Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
- fix more POST-after-PUT confusion (CVE-2023-28322) - fix IDN wildcard match (CVE-2023-28321)
nghttp2 could be made to crash if it opened a specially crafted file.
xfce4-settings could be made to run programs with arbitrary arguments if it received specially crafted input.
Several security issues were fixed in Go.
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
OpenShift Serverless version 1.29.0 contains a moderate security impact. The References section contains CVE links providing detailed severity ratings for each…
Python could be made to bypass blocklisting methods if a specially crafted URL was provided
OpenShift Serverless 1.29.0 has been released. The References section contains CVE links providing detailed severity ratings for each vulnerability. Ratings ar…
Several security issues were fixed in libssh.
Several security issues were fixed in LibRaw.
Several security issues were fixed in FRR.
Perl could be made to install modules from untrusted sources.
Two vulnerabilities were fixed in GNU cpio, a program to manage archives of files. CVE-2019-14866
Latest MariaDB minor maintenance release 10.3.39 included a fix for the following security vulnerability: CVE-2022-47015
Rebase to upstream version 3.0.9
Security fix for CVE-2023-24329
Fix CVE-2023-32700
Update to requests-2.31.0.
Several vulnerabilities were fixed in the network traffic analyzer Wireshark. CVE-2023-2856
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Alvaro Mu'±oz from the GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert, a tool and library used to con…
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
