Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The 6.3.11 stable kernel update contains a number of important fixes across the tree. ---- The 6.3.10 stable kernel update contains a number of important fixes…
Update to version 4.7.4 Security fix for CVE-2022-41854
Two denial of service vulnerabilities have been discovered in golang-yaml.v2, a library which provides YAML support for the Go language.
Multiple security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting, a bypass of vandali…
CPDB could be made to crash or execute arbitrary code.
Django could be made to consume resources if it received specially crafted network traffic.
Several security issues were fixed in containerd.
Several security issues were fixed in Firefox.
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/ruby was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/php was updated. The following patches have been included in this update:
- Release 4.0.4
- New upstream update (115.0) - Built with PGO
An update that fixes 10 vulnerabilities is now available.
Several security issues were fixed in ImageMagick.
Update to 114.0.5735.198. Fixes the following security issues: CVE-2023-3420 CVE-2023-3421 CVE-2023-3422 CVE-2023-36191
Update to 2.40.3: * Make memory pressure monitor honor memory.memsw.usage_in_bytes if exists. * Include key modifiers in wheel events. * Apply cookie blocking …
croc 9.6.4
croc 9.6.4
**Changelog** ``` * Sun Jun 25 2023 Didik Supriadi - 2.5.1-3 - Build with ivy instead of maven ```
It was discovered that Ghostscript, the GPL PostScript/PDF interpreter, does not properly handle permission validation for pipe devices, which could result in …
PHP could be made to expose sensitive information.
