Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that contains security fixes can now be installed.
An update that contains security fixes can now be installed.
Several vulnerabilities were discovered in python-werkzeug, a collection of utilities for WSGI applications. CVE-2023-23934
The container sles-15-sp4-chost-byos-v20230804-arm64 was updated. The following patches have been included in this update:
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribu…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-38133
Multiple vulnerabilities have been found in the version of yajl bundled with burp, a simple cross-platform network BackUp and Restore Program. yajl is a JSON p…
The container bci/golang was updated. The following patches have been included in this update:
arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) ---- bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593] ---- x86/AMD:…
Update to 2.53.17
Update to new upstream version 3.5.4. This brings a fix for a security issue, CVE-2023-30577. This update also fixes the manual pages.
Update to new upstream version 3.5.4. This brings a fix for a security issue, CVE-2023-30577. This update also fixes the manual pages.
Update from 0.6.10 to 0.6.11: https://lib.openmpt.org/libopenmpt/2023/06/18/security- updates-0.7.2-0.6.11-0.5.25-release-0.4.37/
Update to version 4.17.10, Security fixes for CVE-2022-2127, CVE-2023-3347, CVE-2023-34966, CVE-2023-34967 and CVE-2023-34968 ---- Fix netlogon LogonGetCapabil…
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
An incorrect Authentication Tag length usage was discovered in cjose, a C library implementing the Javascript Object Signing and Encryption (JOSE) standard, wh…
It was discovered that ntpd in ntpsec, a secure, hardened, and improved implementation derived from the original NTP project, could crash if NTS is disabled an…
update to 115.0.5790.110. Fixes the following security issue: CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 CVE-2022-4908 CVE-2022-4909 CVE-2022-4910 CVE-2022-4906…
- Updated to latest upstream (116.0)
Fix several crashes and rendering issues Security fixes: CVE-2023-38133, CVE-2023-38572, CVE-2023-38592, CVE-2023-38594, CVE-2023-38595, CVE-2023-38597, CVE-20…
librsvg 2.56.3 release, fixing CVE-2023-38633: - Fix arbitrary file read when href has special characters. - Fix cascade for symbol elements being referenced f…
Seokchan Yoon discovered that missing sanitising in the email and URL validators of Django, a Python web development framework, could result in denial of servi…
XMLTooling could be made to allow for unintended server side actions if it received specially crafted input.
This update upgrades Firefox to version 102.14.0 ESR. * Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045) * Mozilla: Inco…
