Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
After being deprecated for several years, Security Enhanced Linux "SELinux" beginning with the Linux 6.4 kernel can no longer be run-time disabled.
Disable stringop-overflow warnings. Patch "bfd-CVE-2023-1972" fixes a security issue in bfd library.
Disable stringop-overflow warnings. Patch "bfd-CVE-2023-1972" fixes a security issue in bfd library.
Disable stringop-overflow warnings. Patch "bfd-CVE-2023-1972" fixes a security issue in bfd library.
It was discovered that there was a potential remote denial of service vulnerability in Redis, a popular 'NoSQL' key-value database. Authenticated users could h…
The previous golang-1.11 update released as DLA-3395-1 failed to build reliably on the armhf architecture, due to intermittent ("flaky") test cases in the test…
The notorious North Korea-aligned state-sponsored actor known as theLazarus Grouphas been attributed to a new campaign aimed at Linux users.The attacks are par…
Fullscreen notification obscured. (CVE-2023-29533) Double-free in libwebp. (MFSA-TMP-2023-0001) Potential Memory Corruption following Garbage Collector compact…
This update upgrades Firefox to version 102.10.0 ESR. * MFSA-TMP-2023-0001 Mozilla: Double-free in libwebp * Mozilla: Fullscreen notification obscured (CVE-202…
Update to 102.9.1 ; https://www.mozilla.org/en- US/security/advisories/mfsa2023-12/ ; https://www.thunderbird.net/en- US/thunderbird/102.9.1/releasenotes/ ----…
It was reported that HAProxy, a fast and reliable load balancing reverse proxy, does not properly initialize connection buffers when encoding the FCGI_BEGIN_RE…
"rvim" can execute a shell through :diffpatch. References: - https://bugs.mageia.org/show_bug.cgi?id=31766 - https://github.com/vim/vim/commit/23a971da506249fc…
Sudo before 1.9.13 does not escape control characters in log messages. (CVE-2023-28486) Sudo before 1.9.13 does not escape control characters in sudoreplay out…
It was discovered that there were two potential denial of service (DoS) attacks in lldpd, a implementation of the IEEE 802.1ab (LLDP) protocol used to administ…
Update to 2.53.16 Langpacks are now provided in the modern form of web extensions. This may take a bit longer at startup if all languages are enabled at the sa…
The Iranian nation-state group known asMuddyWaterhas been observed carrying out destructive attacks on hybrid environments under the guise of a ransomware oper…
Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Clearte…
Update to 2.53.16 Langpacks are now provided in the modern form of web extensions. This may take a bit longer at startup if all languages are enabled at the sa…
Linux is widely regarded as a great OS for users looking to protect their privacy and security online . That being said, using a virtual private network, or VP…
A piece of new information-stealing malware calledOpcJackerhas been spotted in the wild since the second half of 2022 as part of a malvertising campaign. "OpcJ…
Multiple potential security vulnerabilities in some Intel® Processors have been found which may allow information disclosure or may allow escalation of privile…
The Cyber Police of Ukraine, in collaboration with law enforcement officials from Czechia, has arrested several members of a cybercriminal gang that set up phi…
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to…
This update upgrades Thunderbird to version 102.9.0. * Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) * Mozilla: Memory safety bugs…
