Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
Validate RSA_public_encrypt() result in RSASVE
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
PostfixAdmin could be made to run malicious JavaScript in the user's browser if it received specially crafted input.
CiviCRM could be made to run malicious JavaScript in the user's browser if it received specially crafted input.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
Several security issues were fixed in Vim.
Multiple security issues were found in Prosody, a lightweight Jabber/XMPP server, which could result in denial of service or insufficient access control when u…
Dun Anh Nguyen discovered a buffer overflow in LibreOffice, which could result in an out-of-bounds write if OOXML documents with malformed encryption parameter…
HtmlUnit could be made to run programs as your login if it opened a malicious website.
Postfix could be made to crash if it received specially crafted network traffic.
OpenJPEG could be made to crash or run programs when encoding image files.
Several security issues were fixed in libpng.
Little CMS could be made to crash if it opened a specially crafted ICC profile.
dpkg could be made to stop responding if it opened a specially crafted file.
Several security issues were fixed in NASM.
Important: fence-agents security update
Several security issues were fixed in Coin3D.
Several security issues were fixed in ITK.
An update that solves six vulnerabilities can now be installed.
