Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
openssh: Remote code execution in ssh-agent PKCS#11 support (CVE-2023-38408) For more details about the security issue(s), including the impact, a CVSS score, …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, bypass of the s…
poppler could be made to crash if it opened a specially crafted file.
Cargo could be made to run programs as your login if it installed a specially crafted crate.
GNU cpio could be made to crash or run programs if it opened a specially crafted file.
Several security issues were fixed in MaraDNS.
Several security issues were fixed in Vim.
GStreamer Good Plugins could be made to crash or run programs if it opened a specially crafted file.
GStreamer Base Plugins could be made to crash or run programs if it opened a specially crafted file.
An update that fixes 5 vulnerabilities is now available.
It was discovered that there was a protential LDAP injection vulnerability in Bouncy Castle, a cryptographic library for Java. During the certificate validatio…
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
Several security issues were fixed in Firefox.
- Updated to latest upstream (116.0)
librsvg could be made to expose sensitive information.
The container bci/openjdk was updated. The following patches have been included in this update:
Several security issues were fixed in OpenJDK.
- fix fopen race condition (CVE-2023-32001)
Multiple vulnerabilities were found in tiff, a library and tools providing support for the Tag Image File Format (TIFF).
iperf3: memory allocation hazard and crash (CVE-2023-38403) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, …
OpenSSH could be made to run programs as your login when using ssh-agent forwarding.
Several security issues were fixed in WebKitGTK.
RabbitMQ could be made to expose sensitive information.
