Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
This is the June 2023 monthly update for .NET 7. It includes fixes for several CVEs. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release…
This is the June 2023 monthly update for .NET 6. It includes fixes for several CVEs. Release Notes: - Runtime: https://github.com/dotnet/core/blob/main/release…
Erik Krogh Kristensen and Rasmus Petersen from the GitHub Security Lab discovered a ReDoS (Regular Expression Denial of Service) vulnerability in python-mechan…
**PHP version 8.2.7** (08 Jun 2023) **Core:** * Fixed bug [GH-11152](https://github.com/php/php-src/issues/11152) (Unable to alias namespaces containing reserv…
Update to sympa 6.2.72 Fixes CVE-2021-32850 For details, see: https://github.com/sympa-community/sympa/releases/tag/6.2.72
Update to sympa 6.2.72 Fixes CVE-2021-32850 For details, see: https://github.com/sympa-community/sympa/releases/tag/6.2.72
Alvaro Mu'±oz from the GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert, a tool and library used to con…
Public source code repositories, from Sourceforge to GitHub , from the Linux Kernel Archives to ReactOS.org , from PHP Packagist to the Python Package Index , …
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
Backport a fix for [CVE-2022-48468](https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2022-48468) for [protobuf-c](https://github.com/protobuf-c/protobuf-c),…
Backport a fix for [CVE-2022-48468](https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2022-48468) for [protobuf-c](https://github.com/protobuf-c/protobuf-c),…
update to 2.40.1 (CVE-2023-25652, CVE-2023-25815, CVE-2023-29007) Refer to the release notes for 2.30.9 for details of each CVE as well as the following securi…
A heap overflow can occur with crafted JPEG image file. (CVE-2023-27781) References: - https://bugs.mageia.org/show_bug.cgi?id=31764 - https://github.com/tjko/…
## [3.1.48] - 2023-03-28 ### Security - Fixed Cross site scripting vulnerability in Javascript escaping. This addresses CVE-2023-28447. ### Fixed - Output buff…
"rvim" can execute a shell through :diffpatch. References: - https://bugs.mageia.org/show_bug.cgi?id=31766 - https://github.com/vim/vim/commit/23a971da506249fc…
Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor bugfixes. https://github.com/zmanda/amanda/releases/tag/ta…
Update to version 3.5.3, which contains fixes for three minor security issues as well as other minor bugfixes. https://github.com/zmanda/amanda/releases/tag/ta…
Release of stargz snapshotter v0.14.2 https://github.com/containerd/stargz- snapshotter/releases/tag/v0.14.2 This release uses containerd v1.7.0-rc.1 which con…
**Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection o…
**Version 1.1.4** - released 2022-03-06 * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107): macOS: deprecated sasl API (improve detection o…
High CVE-2023-1213: Use after free in Swiftshader. Reported by Jaehun Jeong(@n3sk) of Theori on 2023-01-30 High CVE-2023-1214: Type Confusion in V8. Reported b…
Release of stargz snapshotter v0.14.2 https://github.com/containerd/stargz- snapshotter/releases/tag/v0.14.2 This release uses containerd v1.7.0-rc.1 so this r…
Rebuilt with fix for null pointer dereference in stb_image (https://github.com/nothings/stb/issues/1452).
