Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Mutt could be made to crash if it received specially crafted input.
gawk could be made to crash if it received specially crafted input.
DBus could be made to crash if it received a specially crafted request.
libssh2 could be made to crash if it received specially crafted network traffic.
Several vulnerabilities were discovered in Samba, the SMB/CIFS file, print, and login server for Unix. CVE-2016-2124
Several security issues were fixed in ModSecurity.
libwebp could be made to crash or run programs if it opened a specially crafted file.
The container rancher/seedimage-builder was updated. The following patches have been included in this update:
The container rancher/elemental-operator was updated. The following patches have been included in this update:
The container rancher/elemental-teal/5.4 was updated. The following patches have been included in this update:
The container rancher/elemental-teal-rt/5.4 was updated. The following patches have been included in this update:
The container rancher/elemental-teal-iso/5.4 was updated. The following patches have been included in this update:
Several security issues were fixed in Thunderbird.
Firefox could be made to crash or run programs if it opened a malicious website.
Package new upstream version of open-vm-tools-12.3.0-22234872. Security fix for CVE-2023-20900, CVE-2023-20867
Fixes for CVE-2023-20897 and CVE-2023-20898
A buffer overflow in parsing WebP images may result in the execution of arbitrary code. For the stable distribution (bookworm), this problem has been fixed in
A buffer overflow in parsing WebP images may result in the execution of arbitrary code. For the oldstable distribution (bullseye), this problem has been fixed
Several security issues were fixed in Ghostscript.
PostgreSQL could be made to execute commands as the bootstrap superuser.
Open VM Tools could allow unintended access to network services.
An update that fixes one vulnerability is now available.
RedCloth could be made to crash if it received specially crafted input.
Rebase to 0.5.2 to fix CVE-2023-22652 and CVE-2023-30079
