Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
- Update to 2.28.2 Release notes: https://github.com/Mbed- TLS/mbedtls/releases/tag/v2.28.2
- Update to 1.2.23 - CVE-46169 Release notes: https://www.cacti.net/info/changelog/1.2.23
Several security issues were fixed in Heimdal.
Security fix for CVE-2022-40704
Update to 6.18. Backport fix for CVE-35065 of bundled glob-parent.
Update to 1.22.19. Backport patch for CVE-2021-35065 for bundled glob-parent.
Backport fix for CVE-2022-4285.
Security fix for CVE-2022-40704
Security fix for CVE-2023-0049
Several out-of-memory, stack overflow or HTTP request smuggling vulnerabilities have been discovered in Netty, a Java NIO client/server socket framework, which…
XStream serializes Java objects to XML and back again. Versions prior to 1.4.11.1-1+deb10u4 may allow a remote attacker to terminate the application with a sta…
Several out-of-memory, stack overflow or HTTP request smuggling vulnerabilities have been discovered in Netty, a Java NIO client/server socket framework, which…
XStream serializes Java objects to XML and back again. Versions prior to 1.4.15-3+deb11u2 may allow a remote attacker to terminate the application with a stack…
It was discovered that missing input sanitising in the ctags functionality of Emacs may result in the execution of arbitrary shell commands. For the stable dis…
Microsoft's Security Update Guide, which chronicles Microsoft's patch releases each month, is getting two relatively new additions.
An update that fixes one vulnerability is now available.
It was discovered that there were two issues in viewvc, a web-based interface for browsing Subversion and CVS repositories. The attack vectors involved files w…
The system could be made to crash or run programs as an administrator.
Security fix for CVE-2023-0049
- Update to 2.28.2 Release notes: https://github.com/Mbed- TLS/mbedtls/releases/tag/v2.28.2
golang-github-graylog2-gelf-2.0.0-5.20201111git1550ee6.fc37 was not in F37 because was override with golang-github- graylog2-gelf-2.0.0-4.20190627git7ebf4f5.fc…
It was found that those using java.sql.Statement or java.sql.PreparedStatement in hsqldb, a Java SQL database, to process untrusted input may be vulnerable to …
Several flaws have been discovered in libjettison-java, a collection of StAX parsers and writers for JSON. Specially crafted user input may cause a denial of s…
dotnet6 could be made to crash if it received specially crafted network traffic.
