Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Git.
Jan-Niklas Sohn discovered that a user-after-free flaw in the X Input extension of the X.org X server may result in privilege escalation if the X server is run…
This update upgrades Thunderbird to version 102.7.1. * Mozilla: Revocation status of S/Mime signature certificates was not checked (CVE-2023-0430) For more det…
The container bci/python was updated. The following patches have been included in this update:
Jan-Niklas Sohn, working with Trend Micro Zero Day Initiative, discovered a vulnerability in the X.Org X server. A potential use after free mighty result in lo…
It was discovered that there were a number of issues in graphite-web, a tool provide realtime graphing of system statistics etc. A series of cross-site scripti…
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42826
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42826
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42826
tmux could be made to crash if it received a specially crafted input.
EditorConfig Core C could be made to crash or run programs if it received specially crafted input.
Several security issues were fixed in Thunderbird.
USN-5825-1 caused some minor regressions in PAM.
USN-5816-1 caused some minor regressions in Firefox.
Ikeda Soji reported that libhtml-stripscripts-perl, a Perl module for removing scripts from HTML, is prone to a regular expression denial of service, due to ca…
Security fix for CVE-2022-4510
# New in release [OpenJDK 8u362](https://bit.ly/openjdk8u362) (2023-01-17) ## CVEs Fixed - CVE-2023-21830 - CVE-2023-21843 ## Security Fixes - JDK-8285021: Imp…
# New in release [OpenJDK 11.0.18](https://bit.ly/openjdk11018) (2023-01-17) ## CVEs Fixed - CVE-2023-21835 - CVE-2023-21843 ## Security Fixes - JDK-8286070: I…
# New in release [OpenJDK 17.0.6](https://bit.ly/openjdk1706) (2023-01-17) ## CVEs Fixed - CVE-2023-21835 - CVE-2023-21843 ## Security Fixes - JDK-8286070: Imp…
# New in release OpenJDK 19.0.2 (2023-01-17) ## CVEs Fixed * CVE-2023-21835 * CVE-2023-21843 ## Security Fixes - JDK-8286070: Improve UTF8 representation - JDK…
Rebase to sudo 1.9.12p2 - security fix for CVE-2023-22809
An update that fixes one vulnerability is now available.
The 6.1.9 stable kernel update contains a number of important fixes across the tree.
Update to version 1.23.0. Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.23.0 Additionally, this update was built with a version of gola…
