Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Patrick Monnerat discovered that Curl's support for "chained" HTTP compression algorithms was susceptible to denial of service. For the stable distribution (bu…
Several security issues were fixed in Rack.
Two vulnerabilities were discovered in Werkzeug, a collection of utilities for WSGI (web) applications. An attacker may inject cookies in specific situations, …
Several security issues were fixed in curl.
An update that fixes 8 vulnerabilities is now available.
Several security issues were fixed in WebKitGTK.
Several security issues were fixed in NSS.
Several security issues were fixed in curl.
Several security issues were fixed in Open vSwitch.
Several security issues were fixed in ZoneMinder.
Several security issues were fixed in ClamAV.
It was discovered that there was a regression in the previous fix for python-cryptography, a Python library offering a number of encryption and cryptography pr…
Several security issues were fixed in Intel Microcode.
APR could possibly be made to crash or run programs if it received specially crafted network traffic.
New upstream version, including fix for CVE-2023-26081
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in denial of service or incorrect …
Ronald Crane discovered that missing input saniting in the apr_base64 functions of apr-util, the Apache Portable Runtime utility library, may result in denial …
Vulnerabilities have been found in Node.js, which could result in DNS rebinding or arbitrary code execution. CVE-2022-43548
Triggering arbitrary code execution was possible due to .desktop files registered as application/x-ms-dos-executable MIME handlers in the open source .NET fram…
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
Security fix for CVE-2023-0778 ---- remove quadlet package specification completely ---- bump to v4.4.0
Security fix for CVE-2023-0056, CVE-2023-25725
