilities and has three fixes is now available.
An update that solves two vulnerabilities and has one errata is now available.
An update that solves two vulnerabilities and has one errata is now available.
An update that fixes 6 vulnerabilities is now available.
An update that fixes four vulnerabilities is now available.
An update that fixes four vulnerabilities is now available.
In phpBB, includes/acp/acp_bbcodes.php had improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack …
An update that fixes two vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
- Update to 2.16.3 - Side channel attack on deterministic ECDSA (CVE-2019-16910) Release notes: https://tls.mbed.org/tech- updates/releases/mbedtls-2.16.3-and-…
Upstream announcement: Welcome to **phpMyAdmin 4.9.1**, a bugfix release. This is a regularly-schedule bugfix release that also includes some security hardenin…
Netty mishandled whitespace before the colon in HTTP headers (such as a Transfer-Encoding : chunked' line), which lead to HTTP request smuggling.
The update of apache2 released as DLA-1900-1 contained an incomplete fix for CVE-2019-10092, a limited cross-site scripting issue affecting the mod_proxy error…
Several issues in poppler, a PDF rendering library, have been fixed. CVE-2018-20650
An update that fixes 7 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes 7 vulnerabilities is now available.
An update that fixes four vulnerabilities is now available.
SDL 2.0 could be made to crash or run programs as your login if it opened a specially crafted file.
e2fsprogs could be made to execute arbitrary code if it is running in a crafted ext4 partition.
e2fsprogs could be made to execute arbitrary code if it is running in a crafted ext4 partition.
An update that fixes four vulnerabilities is now available.
