Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes one vulnerability is now available.
Update to upstream 9.2.2. Changes with Apache Traffic Server 9.2.2 #9544 - Docs: format typos in header_rewrite doc #9754 - Fix OCSP detection during build (9.…
- Update to upstream release 20230808 - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171 up to 0x1000181; - Update of 06-55-04/0xb7 (SKX-D…
Fix several crashes and rendering issues Security fixes: CVE-2023-38133, CVE-2023-38572, CVE-2023-38592, CVE-2023-38594, CVE-2023-38595, CVE-2023-38597, CVE-20…
Several security issues were fixed in poppler.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
HAProxy could allow unintended access to network services.
Ghostscript could be made to crash if it received specially crafted input.
Several security issues were fixed in ZZIPlib.
The RAR archiver allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys fi…
"Open-source software's security and reliability aspects have played a significant role in its rise. The availability of source code to a large community of de…
The Monti ransomware was found in June 2022 that attracted notice due to its close resemblance to the Conti ransomware, both in name and tactics, drawing atten…
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/ruby was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 providers. If a user forwarded their ssh-agent to an untrusted system, a remote atta…
Fix buffer overrun vulnerability (#2211088), fixes CVE-2023-2977
Update `llhttp` to 8.1.1 (including a SONAME version bump and ABI break, https://pagure.io/fesco/issue/3049) and `python-aiohttp` to 3.8.5. Fixes CVE-2023-3058…
Security fix for CVE-2023-38497
Fix buffer overrun vulnerability (#2211088), fixes CVE-2023-2977
librsvg 2.54.6 release, fixing CVE-2023-38633: - Fix arbitrary file read when href has special characters.
Podman could be made to expose sensitive information or execute binary code.
