Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Brief introduction Two vulnerbilities were found in maradns, an open source domain name system (DNS) implementation, that may lead to denial of service and
The system could show undesired warning messages in certain conditions.
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
AccountsService could be made to crash or run programs if it received specially crafted messages.
The container bci/bci-init was updated. The following patches have been included in this update:
etcd could be made to expose sensitive information over the network.
An update that solves two vulnerabilities and has two fixes is now available.
An update that fixes one vulnerability is now available.
An update that fixes two vulnerabilities is now available.
Upstream security update with additional bugfixes. Resolves CVE-2023-2431.
Update to 114.0.5735.133. Fixes the following security issues: CVE-2023-3214, CVE-2023-3215, CVE-2023-3215, CVE-2023-3217,
Two vunerabilities were discovered in c-ares, an asynchronous name resolver library: CVE-2023-31130
Missing input validation in various functions may have resulted in denial of service in various functions provided by libx11, the X11 client-side library.
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/php was updated. The following patches have been included in this update:
Latest stable release. Full upstream changelog: https://github.com/WebAssembly/wabt/compare/1.0.32...1.0.33 . Fixes CVE-2023-27116, CVE-2023-30300 and CVE-2023…
Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2023-2828
In OWSLib, a Python client library for Open Geospatial web services, the XML parser did not disable entity resolution which could lead to arbitrary file reads …
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/bci-init was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
