Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container suse/sle15 was updated. The following patches have been included in this update:
A directory traversal vulnerability was discovered in the Metadata anonymisation toolkit, which could result in information disclosure via a malformed ZIP arch…
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation. In addition this updates provides mitigations …
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
This update includes the latest stable release of _Apache Subversion_, version **1.14.2**. This update addresses two security issues, `CVE-2021-28544` and `CVE…
The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-22677
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-22677
Consumer electronics maker Lenovo on Tuesdayrolled out fixesto contain three security flaws in its UEFI firmware affecting over 70 product models."The vulnerab…
An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version …
In unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints (e.g., use of GPGME) are met, allows…
Command Injection via hg argument (CVE-2022-24065) References: - https://bugs.mageia.org/show_bug.cgi?id=30570 - https://lists.fedoraproject.org/archives/list/…
A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manually upload files to…
Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. CVE-2022-25802
The container bci/ruby was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container suse/pcp was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container suse-sles-15-sp3-chost-byos-v20220708-x86_64-gen2 was updated. The following patches have been included in this update:
The container sles-15-sp3-chost-byos-v20220708-x86-64 was updated. The following patches have been included in this update:
