Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Use-after-free in sampled_data_sample (called from sampled_data_continue and interp). (CVE-2021-45944) Heap-based buffer overflow in sampled_data_finish (calle…
UserAttributeSimilarityValidator incurred significant overhead evaluating submitted password that were artificially large in relative to the comparison values.…
squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file durin…
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used…
Critical evasion in suricata (CVE-2021-35063) References: - https://bugs.mageia.org/show_bug.cgi?id=29012 - https://lists.fedoraproject.org/archives/list/packa…
The following updated rpms for Oracle Linux Cloud Native Environment 1.1 ha= ve been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 6 Extended Lifecycle Support (ELS) have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unb= reakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unb= reakable Linux Network:
Multiple issues have been discovered in vim: an enhanced vi text editor: CVE-2017-17087 fileio.c in Vim sets the group ownership of a .swp file to the editor's…
Version 0.102 of ClamAV, an anti-virus toolkit, is end-of-life. ClamAV has been updated to version 0.103 to be able to receive virus signature updates.
The container suse/sles/15.3/virt-operator was updated. The following patches have been included in this update:
The container suse/sles/15.3/libguestfs-tools was updated. The following patches have been included in this update:
The container suse/sles/15.3/virt-handler was updated. The following patches have been included in this update:
The container suse/sles/15.3/virt-controller was updated. The following patches have been included in this update:
The container suse/sles/15.3/virt-api was updated. The following patches have been included in this update:
It was discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, did not properly sanitize HTML messages. This would allow an attack…
It was discovered that sphinxsearch, a fast standalone full-text SQL search engine, could allow arbitrary files to be read by abusing a configuration option.
The container bci/openjdk was updated. The following patches have been included in this update:
The container bci/openjdk-devel was updated. The following patches have been included in this update:
The container bci/minimal was updated. The following patches have been included in this update:
The container bci/micro was updated. The following patches have been included in this update:
The container bci/init was updated. The following patches have been included in this update:
