Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Security fix for CVE-2023-1350
Apache HTTP Server could allow unintended access to network services.
openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) For more details about the security issue(s), including the impact, a CVSS score, ac…
nss: Arbitrary memory write via PKCS 12 (CVE-2023-0767) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and …
This update upgrades Firefox to version 102.9.0 ESR. * Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) * Mozilla: Memory safety bugs…
Several security issues were fixed in object-path.
GitPython could me made to execute arbitrary commands on the host.
The container bci/golang was updated. The following patches have been included in this update:
- Update to latest upstream (111.0)
USN-5904-1 caused a minor regression in SoX.
The container bci/nodejs was updated. The following patches have been included in this update:
TigerVNC could be made to expose sensitive information over the network.
An update that fixes 11 vulnerabilities is now available.
Ruby could allow for internet traffic to be modified if a vulnerable application processed malicious user input.
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in HTTP response splitting or denial of service. For the stable distr…
Several security issues were fixed in curl.
Several security issues were fixed in Vim.
Python could be made to bypass blocklisting methods if a specially crafted URL was provided.
One of the security fixes released as DLA 3315 introduced a regression in the processing WAV files with variable bitrate encoding. Updated sox packages are ava…
Multiple security issues were discovered in Thunderbird, which could result in denial of service, the execution of arbitrary code or spoofing.
The newest upstream commit Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264.
Update to 1.15.4 * Fix CVE-2023-28100 and CVE-2023-28101
Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264.
Update to 102.9.0 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-11/ ; https://www.thunderbird.net/en- US/thunderbird/102.9.0/releasenotes/
