Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
The container ses/7/rook/ceph was updated. The following patches have been included in this update:
The container ses/7/ceph/ceph was updated. The following patches have been included in this update:
The container ses/7/ceph/grafana was updated. The following patches have been included in this update:
The container ses/7/cephcsi/cephcsi was updated. The following patches have been included in this update:
The container sles-15-sp2-chost-byos-v20210405 was updated. The following patches have been included in this update:
The container suse-sles-15-sp2-chost-byos-v20210405-hvm-ssd-x86_64 was updated. The following patches have been included in this update:
Several vulnerabilities were discovered in smarty3, a template engine for PHP. CVE-2018-13982
Cyku Hong from DEVCORE discovered that php-nette, a PHP MVC framework, is vulnerable to a code injection attack by passing specially formed parameters to URL t…
In XStream there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed …
The container suse/sles12sp4 was updated. The following patches have been included in this update:
The container suse/sles12sp3 was updated. The following patches have been included in this update:
yargs-parser could be tricked into adding or modifying properties of Object.prototype using a "__proto__" payload (CVE-2020-7608). References: - https://bugs.m…
Multiple vulnerabilities were discovered in cURL, an URL transfer library: CVE-2020-8169
Several issues have been found by ClusterFuzz in leptonlib, an image processing library.
Two issues have been found in ldb, an LDAP-like embedded database, for example used with samba.
Kevin Chung discovered that lxml, a Python binding for the libxml2 and libxslt libraries, did not properly sanitize its input. This would allow a malicious use…
OpenSSL has patched two high-severity crypto bugs. Upgrade now!
The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-27918
A NULL pointer dereference was found in the signature_algorithms processing in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service.
An issue has been found in lxml, a pythonic binding for the libxml2 and libxslt libraries.
Moshe Kol and Shlomi Oberman of JSOF discovered several vulnerabilities in dnsmasq, a small caching DNS proxy and DHCP/TFTP server. They could result in denial…
An update for pki-console, pki-core, and redhat-pki-theme is now available for Red Hat Certificate System 9.4 EUS. Red Hat Certificate System 9.4 EUS is a spec…
The container suse/sle15 was updated. The following patches have been included in this update:
Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks. For additional…
