Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This update ships the latest version of php 8.2. It brings fixed security issues and the usual bug fixes. Vulnerability: A code logic error, filtering function…
Security fix for CVE-2024-38439, CVE-2024-38440, and CVE-2024-38441
Security fix for CVE-2023-41334
Security fix for CVE-2023-41334
Security fixes for CVE-2024-33870, CVE-2024-29510
Gunicorn, an event-based HTTP/WSGI server, fails to properly validate Transfer- Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By c…
Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting T…
Security fix for CVE-2024-33871
Security fix for CVE-2024-3049
Security fix for CVE-2024-3049
An analysis of a hybrid biometric access system from Chinese manufacturer ZKTeco has uncovered two dozen security flaws that could be used by attackers to defe…
Security fix for CVE-2024-34055
Security fix for CVE-2024-34055
Google has warned that a security flaw impacting Pixel Firmware has been exploited in the wild as a zero-day.The high-severity vulnerability, tagged as CVE-202…
rpm-ostree security update
Security fix for CVE-2024-21501
Security fix for CVE-2024-21501
The updated packages fix security vulnerabilities: Excessive time spent checking DSA keys and parameters. (CVE-2024-4603) Use After Free with SSL_free_buffers.…
Security vulnerabilities were found in less, a pager program similar to more, which could result in arbitrary command execution when processing files with craf…
The chromium-browser-stable package has been updated to the 125.0.6422.76 release. It includes 6 security fixes Please, do note, that since some versions ago, …
Fossil was broken by fixes of CVE-2024-24795 for apache2 package, and needed an update. As part of the security fix, the Apache webserver
A security issue was discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. Google is awar…
Cybersecurity researchers have discovered a new cryptojacking campaign that employs vulnerable drivers to disable known security solutions (EDRs) and thwart de…
The chromium-browser-stable package has been updated to the 125.0.6422.60 release. It includes 9 security fixes. Please, do note, only x86_64 is supported from…
