Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack. (CVE-2023-28427) References: - https://bugs.mageia.org/show_bug.cgi?id=31734
The container sles-15-sp4-chost-byos-v20230410-arm64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp4-chost-byos-v20230410-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp4-chost-byos-v20230410-x86_64-gen2 was updated. The following patches have been included in this update:
A flaw was found in keepalived, a failover and monitoring daemon for LVS clusters, where an improper authentication vulnerability allows an unprivileged' user …
The container bci/golang was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
Attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal. (CVE-2023-28371) References: - http…
Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Clearte…
/sys/fs/cgroup is writable when cgroupns isn't unshared (CVE-2023-25809) Regression that reintroduced CVE-2019-19921 - Incorrect Access Control leading to Esca…
Denial of service via the End of Archive tag function of the peazip/pea UNPEA feature. (CVE-2023-24785) References: - https://bugs.mageia.org/show_bug.cgi?id=3…
It was discovered that there was a potential path-traversal vulnerability in GruntJS, a multipurpose task runner and build system tool. This could have been ex…
The container suse/sle15 was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/ruby was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container suse/sles/15.5/virt-operator was updated. The following patches have been included in this update:
The container suse/sles/15.5/libguestfs-tools was updated. The following patches have been included in this update:
The container suse/sles/15.5/virt-launcher was updated. The following patches have been included in this update:
The container suse/sles/15.5/virt-handler was updated. The following patches have been included in this update:
The container suse/sles/15.5/virt-exportserver was updated. The following patches have been included in this update:
