Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1218851 Cross-References: * CVE-2023-46839
* bsc#1216869 * bsc#1218046 * bsc#1218050 * bsc#1218051 * bsc#1218053
* bsc#1216207 * bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218050
* bsc#1216869 * bsc#1217711 * bsc#1218046 * bsc#1218049 * bsc#1218050
The container bci/nodejs was updated. The following patches have been included in this update:
Update to newer ncurses version, which fixes CVE-2023-29491 and CVE-2023-50495.
An issue has been discovered in BIND, a DNS server implementation. A stack exhaustion flaw was discovered in the control channel code
Several security issues were fixed in Pillow.
* bsc#1218851 Cross-References: * CVE-2023-46839
* bsc#1218851 Cross-References: * CVE-2023-46839
* bsc#1218851 Cross-References: * CVE-2023-46839
A regression was fixed in X.Org X Server
OpenLDAP could be made to crash if it received specially crafted input.
Postfix, a popular mail server, allowed SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=…
TinyXML could be made to crash if it opened a specially crafted file.
The container bci/python was updated. The following patches have been included in this update:
The container bci/php-fpm was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
Fixing CVE-2023-6395
Multiple security issues were discovered in Redis, a persistent key-value database, which could result in the execution of arbitrary code or ACL bypass.
It was discovered that there was a potential arbitrary code execution vulnerability in pillow, a popular library for manipulating images used by Python applica…
