Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container bci/nodejs was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
Tss2_RC_SetHandler and Tss2_RC_Decode both index into layer_handler with an 8 bit layer number, but the array only has TPM2_ERROR_TSS2_RC_LAYER_COUNT entries, …
Mark Esler and David Fernandez Gonzalez discovered that EditorConfig Core C incorrectly handled memory when handling certain inputs. An attacker could possibly…
Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-42826) (CVE-2023-23517) (CVE-2023-23518) References: - https://bugs.…
A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of th…
Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of…
Two vulnerabilities were discovered in HAProxy, a fast and reliable load balancing reverse proxy, which may result in denial of service, or bypass of access co…
The container suse-sles-15-sp4-chost-byos-v20230210-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp4-chost-byos-v20230210-x86_64-gen2 was updated. The following patches have been included in this update:
"Linux-based operating systems are also known for their stability and security. Unlike Windows, which is often targeted by malware and viruses, Linux-based ope…
The container sles-15-sp4-chost-byos-v20230210-arm64 was updated. The following patches have been included in this update:
The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-tftpd was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-ssh was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-squid was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-salt-broker was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
**Version 4.4.50** (2023-02-01) * **security cve-2022-24895** [Security/Http] Remove CSRF tokens from storage on successful login (nicolas-grekas) * **security…
**Version 4.4.50** (2023-02-01) * **security cve-2022-24895** [Security/Http] Remove CSRF tokens from storage on successful login (nicolas-grekas) * **security…
A security researcher discovered a serious security vulnerability that risked Toyota’s suppliers’ and users’ data.…Researcher Discovers Backdoor In Toyota Supp…
This update fixes multiple file format validation vulnerabilities that could result in memory access violations such as buffer overflows and floating point exc…
