Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An issue has been found in linmicrohttpd, a library embedding HTTP server functionality. Parsing crafted POST requests result in an out of bounds read, which m…
GlusterFS could be made to crash if it received a specially crafted request.
Xcftools could be made to crash or run programs as an administrator if it opened a specially crafted file.
It was discovered that joblib did not completely sanitize arguments to pre_dispatch, allowing arbitrary code execution. The earlier attempt via DLA-3193-1 was …
Several out of bounds memory access and buffer overflows were fixed in xrdp, an open source project which provides a graphical login to remote machines using M…
The container bci/bci-init was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/bci-minimal was updated. The following patches have been included in this update:
Fix for CVE-2023-1393
Apply fix for CVE-2022-37603.
Backport fix for CVE-2023-24329.
Update to 2022.12.7, fixes CVE-2022-23491.
Update to zstd-1.5.4, fixes CVE-2022.4899.
Update to 2.2.0, includes the fix for CVE-2023-26302
X.Org X Server could be made to crash or run programs as the administrator if it received specially crafted input.
Nette could be made to run programs if it received specially crafted network traffic.
Jan-Niklas Sohn discovered that a use-after-free flaw in the Composite extension of the X.org X server may result in privilege escalation if the X server is ru…
Jan-Niklas Sohn discovered that a user-after-free flaw in the Composite extension of the X.org X server may result in privilege escalation if the X server is r…
Several security vulnerabilities have been discovered in unbound, a validating, recursive, caching DNS resolver. CVE-2022-3204
The container bci/rust was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
