Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A bug was found in containerd where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in…
## 2021-10-12, Version 14.18.1 'Fermium' (LTS), @danielleadams This is a security release. ### Notable changes * **CVE-2021-22959**: HTTP Request Smuggling due…
## 2021-10-12, Version 14.18.1 'Fermium' (LTS), @danielleadams This is a security release. ### Notable changes * **CVE-2021-22959**: HTTP Request Smuggling due…
A new security weakness has been disclosed in the WinRAR trialware file archiver utility for Windows that could be abused by a remote attacker to execute arbit…
The U.S. Commerce Department on Wednesday announced new rules barring the sales of hacking software and equipment to authoritarian regimes and potentially faci…
Security fix for CVE-2021-39358, and many other memory, assertion, etc. fixes.
Security fix for CVE-2021-39358, and many other memory, assertion, etc. fixes.
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitr…
Security fixes for moby-engine and containerd containerd: - fixes CVE-2021-41103 - Fix insufficiently restricted permissions on container root and plugin direc…
Security fixes for moby-engine and containerd containerd: - fixes CVE-2021-41103 - Fix insufficiently restricted permissions on container root and plugin direc…
Representatives from the U.S., the European Union, and 30 other countries pledged to mitigate the risk of ransomware and harden the financial system from explo…
Update to 94.0.4606.81. Built with is_official_build=true, which disables all sorts of debugging check functions that upstream turned on in 94. These debugging…
PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702] (#2011248)
PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702] (#2011248)
Vulnerabilities in the life cycle of open-source software development can start from tiny crumbs but grow into substantial issues. This week's KubeCon + CloudN…
Richard Weinberger reported that unsquashfs in squashfs-tools, the tools to create and extract Squashfs filesystems, does not check for duplicate filenames wit…
XSS vulnerability in Special:Search. (CVE-2021-41798) ApiQueryBacklinks can cause a full table scan. (CVE-2021-41799) Fix PoolCounter protection of Special:Con…
David Dufour, Webroot + Carbonite, OpenText Companies Ransomware is no stranger to corporate networks, as…Malware Goes Beyond Ancient Jigsaw on Latest Hacking …
The Software-as-a-service (SaaS) industry has gone from novelty to an integral part of today's business world in just a few years. While the benefits to most o…
https://www.mediawiki.org/wiki/Release_notes/1.35#MediaWiki_1.35.4
**Redis 6.0.16** - Released Mon Oct 4 12:00:00 IDT 2021 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2021-41099**) In…
https://www.mediawiki.org/wiki/Release_notes/1.35#MediaWiki_1.35.4
**Redis 6.2.** - 6 Released Mon Oct 4 12:00:00 IDT 2021 Upgrade urgency: SECURITY, contains fixes to security issues. Security Fixes: * (**CVE-2021-41099**) In…
It was discovered that sandbox restrictions in Flatpak, an application deployment framework for desktop apps, could be bypassed for a Flatpak app with direct a…
