Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Speex could be made to denial of service if it received a specially crafted WAV file.
Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service, bypass of deserialization restrictions or info…
The container bci/python was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/openjdk was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
Security fix for: - CVE-2022-0157 - CVE-2022-0196 - CVE-2022-0197 - CVE-2022-0238
**Version 2.17.1** Bug * 163: Backport GHSA-jq4p-mq33-w375 to v2 thanks to @Slamdunk
**Version 2.17.1** Bug * 163: Backport GHSA-jq4p-mq33-w375 to v2 thanks to @Slamdunk
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, information dis…
Several issues were found in ConnMan, a connection manager for embedded devices, that could cause denial of service via service crash or excessive CPU usage.
The container bci/bci-micro was updated. The following patches have been included in this update:
[CVE-2020-16154] remove the functionality to verify CHECKSUMS signature
Rebuild to fix [RUSTSEC-2022-0006](https://rustsec.org/advisories/RUSTSEC-2022-0006.html) (possible memory corruption caused by a data race) and [CVE-2022-2165…
BlueZ could be made to crash or run programs if it received specially crafted network traffic.
Several security issues were fixed in NVIDIA graphics drivers.
Python could be made to execute arbitrary code or denial of service if it received a specially crafted input.
Security fix for CVE-2022-23853
Update to lua 5.4.4, 5.3.6. Note that while this fixes CVE-2021-43519, it was also fixed in 5.4.3-4.
Bump to v3.4.4
xterm, an X terminal emulator, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.
