Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container suse/sles12sp5 was updated. The following patches have been included in this update:
The container suse/sles12sp4 was updated. The following patches have been included in this update:
A command injection vulnerability was found in FreeCAD, a parametric 3D modeler, when importing DWG files with crafted filenames. For Debian 10 buster, this pr…
The container suse/sle15 was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
The container ses/7.1/ceph/ceph was updated. The following patches have been included in this update:
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792
The container suse/sles12sp4 was updated. The following patches have been included in this update:
The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-32792
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32792
Yu Zhang and Nanyu Zhong discovered several vulnerabilities in net-snmp, a suite of Simple Network Management Protocol applications, which could result in deni…
Michael Catanzaro discovered a buffer overflow in the Epiphany web browser. For the stable distribution (bullseye), this problem has been fixed in version 3.38…
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
A severe authentication bypass vulnerability existed in the Zimbra Collaboration Suite (ZCS), risking email security.…Researchers Discover Zimbra Authenticatio…
The container bci/bci-micro was updated. The following patches have been included in this update:
A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit (CVE-2022-34526) References: - https://bugs.mageia.org/show_bug.cgi?id=30716
A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial o…
A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. (CVE-2022-27337) Ref…
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untruste…
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. (CVE-2022-29970) References: - https://bugs.mageia.…
Several vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in HTTP request smuggling, cache poiso…
The container bci/rust was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/bci-micro was updated. The following patches have been included in this update:
