Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Two security vulnerabilities were discovered in Jetty, a Java servlet engine and webserver. CVE-2022-2047
Michael Catanzaro discovered a buffer overflow in the Epiphany web browser. For the stable distribution (bullseye), this problem has been fixed in version 3.38…
Rebuild against websocket 0.26.5 for CVE-2022-35922 / RUSTSEC-2022-0035.
Rebuild against websocket 0.26.5 for CVE-2022-35922 / RUSTSEC-2022-0035.
Multiple vulnerabilities have been discovered in Apache Webserver, the worst of which could result in remote code execution.
Brave and Tor are two of the most secure web browsers you can use, but which one comes out on top?
Phishing website URL removed from package spec file and replaced with new official site link. References: - https://bugs.mageia.org/show_bug.cgi?id=30679
Two security vulnerabilities were discovered in Jetty, a Java servlet engine and webserver. CVE-2022-2047
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Multiple security issues have been found in the Mozilla Firefox web browser, which could result in spoofing. For the oldstable distribution (buster), these pro…
A severe security bug affected the Grafana open-source web application. Exploiting the vulnerability could allow…Serious OAuth vulnerability In Grafana Could A…
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to execute arbitrary code or escalate privileges. For the oldstable …
Two cross-site scripting vulnerabilities were discovered in the Django Rest Framework, a toolkit to build web APIs. For the oldstable distribution (buster), th…
The botnet behind the largest HTTPS distributed denial-of-service (DDoS) attack in June 2022 has been linked to a spate of attacks aimed at nearly 1,000 Cloudf…
Arseniy Sharoglazov discovered multiple security issues in LDAP Account Manager (LAM), a web frontend for managing accounts in an LDAP directory, which could r…
While the internet provides many benefits, it also brings new risks and challenges. One of the most common and notable of these is the threat to our privacy. S…
Today, one of the most popular ways for free websites and browsers to make a profit is tracking and selling user data to advertisers. While most tracking is be…
Believe it or not, you might be using a deprecated Linux command. It's not really your fault. You are either habitual of using those commands or learned them t…
This update upgrades Thunderbird to version 91.11. * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-20…
This update upgrades Firefox to version 91.11 ESR. * Mozilla: CSP sandbox header without `allow-scripts` can be bypassed via retargeted javascript: URI (CVE-20…
uBlock, a Firefox add-on and efficient ads, malware and trackers blocker, supported an arbitrary depth of parameter nesting for strict blocking, which allows c…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Several vulnerabilities were discovered in Mailman, a web-based mailing list manager. An attacker could impersonate more privileged accounts through different …
