Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The previous Imagemagick security update caused a regression in some perl packages due to overly restrictive hardening in a policy update (reading from /etc/ w…
Two important bugs were discovered in xapian-core, a search engine library, that led to potential database corruption on disk full, and incorrectly reporting c…
update to 111.0.5563.64. Fixes the following security issues: CVE-2023-0927 CVE-2023-0928 CVE-2023-0929 CVE-2023-0930 CVE-2023-0931 CVE-2023-0932 CVE-2023-0933…
CVE-2022-37454: Fix buffer overflows in _sha3 module
Update to OWSLib-0.28.1, fixes CVE-2023-27476.
Security fix for CVE-2022-41717
Security fix for CVE-2023-27320
Release of gnutls 3.8.0 (fixes CVE-2023-0361) Release of gnutls guile bingings as standalone package.
The container bci/openjdk was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or spoofing.
One of the security fixes released as DSA 5356 introduced a regression in the processing of specific WAV files. Updated sox packages are available to correct t…
Multiple security issues were discovered in Thunderbird, which could result in denial of service, the execution of arbitrary code or spoofing.
The container bci/python was updated. The following patches have been included in this update:
The container sles-15-sp3-chost-byos-v20230313-x86-64 was updated. The following patches have been included in this update:
Several security issues were fixed in Kerberos.
Apply upstream libtiff fix for CVE-2022-4645
Backport fix for CVE-2021-32142
Release of stargz snapshotter v0.14.2 https://github.com/containerd/stargz- snapshotter/releases/tag/v0.14.2 This release uses containerd v1.7.0-rc.1 which con…
Update to python-werkzeug-2.2.3.
Backport patch for CVE-2023-25587.
Update containerd to 1.16.19 - Mitigates CVE-2023-25153 / GHSA-259w-8hf6-59c2 - Mitigates CVE-2023-25173 / GHSA-hmfx-3pcx-653p
Several security issues were fixed in abcm2ps.
Several security issues were fixed in Firefox.
