Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
node-nth-check, a NodeJS module module used to parse and compile nth-checks, as they are found in CSS 3's nth-child() and nth-last-of-type(). This module was v…
An update that fixes one vulnerability is now available.
tar could be made to crash or expose sensitive information if it received a specially crafted file.
Two vulnerabilities have been fixed in sqlite (V2) which which might allow local users to obtain sensitive information, cause a denial of service (application …
update to 113.0.5672.126. Fixes the many security issues
update to 113.0.5672.126. Fixes the many security issues
It was discovered that missing input sanitising in cups-filters, when using the Backend Error Handler (beh) backend to create an accessible network printer, ma…
Multiple vulnerabilities were fixed in imagemagick, a software suite, used for editing and manipulating digital images. CVE-2021-20176
Irvan Kurniawan discovered a double free in the libwebp image compression library which may result in denial of service. For the stable distribution (bullseye)…
It was discovered that missing input sanitising in cups-filters, when using the Backend Error Handler (beh) backend to create an accessible network printer, ma…
Max Chernoff discovered that improperly secured shell-escape in LuaTeX may result in arbitrary shell command execution, even with shell escape disabled, if spe…
Max Chernoff discovered that improperly secured shell-escape in LuaTeX may result in arbitrary shell command execution, even with shell escape disabled, if spe…
The newest upstream commit Security fix for CVE-2023-2426
fix clone-in-kitty + security fix rhbz#2196803
Upgrade to 1.2.11
Backport fix for CVE-2023-1729.
- Update yubibomb to version 0.2.12. - Update ybaas to version 0.0.16.
- Update yubibomb to version 0.2.12. - Update ybaas to version 0.0.16.
2207970 - CVE-2023-24805 cups-filters: remote code execution in cups-filters, beh CUPS backend
The system could be made to crash or run programs as an administrator.
It was discovered that missing input sanitising in the implementation of the OIDCStripCookie option in mod_auth_openidc could result in denial of service.
Several security issues were fixed in Ruby.
minimatch could be made to crash if it opened a specially crafted input file.
Several security issues were fixed in runC.
