Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Username is not escaped in the "welcomeuser" message (T308471). Bundled guzzlehttp/guzzle has been updated to 6.5.8, fixing several issues (CVE-2022-29248, CVE…
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely …
An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causi…
A memory corruption issue that could be triggered when diffing binary files. (CVE-2014-9862) References: - https://bugs.mageia.org/show_bug.cgi?id=30819
Control code in cookie denial of service. (CVE-2022-35252) References: - https://bugs.mageia.org/show_bug.cgi?id=30794 - https://curl.se/docs/CVE-2022-35252.ht…
Multiple file parsing vulnerabilities have been fixed in libraw. They are concerned with the dng and x3f formats. CVE-2020-35530
Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.3.36.…
The container suse/sles/15.4/virt-operator was updated. The following patches have been included in this update:
The container suse/sles/15.4/libguestfs-tools was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-launcher was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-handler was updated. The following patches have been included in this update:
The container suse/sles/15.4/virt-controller was updated. The following patches have been included in this update:
It was found that GLib, a general-purpose portable utility library, could be used to print partial contents from arbitrary files. This could be exploited from …
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
The container bci/rust was updated. The following patches have been included in this update:
The container suse/pcp was updated. The following patches have been included in this update:
The container bci/openjdk was updated. The following patches have been included in this update:
Nick Wellnhofer discovered that the xsltApplyTemplates function in libxslt, an XSLT processing runtime library, is prone to a use-after-free flaw, resulting in…
A vulnerability was discovered in open-vm-tools, an open source implementation of VMware Tools, allowing an unprivileged local guest user to escalate their pri…
The container suse/sles12sp5 was updated. The following patches have been included in this update:
The container suse-sles-15-sp4-chost-byos-v20220819-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp4-chost-byos-v20220819-x86_64-gen2 was updated. The following patches have been included in this update:
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
