Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Jan-Niklas Sohn discovered several vulnerabilities in X server extensions in the X.Org X server, which may result in privilege escalation if the X server is ru…
The Debian Project has announced the general availability of Debian GNU/Linux 11.6 as the sixth ISO release for the project's latest Debian GNU/Linux 11 ''Bull…
The container sles-15-sp4-chost-byos-v20221215-arm64 was updated. The following patches have been included in this update:
The container sles-15-sp4-chost-byos-v20221118-arm64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp4-chost-byos-v20221215-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp4-chost-byos-v20221215-x86_64-gen2 was updated. The following patches have been included in this update:
The container sles-15-sp3-chost-byos-v20221215-x86-64 was updated. The following patches have been included in this update:
The container suse-sles-15-sp3-chost-byos-v20221215-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
Multiple vulnerabilities have been discovered in NSS, the worst of which could result in arbitrary code execution.
An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages (CVE-2022-468…
An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages (CVE-2022-468…
Affected versions of FreeRDP are missing input length validation in 'drive' channel. A malicious server can trick a FreeRDP based client to read out of bound d…
net/http: limit canonical header cache by bytes, not entries (bsc#1206135) (CVE-2022-41717) References: - https://bugs.mageia.org/show_bug.cgi?id=31267
This update fixes a denial of service vulnerability in leptonlib. It can be made to crash with an arithmetic exception on specially crafted JPEG files. (CVE-20…
argument injection vulnerability in xfce4-mime-helper from the xfce4-settings package. References: - https://bugs.mageia.org/show_bug.cgi?id=31237
Null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c. (CVE-2022-4121) References: - https://bugs.mageia.org/show_bu…
Fixes missing certificate hostname validation References: - https://bugs.mageia.org/show_bug.cgi?id=31200 - https://lists.fedoraproject.org/archives/list/packa…
Samba has released software updates to remediate multiple vulnerabilities that, if successfully exploited, could allow an attacker to take control of affected …
Multiple issues were found in libde265, an open source implementation of the h.265 video codec, which may result in denial of or have unspecified other impact.
Red Hat Advanced Cluster Management for Kubernetes 2.6.3 General Availability release images, which provide security updates, fix bugs, and update container im…
In the cloud-native space, where applications are purpose built and delivered to run in the cloud, one technology in particular rises above all others '' Kuber…
The container suse/manager/4.3/proxy-tftpd was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-ssh was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-squid was updated. The following patches have been included in this update:
