Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2023-31484 CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CPAN 2.35 - Add verify_SS1 to H…
A potential Cross Site Scripting (XSS) vulnerablity (CVE-2022-36180) and session handling vulnerability (CVE-2022-36179 )have been found in fusiondirectory, a …
The source package ocsinventory-server, a Hardware and software inventory tool has been updated to address the API change in php-cas due to CVE-2022-39369, see…
A vulnerability has been found in phpCAS, a Central Authentication Service client library in php, which may allow an attacker to gain access to a victim's acco…
The container sles-15-sp5-chost-byos-v20230704-arm64 was updated. The following patches have been included in this update:
The container sles-15-sp4-chost-byos-v20230704-arm64 was updated. The following patches have been included in this update:
Low: open-vm-tools security update
Critical: go-toolset and golang security update
idm:DL1 bug fix and enhancement update
Moderate: libssh security update
Low: open-vm-tools security update
microcode_ctl bug fix and enhancement update
Update to version 1.2.1. This version includes a fix for CVE-2023-32570 (race condition that can lead to an application crash).
Doorkeeper could be made to expose sensitive information over the network.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
The system could show undesired warning messages in certain conditions.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
It was discovered that the Nullsoft Scriptable Install System (NSIS) before version 3.09 mishandles access control for the uninstaller directory.
Gerbv could be made to crash or run programs as your login if it opened a specially crafted file.
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2023-32439
- New upstream update (115.0) - Built with PGO
Gorilla WebSocket could be made to crash if it received specially crafted network traffic.
A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem. This vulnerability allows attackers to cause…
The container bci/bci-init was updated. The following patches have been included in this update:
