Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A cross-site scripting vulnerability was discovered in Postorius, the administrative web frontend for Mailman 3. For the oldstable distribution (bookworm), thi…
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, SQL injection…
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, SQL injection…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For the oldstab…
An update that solves four vulnerabilities can now be installed.
An update that solves four vulnerabilities can now be installed.
An update that solves six vulnerabilities can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves four vulnerabilities can now be installed.
Important: git-lfs security update
Important: git-lfs security update
Lua could be made to crash or run programs as your login if it opened a specially crafted file.
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
Validate RSA_public_encrypt() result in RSASVE
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Tr…
PostfixAdmin could be made to run malicious JavaScript in the user's browser if it received specially crafted input.
CiviCRM could be made to run malicious JavaScript in the user's browser if it received specially crafted input.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
An update that solves one vulnerability can now be installed.
Several security issues were fixed in Vim.
