Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file…
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixma…
Maddie Stone reported a heap-based buffer overflow flaw in pixman, a pixel-manipulation library for X and cairo, which could result in denial of service or pot…
The container suse/sle-micro/5.2/toolbox was updated. The following patches have been included in this update:
The container bci/golang was updated. The following patches have been included in this update:
When creating cybersecurity policies, organizations often focus on known security standards as well as their…Five Steps to Secure Your Critical Assets from Cyb…
The container suse/sle-micro/5.1/toolbox was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-squid was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
The container suse/manager/4.3/proxy-httpd was updated. The following patches have been included in this update:
The container suse/sle15 was updated. The following patches have been included in this update:
Cybercrime is a real threat. According to the US Cybersecurity & Infrastructure Security Agency (CISA),…7 Ways to Protect Your Business Against Cyber Threats o…
Two vulnerabilities were found in the Xkb extension of the X.org X server, which could result in denial of service or possibly privilege escalation if the X se…
The container suse/sle15 was updated. The following patches have been included in this update:
It was discovered that libjettison-java, a collection of StAX parsers and writers for JSON, was vulnerable to a denial-of-service attack, if the attacker provi…
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/python was updated. The following patches have been included in this update:
The container bci/nodejs was updated. The following patches have been included in this update:
A security update for Debezium is now available for Red Hat Integration. Red Hat Product Security has rated this update as having a security impact of Moderate…
An update for linux-firmware is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support, Red Hat Enterprise Linux 7.7 Telco Extended Update Supp…
The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update:
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42799
An unauthenticated remote host could send an invalid ClientHello message in which the declared length of the cookie extends past the end of the message. A DTLS…
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der. (CVE-2021-46848) References: - https://bugs.mageia.…
