Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes four vulnerabilities is now available.
mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of- service (DoS) condition via unspecified vectors (CVE-2021-20718). References: - …
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
The updated package fixes a security vulnerability: A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a sl…
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
An update that fixes one vulnerability is now available.
The updated package fixes a security vulnerability: A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with tr…
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to …
An update that solves one vulnerability and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
An update that solves one vulnerability and has one errata is now available.
An update that fixes one vulnerability is now available.
Update to version 1.9.4. Resolves CVE-2019-10086.
Update to version 1.9.4. Resolves CVE-2019-10086.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Update to version 1.19. Resolves CVE-2019-12402.
Update to version 1.19. Resolves CVE-2019-12402.
An update is now available for JBoss Core Services on RHEL 6 and RHEL 7. Red Hat Product Security has rated this update as having a security impact of Importan…
Some Apache Kafka servers could accept a made-up identity and give an attacker access as that user.
This update includes httpd version 2.4.69 addressing various security issues, see https://downloads.apache.org/httpd/CHANGES_2.4.69 for more information.
