Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-32886
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32886
The container suse/sles12sp5 was updated. The following patches have been included in this update:
A heap-based buffer overflow vulnerability was discovered in gdal, a Geospatial Data Abstraction Library, which could result in denial of service or potentiall…
The container suse/sles/15.4/virt-operator was updated. The following patches have been included in this update:
The container suse/sles/15.4/libguestfs-tools was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-launcher was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-handler was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-controller was updated. The following patches have been included in this update:
Rhodri James discovered a heap use-after-free vulnerability in the doContent function in Expat, an XML parsing C library, which could result in denial of servi…
Sandipan Roy discovered two vulnerabilities in InfoZIP's unzip program, a de-archiver for .zip files, which could result in denial of service or potentially th…
Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2022-2795
The container bci/rust was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead (CVE-2022-40956). By…
An attacker can send a message with evil sdp to FreeSWITCH, which may a cause a crash due to an out-of-bounds access. (CVE-2022-31001) An attacker can send a m…
A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine (CVE-2022-31676). Referenc…
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. …
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which…
An arbitrary code execution vulnerability was disovered in fish, a command line shell. When using the default configuraton of fish, changing to a directory aut…
The container bci/rust was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container suse-sles-15-sp4-chost-byos-v20220916-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
