#patchhawk - Twitter Hashtag

6 days ago

4.14.0 has both fixes. 5.0.0 — GitHub’s “Latest” — has neither. We published PoCs for both already-fixed bugs. Links + sources below. If you ship OpenCV 5, check what you deploy. Would you expect bugs like these to get CVEs? 👇 🦅 PatchHawk #opencv #patchhawk #78researchlab

1

0

61

PatchHawk @patchhawk_

13 days ago

Four advisories. Zero CVEs. And the patch closing the file read isn't on the releases page. Pin v1.12.4 explicitly. 🔖 Bookmark for your next bump. Should High-severity GHSAs auto-request a CVE? 👇 🦅 PatchHawk #nng #patchhawk #78researchlab

1

2

0

90

PatchHawk @patchhawk_

about 2 months ago

@identity 4 fixes got an advisory. 9 didn't. On PHP 8.5? Treat 8.5.9 as a security release, whichever CVEs you think apply to you. 🔖 Bookmark for your next version bump. Should silent memory-safety fixes get a CVE? 👇 🦅 PatchHawk #php #patchhawk #78researchlab

0

2

0

109

PatchHawk @patchhawk_

about 2 months ago

3 fixes got a CVE. Dozens didn't. Run ld/objdump/nm on untrusted objects (CI, malware triage)? binutils 2.47 is a security update. 🔖 Bookmark for your next toolchain bump. Should silent fixes like these get a CVE? 👇 🦅 PatchHawk #binutils #patchhawk #78researchlab

0

2

0

119

PatchHawk @patchhawk_

2 months ago

3 fixes got a CVE. 8 didn't. Same release. nginx 1.31.3 (mainline) / 1.30.4 (stable) is a security release. If you run nginx, update. 🔖 Bookmark for your next patch window. Should silent fixes like these get a CVE? 👇 🦅 PatchHawk #nginx #patchhawk #78researchlab

0

2

0

121

PatchHawk @patchhawk_

2 months ago

Watch only NVD? Nothing for 3 weeks - and you'd still miss the no-CVE ones. libheif 1.23.1 is a security release. If you touch HEIF/AVIF, update. 🔖 Bookmark for your next patch window. Should silent fixes get a CVE faster? 👇 🦅 PatchHawk #libheif #patchhawk #78researchlab

0

2

0

148

PatchHawk @patchhawk_

3 months ago

Two use-after-frees in PHP's own DOM and SPL code. Its 2 CVEs? Both in a bundled library. On PHP? Move to the latest 8.5.x; 8.5.7+ has these fixes. 🔖 Bookmark for your next PHP bump. Should silent fixes like these get a CVE? 👇 🦅 PatchHawk #php #patchhawk #78researchlab

0

2

0

122

PatchHawk @patchhawk_

3 months ago

Watch only CVE feeds? You'd see nothing - 26.02 has none. But the .7z and ext parsers got memory-safety fixes. Treat it as a security release and upgrade. 🔖 Bookmark for your next patch window. Should silent fixes get a CVE? 👇 🦅 PatchHawk #7zip #patchhawk #78researchlab

0

2

0

122

PatchHawk @patchhawk_

3 months ago

Watch only CVE feeds and you saw 8. This release quietly carried 15+ more. On OpenSSH? Update to 10.4 - it's a security release whatever the label says. Should silent fixes like these get a CVE? 👇 🦅 PatchHawk #openssh #patchhawk #78researchlab

0

3

0

131

Top Tweets for #patchhawk

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users