Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container bci/bci-micro was updated. The following patches have been included in this update:
Several security issues were fixed in Node.js.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in bypass of sandbox restrictions, information disclosure, reduced c…
The container bci/dotnet-runtime was updated. The following patches have been included in this update:
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
The container bci/dotnet-aspnet was updated. The following patches have been included in this update:
Multiple security vulnerabilities have been found in xrdp, a remote desktop protocol server. Buffer overflows and out-of-bound writes may cause a denial of ser…
Mickael Karatekin discovered that the GNOME session locking didn't restrict a keyboard shortcut used for taking screenshots in GNOME Screenshot which could res…
A buffer overflow was discovered in flac, a library handling Free Lossless Audio Codec media, which could potentially result in the execution of arbitrary code.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Several security issues were fixed in GNU binutils.
Add patch for CVE-2023.39742.
vsftpd could allow unintended access to network services.
Django could be made to crash or consume resources if it received specially crafted network traffic.
LibRaw could be made to crash if it opened a specially crafted file.
c-ares could be made to crash if it received specially crafted network traffic.
The container sles-15-sp5-chost-byos-v20230915-arm64 was updated. The following patches have been included in this update:
Update matrix-synapse to v1.80.0 to fix CVE-2022-39374, CVE-2023-32323
Update matrix-synapse to v1.80.0 to fix CVE-2022-39374, CVE-2023-32323
Update matrix-synapse to v1.80.0 to fix CVE-2022-39374, CVE-2023-32323
Security fix for CVE-2023-36328
update to 117.0.5938.62. Fixes following security issues: CVE-2023-4900 CVE-2023-4901 CVE-2023-4902 CVE-2023-4903 CVE-2023-4904 CVE-2023-4905 CVE-2023-4906 CVE…
- patchlevel 1872 ---- The newest upstream commit Security fixes for CVE-2023-4733, CVE-2023-4752, CVE-2023-4750
