Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The Open Source Security Foundation (OpenSSF), a cross-industry organization hosted at the Linux Foundation that brings together the world's most important sof…
If you downloaded PyTorch-nightly on Linux via pip between Dec. 25, 2022, and Dec. 30, 2022, you've got trouble.
menglong2234 discovered NULL pointer exceptions in net-snmp, a suite of Simple Network Management Protocol applications, which could could result in debian of …
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a requ…
Sigstore community today announced the first stable release of sigstore-python, improving software supply chain security and paving the way for other client im…
There is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered by sending a crafted HTML file to the w3m binary. It allows an …
This update provides minetest 5.6.1, the latest stable release of the open source voxel game. This updates provides a number of feature and bug fix changes com…
Security fix for CVE-2022-46176: Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. For more details, see the upstr…
- Update to 1.2.23 - CVE-46169 Release notes: https://www.cacti.net/info/changelog/1.2.23
- Update to 1.2.23 - CVE-46169 Release notes: https://www.cacti.net/info/changelog/1.2.23
- Update to 2.28.2 Release notes: https://github.com/Mbed- TLS/mbedtls/releases/tag/v2.28.2
- Update to 1.2.23 - CVE-46169 Release notes: https://www.cacti.net/info/changelog/1.2.23
Details have emerged about a now-patched vulnerability in Google Chrome and Chromium-based browsers that, if successfully exploited, could have made it possibl…
Malicious actors are actively attempting to exploit a recently patched critical vulnerability in Control Web Panel (CWP) that enables elevated privileges and u…
XStream serializes Java objects to XML and back again. Versions prior to 1.4.11.1-1+deb10u4 may allow a remote attacker to terminate the application with a sta…
XStream serializes Java objects to XML and back again. Versions prior to 1.4.15-3+deb11u2 may allow a remote attacker to terminate the application with a stack…
A vulnerability has been discovered in jupyter_core which could allow for the execution of code as another user.
- Update to 2.28.2 Release notes: https://github.com/Mbed- TLS/mbedtls/releases/tag/v2.28.2
golang-github-graylog2-gelf-2.0.0-5.20201111git1550ee6.fc37 was not in F37 because was override with golang-github- graylog2-gelf-2.0.0-4.20190627git7ebf4f5.fc…
It was found that those using java.sql.Statement or java.sql.PreparedStatement in hsqldb, a Java SQL database, to process untrusted input may be vulnerable to …
dotnet6 could be made to crash if it received specially crafted network traffic.
This update fixes a number of memory access violations and other input validation failures that can be triggered by passing specially crafted files to exiv2.
xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow (CVE-2022-46340)…
xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free (CVE-2022-4283) * xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow (CVE-2022-46340)…
