Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container bci/nodejs was updated. The following patches have been included in this update:
November 2022 Security Updates https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/ ---- Update to 18.10.0 https://github.com/nodejs/node/…
Two vulnerabilities were discovered gerbv, a Gerber file viewer. Most Printed Circuit Board (PCB) design programs can export data to a Gerber file.
Fixed validation of embedded certificates was when checking OCSP responses (CVE-2022-43705) References: - https://bugs.mageia.org/show_bug.cgi?id=31176
Fixed unsanitized NUL in environment variables in syscalls, os/exec (go#56327) (bsc#1204941). (CVE-2022-41716) runtime: lock count" fatal error when cgo is ena…
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
Several flaws were discovered in jackson-databind, a fast and powerful JSON library for Java. CVE-2020-36518
The container bci/rust was updated. The following patches have been included in this update:
It was discovered that a buffer overflow in GraphicsMagick, a collection of image processing tools, could potentially result in the execution of arbitrary code…
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container suse/389-ds was updated. The following patches have been included in this update:
Memory leak in XRegisterIMInstantiateCallback(). (CVE-2022-3554) Memory leak in _XFreeX11XCBStructure(). (CVE-2022-3555) References: - https://bugs.mageia.org/…
FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitialized data and send it to the server the client is currently con…
The container suse/sle15 was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
Several vulnerabilities were discovered in Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos. CVE-2021-3671
Three issues have been found in libarchive, a multi-format archive and compression library. CVE-2019-19221
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
