Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Several vulnerabilities were discovered in lighttpd, a fast webserver with minimal memory footprint. CVE-2022-37797
The container suse/sle15 was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container bci/ruby was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
The following vulnerabilities have been discovered in the WPE WebKit web engine: CVE-2022-32886
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-32886
The container suse/sles12sp5 was updated. The following patches have been included in this update:
A heap-based buffer overflow vulnerability was discovered in gdal, a Geospatial Data Abstraction Library, which could result in denial of service or potentiall…
The container suse/sles/15.4/virt-operator was updated. The following patches have been included in this update:
The container suse/sles/15.4/libguestfs-tools was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-launcher was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-handler was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-controller was updated. The following patches have been included in this update:
Rhodri James discovered a heap use-after-free vulnerability in the doContent function in Expat, an XML parsing C library, which could result in denial of servi…
Sandipan Roy discovered two vulnerabilities in InfoZIP's unzip program, a de-archiver for .zip files, which could result in denial of service or potentially th…
Several vulnerabilities were discovered in BIND, a DNS server implementation. CVE-2022-2795
The container bci/rust was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
The container bci/dotnet-sdk was updated. The following patches have been included in this update:
When injecting an HTML base element, some requests would ignore the CSP's base-uri settings and accept the injected element's base instead (CVE-2022-40956). By…
