Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Avahi could be made to crash if it received specially crafted DBus traffic.
Django could be made to consume resources if it received specially crafted network traffic.
Several security issues were fixed in Graphite-Web.
Sam Wheating discovered that python-git, a Python library to interact with Git repositories, is vulnerable to shell injection due to improper user input valida…
The container bci/ruby was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
Multiple security issues were discovered in renderdoc a stand-alone graphics debugging tool, which potentially allows a remote attacker to execute arbitrary co…
An update that fixes one vulnerability is now available.
OpenSSH could be made to run programs as your login when using ssh-agent forwarding.
FRR could be made to denial of service if it received a specially crafted message.
OpenStack could be made to expose sensitive information.
OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * OpenJDK: array indexing integer overflow issue (8304468) …
OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) * OpenJDK: improper han…
Details have emerged about a now-patched flaw in OpenSSH that could be potentially exploited to run arbitrary commands remotely on compromised hosts under spec…
Security fix for CVE-2023-38408
The 6.4.4 stable kernel rebase contains additional hardware support, new features, and a number of important fixes across the tree.
The 6.4.4 stable kernel rebase contains additional hardware support, new features, and a number of important fixes across the tree.
The 6.4.4 stable kernel rebase contains additional hardware support, new features, and a number of important fixes across the tree.
The 6.4.4 stable kernel rebase contains additional hardware support, new features, and a number of important fixes across the tree.
fix for CVE-2023-36664 (rhbz#2217805)
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-37450
