Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while fo…
Jamie Landeg-Jones and Manfred Paul discovered a buffer overflow vulnerability in NGINX, a small, powerful, scalable web/proxy server. NGINX has a buffer overf…
An XXE vulnerability was found in Nokogiri, a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. XML Schemas parsed by N…
Several vulnerabilities were discovered in Samba, SMB/CIFS file, print, and login server for Unix
The container caasp/v4.5/velero-restic-restore-helper was updated. The following patches have been included in this update:
The container caasp/v4.5/velero-plugin-for-microsoft-azure was updated. The following patches have been included in this update:
The container caasp/v4.5/velero-plugin-for-gcp was updated. The following patches have been included in this update:
The container caasp/v4.5/velero-plugin-for-aws was updated. The following patches have been included in this update:
The container suse/sles12sp4 was updated. The following patches have been included in this update:
The MS-WSP dissector could consume excessive amounts of memory (CVE-2021-22207). References: - https://bugs.mageia.org/show_bug.cgi?id=28915
The container caasp/v4.5/velero was updated. The following patches have been included in this update:
The container caasp/v4.5/skuba-tooling was updated. The following patches have been included in this update:
The container caasp/v4.5/rsyslog was updated. The following patches have been included in this update:
The container caasp/v4.5/k8s-sidecar was updated. The following patches have been included in this update:
The container ingress-nginx-controller was updated. The following patches have been included in this update:
The container caasp/v4.5/helm-tiller was updated. The following patches have been included in this update:
Roman Fiedler found that libX11, the X11 protocol client library, was vulnerable to protocol command injection due to insufficient validation of arguments to s…
Buffer overrun from integer overflow in array subscripting calculations (CVE-2021-32027). Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE. (CVE-2021-…
There is a flaw in the opj2_compress program in openjpeg2. An attacker who is able to submit a large number of image files to be processed in a directory by op…
Jasper Lievisse Adriaanse reported an integer overflow flaw in lz4, a fast LZ compression algorithm library, resulting in memory corruption. For the stable dis…
The container suse/sles12sp5 was updated. The following patches have been included in this update:
The container suse/sles12sp4 was updated. The following patches have been included in this update:
The container suse/sles12sp3 was updated. The following patches have been included in this update:
A security update is now available for Red Hat Single Sign-On 7.4 from the Customer Portal. Red Hat Product Security has rated this update as having a security…
