Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to latest upstream git snapshot. Various changes, including bug fix for cookie leak vulnerability.
JOSE for C/C++ could be made to crash if it received specially crafted input.
Fast DDS could be made to crash or expose sensitive information if it received specially crafted input.
"Edbo" and Cedric Krier discovered that the Tryton application server does enforce record rules when only reading fields without an SQL type (like Function fie…
Han Zheng discovered an out-of-bounds write in w3m, a text based web browser and pager. It can be triggered by sending a crafted HTML file to the w3m binary. I…
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
Important: iperf3 security update
Important: subscription-manager security update
Moderate: dbus security update
Important: rust security update
Important: rust-toolset:rhel8 security update
Important: iperf3 security update
Update libqb for CVE-2023-39976
An auto-block can occur for an untrusted X-Forwarded-For header in MediaWiki, a website engine for collaborative work. X-Forwarded-For is not necessarily trust…
Several vulnerabilities have been found in qt4-x11, a graphical windowing toolkit. CVE-2021-3481
Inetutils could be made to crash or execute arbitrary code.
New firmware for AMD Zen CPUs to mitigate the AMD 'Inception' attack. Only needed for affected AMD users. ---- Update to upstream 20230804 release: * Split out…
updated to security 17.0.8.0.7
Update to 0.2.28
Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially allowing to crash the server, information disclosur…
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
CVE-2023-20197 ClamAV File Scanning Infinite Loop Denial of Service Vulnerability
