Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
GNU Screen could be made to crash applications if it received specially crafted input.
OpenLDAP could be made to crash if it received specially crafted input.
ReportLab could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in Vim.
Update to 114.0.5735.198. Fixes the following security issues: CVE-2023-3420 CVE-2023-3421 CVE-2023-3422 CVE-2023-36191
A memory leak has been found in yajl, a JSON parser / small validating JSON generator written in ANSI C, which might allow an attacker to cause an out of memor…
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of servi…
Multiple multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of servi…
Update to 2.40.3: * Make memory pressure monitor honor memory.memsw.usage_in_bytes if exists. * Include key modifiers in wheel events. * Apply cookie blocking …
Several vulnerabilities were fixed in the Python3 interpreter. CVE-2015-20107
An issue has been found in cups, the Common UNIX Printing System(tm). Due to a use-after-free bug an attacker could cause a denial-of-service. In case of havin…
open-vm-tools: authentication bypass vulnerability in the vgauth module (CVE-2023-20867) For more details about the security issue(s), including the impact, a …
An update that fixes one vulnerability is now available.
The newest upstream commit 2215591 - TRIAGE vim: Divide By Zero vulnerability in scroll_cursor_bot() in move.c
Fix for several CVEs
This is a security release, additionally fixing a number of important bugs.
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server. CVE-2022-47184
An update that contains security fixes can now be installed.
An update that fixes one vulnerability is now available.
It was discovered that in some conditions the Flask web framework may disclose a session cookie. For the oldstable distribution (bullseye), this problem has be…
An update that fixes one vulnerability is now available.
An update that fixes three vulnerabilities is now available.
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
