Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Privilege escalation has been fixed in the GNU Guix package manager. For Debian 11 bullseye, this problem has been fixed in version 1.2.0-4+deb11u3.
The Qualys Threat Research Unit discovered that libmodule-scandeps-perl, a Perl module to recursively scan Perl code for dependencies, allows an attacker to ex…
The Qualys Threat Research Unit discovered several local privilege escalation vulnerabilities in needrestart, a utility to check which daemons need to be resta…
The Qualys Threat Research Unit discovered that libmodule-scandeps-perl, a Perl module to recursively scan Perl code for dependencies, allows an attacker to ex…
The Qualys Threat Research Unit discovered several local privilege escalation vulnerabilities in needrestart, a utility to check which daemons need to be resta…
Python could be made to run programs when activating virtual environments.
* bsc#1233085 Cross-References: * CVE-2024-47072
* bsc#1218562 * bsc#1223016 * bsc#1223384 * bsc#1223824 * bsc#1224526
Update to 2.6.4. Backport fix for CVE-2024-50602.
Update to 2.6.4. Backport fix for CVE-2024-50602.
GLib could be made to crash or other undefined behavior if it received a specially crafted input.
curl could be made to expose sensitive information over the network.
* bsc#1146701 * bsc#1211899 * bsc#1212985 * bsc#1217003 * bsc#1217338
* bsc#1146701 * bsc#1211899 * bsc#1212985 * bsc#1217003 * bsc#1217338
* bsc#1228945 * bsc#1229077 * bsc#1229923 * bsc#1230255 * bsc#1230536
* bsc#1213933 * bsc#1223142 * bsc#1226759 * bsc#1227341 * bsc#1227578
What do hijacked websites, fake job offers, and sneaky ransomware have in common? They’re proof that cybercriminals are finding smarter, sneakier ways to explo…
Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager (NTLM) and Task Scheduler have come under active exploitation in the wil…
Several issues were fixed in AsyncSSH.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Multiple vulnerabilties were discovered for smarty3, a widely-used PHP templating engine, which potentially allows an attacker to perform an XSS (e.g JavaScrip…
A vulnerability has been discovered in the Xorg Server and XWayland, the worst of which can result in privilege escalation.
