Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Podman could be made to pull an untrusted image.
MaraDNS is a small and lightweight cross-platform open-source DNS server. CVE-2022-30256
PyPDF2 could be made to crash if it opened a specially crafted file.
Several security issues were fixed in QEMU.
Update to 102.12.0 ; https://www.thunderbird.net/en- US/thunderbird/102.12.0/releasenotes/ ; https://www.thunderbird.net/en- US/thunderbird/102.11.2/releasenot…
Requests, a Python HTTP library, has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. For HTTP connections…
Jurien de Jong discovered that the parsing of KeyInfo elements within the XMLTooling library may result in server-side request forgery. For the oldstable distr…
libX11 1.8.6 (CVE-2023-3138)
Bump to 5.8.6
Bump to 5.8.6
Security fix for CVE-2023-33461
Bump to 5.8.6
Bump to 5.8.6
The container bci/golang was updated. The following patches have been included in this update:
update to 114.0.5735.106. Fixes the following security issue: CVE-2023-3709
Update to v1.85.2 ---- Update to v1.85.1 ---- Update to v1.85.0 Fixes CVE-2023-32682, CVE-2023-32683 ---- Update to v1.84.1
Several security vulnerabilities have been discovered in golang-go.crypto, the supplementary Go cryptography libraries. CVE-2019-11840
An update that fixes one vulnerability is now available.
An update that fixes four vulnerabilities is now available.
Xu Biang discovered that missing input sanitising in Sofia-SIP, a SIP User-Agent library could result in denial of service. For the oldstable distribution (bul…
An update that fixes one vulnerability is now available.
An update that fixes 89 vulnerabilities is now available.
An update that fixes one vulnerability is now available.
USN-6156-1 introduced a regression in SSSD.
