Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A vulnerability was reported in src:elog, a logbook system to manage notes through a Web interface. This vulnerability allows remote attackers to create a deni…
Update to 2.35.3 ([release notes](https://github.com/git/git/raw/v2.35.3/Documen tation/RelNotes/2.35.3.txt)) This release addresses [CVE-2022-24765](https://b…
Update to 2.36.0 ([release notes](https://github.com/git/git/raw/v2.36.0/Documen tation/RelNotes/2.36.0.txt)) Among the changes, this release includes changes …
Security fix for CVE-2022-28041 affecting `usd` via its dependency on the header-only `stb_image` library. ----- Do not package `pxrConfig.cmake` with `usd`, s…
Security fix for CVE-2022-28041 affecting `usd` via its dependency on the header-only `stb_image` library. ----- Do not package `pxrConfig.cmake` with `usd`, s…
Rebuild for CVE-2022-27191
An update that fixes one vulnerability is now available.
Security fix for CVE-2022-21698
Security fix for CVE-2022-21698
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important.…
Several security issues were fixed in the Linux kernel.
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
Security fix for CVE-2022-21698
Update to 3.2.1 (fix CVE-2021-45848: DoS via malicious download request)
Google's Threat Analysis Group (TAG) took the wraps off a newinitial access brokerthat it said is closely affiliated to a Russian cyber crime gang notorious fo…
An update that fixes one vulnerability is now available.
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash (CVE-2022-26381). When resi…
Jeremy Mousset discovered two XML parsing vulnerabilities in the Tryton application platform, which may result in information disclosure or denial of service.
Backport fix for CVE-2021-22570.
Backport fix for CVE-2021-22570.
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash (CVE-2022-26381). When resi…
Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can be …
Security researchers of JFrog Security and Ismail Aydemir discovered two remote code execution vulnerabilities in the H2 Java SQL database engine which can be …
