Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
dlt-daemon, a Diagnostic Log and Trace logging daemon, had the following vulnerabilities reported: CVE-2020-29394
jQuery-UI, the official jQuery user interface library, is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery wer…
Several security issues were fixed in NumPy.
Fixes for multiple CVEs
Fixes for multiple CVEs
- Updated to latest upstream (107.0.1)
The newest upstream commit Security fix for CVE-2022-4141 Vim did not recognize key codes passed by Kitty
Update to 102.5.1 ; https://www.mozilla.org/en- US/security/advisories/mfsa2022-50/ ; https://www.thunderbird.net/en- US/thunderbird/102.5.1/releasenotes/
Fixes for multiple CVEs
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
A buffer overflow was discovered in the VNC module of the VLC media player, which could result in the execution of arbitrary code. For the stable distribution …
Robin Peraglie and Johannes Moritz discovered an argument injection bug in the xfce4-mime-helper component of xfce4-settings, which can be exploited using the …
An update that solves one vulnerability and has three fixes is now available.
pki-core: access to external entities when parsing XML can lead to XXE (CVE-2022-2414) For more details about the security issue(s), including the impact, a CV…
When parsing files containing Nef polygon data, several memory access violations may happen. Many of these allow code execution. CVE-2020-28601
A distrusted certificate authority has been removed from ca-certificates.
Several security issues were fixed in u-boot.
AWStats, a powerful and featureful web server log analyzer, allowed XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper check…
GNU binutils could be made to crash or execute arbitrary code if it received a specially crafted COFF file.
Several security issues were fixed in LibBPF.
This update fixes two file format vulnerabilities in giflib. CVE-2018-11490
A distrusted certificate authority has been removed from ca-certificates.
Several security issues were fixed in libxml2.
