Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several security issues were fixed in Pillow.
Update to 1.12.3 Fixes these two security issues: * CVE-2021-43860 or https://github.com/flatpak/flatpak/security/advisories/GHSA-qpjc-vq3c-572j * CVE-2022-216…
It was discovered that sphinxsearch, a fast standalone full-text SQL search engine, could allow arbitrary files to be read by abusing a configuration option.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Security fix for CVE-2021-4122
- kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 - celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523
- kombu 5.2.3: https://github.com/celery/kombu/blob/master/Changelog.rst#523 - celery 5.2.3: https://github.com/celery/celery/blob/master/Changelog.rst#523
Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.
Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.
Update to 0.9.6, see https://github.com/uriparser/uriparser/blob/uriparser-0.9.6/ChangeLog for details.
It was discovered that the libreswan IPsec implementation could be forced into a crash/restart via a malformed IKEv1 packet, resulting in denial of service.
Matthew Wild discovered that the WebSockets code in Prosody, a lightweight Jabber/XMPP server, was susceptible to denial of service. For the oldstable distribu…
The 5.15.14 stable kernel update contains a number of important fixes across the tree.
The 5.15.14 stable kernel update contains a number of important fixes across the tree.
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execut…
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code. For the oldstable distribu…
An update that fixes one vulnerability is now available.
kernel: perf_event_parse_addr_filter memory (CVE-2020-25704) * kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations (CVE-2020-363…
Security fix for CVE-2021-46059, CVE-2022-0158, CVE-2022-0156
Security fix for CVE-2021-41500. Upstream notes for version 1.2.7 read: "Bug fixes, Python 3.10 compatibility".
- Certificate login validation: Action required on updates - Client: Show previously used hosts - Client: Support port specification - bridge: Warning on missi…
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
