Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
update xmedcon to 0.24.0 fixes: Bug 2283157 - xmedcon-0.24.0 is available Bug 2283100 - CVE-2024-29421 xmedcon: Heap overview when parsing DICOM medical files …
python-zipp could be made to crash if certain zip files are used.
New mozilla-thunderbird packages are available for Slackware 15.0 to fix security issues.
Rack could be made to consume resources and cause long delays if it processed certain input.
An update that fixes 8 vulnerabilities is now available.
An update that fixes two vulnerabilities is now available.
An update that fixes one vulnerability is now available.
An update that fixes 22 vulnerabilities is now available.
An update that fixes 26 vulnerabilities is now available.
New httpd packages are available for Slackware 15.0 and -current to fix security issues.
New openssl packages are available for Slackware 15.0 and -current to fix security issues.
An update that fixes three vulnerabilities is now available.
This is the May 2024 release for .NET 8. This is a security update for .NET 8. Release notes: https://github.com/dotnet/core/blob/main/release- notes/8.0/8.0.5…
This update ships the latest version of php 8.2. It brings fixed security issues and the usual bug fixes. Vulnerability: A code logic error, filtering function…
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or hi…
Phillip Szelat discovered that Exim, a mail transport agent, does not properly parse a multiline RFC 2231 header filename, allowing a remote attacker to bypass…
A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, …
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
An update that fixes 7 vulnerabilities is now available.
Before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap token, causing the unwrapped token to appear truncated to…
It was discovered that eSpeak NG did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of ser…
USN-6851-1 caused systemctl enable to fail
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of se…
Gunicorn, an event-based HTTP/WSGI server, fails to properly validate Transfer- Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By c…
