Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513.
Security fix for CVE-2022-45061
New version 4.0.8. Includes fixes for CVE-2023-2906, CVE-2023-4511, CVE-2023-4512, CVE-2023-4513.
Vulnerabilities were found in libssh2, a client-side C library implementing the SSH2 protocol, which could lead to denial of service or remote information disc…
It was discovered that there was a potential denial of service vulnerability in Django, a popular Python-based web development framework.
Several security issues were fixed in GRUB2.
It was discovered that there was a potential Denial of Service (DoS) vulnerability in memcached, a high-performance in-memory object caching system.
Update to prevent invalid fragment values from leading to a buffer overrun
This update upgrades Firefox to version 102.15.0 ESR. * Mozilla: Memory corruption in IPC CanvasTranslator (CVE-2023-4573) * Mozilla: Memory corruption in IPC …
Python could be made to crash or leak sensitive information if it received specially crafted input.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
PLIB could be made to execute arbitrary code if it opens a specially crafted TGA file.
The container bci/bci-busybox was updated. The following patches have been included in this update:
The container bci/bci-busybox was updated. The following patches have been included in this update:
Several security issues were fixed in Apache Shiro.
Update to prevent invalid fragment values from leading to a buffer overrun
This release fixes a heap buffer overwrite in search_brace() (CVE-2023-40305) and a heap overread in lexi().
Minor security note * The DSN support added in 6.8.0 reflects the DSN back to the user in an error message if it is invalid. If a DSN uses user-supplied input …
Security fix for CVE-2022-41717
Update to prevent invalid fragment values from leading to a buffer overrun
- patchlevel 1872 ---- The newest upstream commit Security fixes for CVE-2023-4733, CVE-2023-4752, CVE-2023-4750
Rebase to 0.5.2 to fix CVE-2023-22652 and CVE-2023-30079
SoX could be made to crash if it received specially crafted input.
An update that fixes one vulnerability is now available.
