Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that an integer overflow in the RFC3164 parser of syslog-ng, a system logging daemon, may result in denial of service via malformed syslog me…
A security issue has been discovered in xfig, a diagramming tool for the interactive generation of figures under X11. CVE-2021-40241:
Security fixes for CVE-2022-24580 and CVE-2023-41323
Security fixes for CVE-2022-24580 and CVE-2023-41323
add sub-package with xen build (resolves: rhbz#2170730) ---- update openssl (CVE-2023-0286, CVE-2023-0215, CVE-2022-4450, CVE-2022-4304). ---- cherry-pick aarc…
Multiple issues were found in libde265, an open source implementation of the h.265 video codec, which may result in denial of service, possibly code execution …
Security fix for CVE-2023-27320
The newest upstream patchlevel 1367 Security fix for CVE-2023-1127
It was discovered that the libreswan IPsec implementation could be forced into a crash/restart via malformed IKEv2 packets after peer authentication, resulting…
Multiple security vulnerabilities have been discovered in Apache HTTP server. CVE-2006-20001
node-css-what was vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of insecure regular expression in the re_attr variable. The explo…
The system could be made to crash or run programs as an administrator.
An update that fixes 10 vulnerabilities is now available.
Several security issues were fixed in Rack.
Several security issues were fixed in PHP.
USN-5821-3 caused a minor regression in pip.
USN-5871-1 caused a regression.
Sudo could be made to crash or escalate privileges.
Several security issues were fixed in SPIP.
c-ares could be made to crash or run programs if it processed specially crafted input.
PostgreSQL could be made to expose sensitive information over the network.
Several security issues were fixed in SoX.
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to execute arbitrary code. For the stable distribution (bullseye), t…
New upstream version, including fix for CVE-2023-26081
