Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Qualys is the first solution to scan Red Hat Enterprise Linux CoreOS on Red Hat OpenShift to reduce risk.
CloudLinux's TuxCare services are now providing automated security patches and updates for the systems supporting the Atlas V rocket . ''Protecting US [and wor…
The container sles-15-sp3-chost-byos-v20210729 was updated. The following patches have been included in this update:
The container suse-sles-15-sp3-chost-byos-v20210729-gen2 was updated. The following patches have been included in this update:
HTCondor, a distributed workload management system, has Incorrect Access Control. It is possible to use a different authentication method to submit a job than …
A buffer overflow was discovered in the Aspell spell checker, which could result in the execution of arbitrary code. For the stable distribution (buster), thes…
The container suse-sles-15-sp3-chost-byos-v20210729-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
Andrea Fioraldi discovered a buffer overflow in libsndfile, a library for reading/writing audio files, which could result in denial of service or potentially t…
An issue has been found in libsndfile, a library for reading/writing audio files. A crafted WAV file can trigger a heap buffer overflow and might allow exectut…
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security…
Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in bypass of sandbox restrictions, incorrect validation of signed Jars or i…
objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::dup_top (called from acommon::StringMap::add and acommon::Config::lookup_l…
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Va…
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-21775
Wrong content via metalink not discarded (CVE-2021-22922). Metalink download sends credentials (CVE-2021-22923). Bad connection reuse due to flawed path name c…
Two issue have been found in aspell, the GNU Aspell spell-checker. One issue is related to a stack-based buffer over-read via an isolated
An integer overflow bug in Redis version 6.0 or newer could be exploited using the `STRALGO LCS` command to corrupt the heap and potentially result with remote…
This affects the package y18n before 3.2.2, 4.0.1 and 5.0.5. PoC by po6ix: const y18n = require('y18n')(); y18n.setLocale('__proto__'); y18n.updateLocale({poll…
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a differe…
In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU ty…
encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of a…
A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file ca…
It was discovered that the Key Distribution Center (KDC) in krb5, the MIT implementation of Kerberos, is prone to a NULL pointer dereference flaw. An unauthent…
